Environment Variables
Complete reference for all environment variables used by the Rune SDK and dashboard.
SDK (Python)
The SDK reads these environment variables in ShieldConfig.__post_init__. Constructor arguments take precedence over environment variables.
| Variable | Description | Default |
|---|---|---|
| RUNE_API_KEY | API key for authentication. Starts with rune_live_ | None (required for cloud features) |
| RUNE_EVENTS_ENDPOINT | Event ingestion endpoint URL | https://events.runesec.dev |
| RUNE_API_ENDPOINT | API endpoint for policy sync and agent registration | https://api.runesec.dev |
| RUNE_DEBUG | Enable debug logging. Accepts 1, true, or yes | false |
| RUNE_AGENT_ID | Default agent identifier for events | None |
| RUNE_AGENT_TAGS | Comma-separated default tags (e.g. prod,research) | None |
Example
Terminalbash
export RUNE_API_KEY=rune_live_xxx
export RUNE_AGENT_ID=my-agent
export RUNE_AGENT_TAGS=prod,customer-facing
export RUNE_DEBUG=1Pythonpython
from rune import Shield
# Shield reads all RUNE_* env vars automatically
shield = Shield() # no arguments neededDashboard (Next.js)
Required for running the Rune dashboard locally or in production.
| Variable | Description | Required |
|---|---|---|
| NEXT_PUBLIC_CONVEX_URL | Convex deployment URL (*.convex.cloud) | Yes |
| NEXT_PUBLIC_CLERK_PUBLISHABLE_KEY | Clerk publishable key (pk_*) | Yes |
| CLERK_SECRET_KEY | Clerk secret key for server-side auth | Yes |
| CONVEX_DEPLOY_KEY | For convex deploy in CI | Deploy only |
| SKIP_ENV_VALIDATION | Set to 1 to bypass runtime env checks (CI builds) | CI only |