TokenPak Configuration Reference¶
TokenPak is configured via environment variables (or a ~/.tokenpak/config.yaml file). Environment variables always take precedence over config-file values.
Single source of truth: the complete, authoritative list of every
TOKENPAK_*variable — names, defaults, and types — lives in Environment Variables. This page covers how configuration is applied plus the security-relevant defaults worth calling out; it intentionally does not duplicate the full variable table (which previously drifted out of sync with it).
API Keys¶
| Variable | Required | Description |
|---|---|---|
ANTHROPIC_API_KEY |
✅ Yes (if using Anthropic) | Anthropic API key |
OPENAI_API_KEY |
✅ Yes (if using OpenAI) | OpenAI API key |
GOOGLE_API_KEY or GEMINI_API_KEY |
✅ Yes (if using Google) | Google / Gemini API key |
At least one API key is required. The proxy auto-detects which provider to use based on the model name.
Bind address & network exposure (security-relevant)¶
By default TokenPak binds the proxy to 127.0.0.1 (localhost only) — it is not reachable from other machines out of the box.
| Variable | Default | Description |
|---|---|---|
TOKENPAK_BIND_ADDRESS |
127.0.0.1 |
Proxy listen address. Set to 0.0.0.0 only when you intentionally need LAN/Docker access — and pair it with TOKENPAK_PROXY_KEY and dashboard auth. |
TOKENPAK_PORT |
8766 |
Proxy listen port. |
Binding to 0.0.0.0 exposes the proxy on all network interfaces — do this deliberately and with authentication enabled. See Security.
How configuration is applied¶
Environment variables (highest precedence):
export ANTHROPIC_API_KEY=sk-ant-...
export TOKENPAK_PORT=8766
tokenpak serve
Config file — ~/.tokenpak/config.yaml:
server:
port: 8766
host: "127.0.0.1"
Common recipes¶
Disable compaction (pure passthrough proxy):
export TOKENPAK_COMPACT=0
Debug mode (verbose tracing):
export TOKENPAK_TRACE=1
export TOKENPAK_REQUEST_LOGGER=1
See Quick Start for setup and Environment Variables for the complete TOKENPAK_* reference.