Configuration Reference
Environment variables, workspace settings, and proxy configuration for the Intutic platform.
Environment Variables
Control Plane
| Variable | Required | Default | Description |
|---|---|---|---|
DATABASE_URL | ✅ | — | PostgreSQL connection string |
DB_DIALECT | ❌ | postgres | Database dialect |
VALKEY_URL | ❌ | redis://127.0.0.1:6379 | Valkey/Redis connection URL |
FALKORDB_URL | ❌ | redis://127.0.0.1:6377 | FalkorDB connection URL |
JWT_SECRET | ✅ | — | Secret for signing JWT tokens |
NODE_ENV | ❌ | development | development, production, test |
PORT | ❌ | 3001 | Control plane HTTP port |
SEED_DEMO | ❌ | false | Seed demo data on startup |
CLI
| Variable | Description |
|---|---|
INTUTIC_API_URL | Control plane URL override |
INTUTIC_API_KEY | Virtual API key (vk_*) for authentication |
CODEX_HOME | Codex home directory (used for Codex detection) |
Proxy
| Variable | Description |
|---|---|
INTUTIC_PROXY_PORT | Proxy gateway port |
INTUTIC_PROXY_URL | Full proxy URL |
ANTHROPIC_BASE_URL | Override for Anthropic API base URL |
OPENAI_BASE_URL | Override for OpenAI API base URL |
Local Development Stack
bash
# Start all services
docker compose up -d
# Services and ports:
# PostgreSQL: 5434
# Valkey: 6379
# FalkorDB: 6377Connection strings
bash
# Dev database
export DATABASE_URL=postgresql://intutic:changeme@127.0.0.1:5434/intutic
# Test database (isolated)
export DATABASE_URL=postgresql://intutic:changeme@127.0.0.1:5436/intuticTest stack
bash
# Isolated test services on different ports
docker compose -f docker-compose.test.yml up -d
# Test ports:
# PostgreSQL: 5436
# Valkey: 6380
# FalkorDB: 6378Workspace Settings
Workspaces are the top-level organizational unit. Each workspace has:
| Setting | Type | Description |
|---|---|---|
| Workspace ID | wk_* | Auto-generated unique identifier |
| Name | string | Human-readable workspace name |
| Plan | enum | free_trial, pro, team, enterprise |
| Budget tiers | object | Per-role budget limits |
Workspace Roles (RBAC)
| Role | Access Level |
|---|---|
OWNER | Full control — billing, settings, member management |
ADMIN | Manage SOPs, members, budgets |
EM | Engineering Manager — view reports, manage budgets |
DEVELOPER | Use agents, view own traces |
VIEWER | Read-only access to dashboard |
Hierarchy: OWNER > ADMIN > EM > DEVELOPER > VIEWER
Budget Tiers
| Tier | Intended for |
|---|---|
JUNIOR | Junior developers — lowest budget ceiling |
SENIOR | Senior developers |
STAFF | Staff engineers |
PRINCIPAL | Principal engineers — highest budget ceiling |
Model Routing Tiers
| Tier | Usage |
|---|---|
frontier | Latest, most capable models (e.g., Claude 4, GPT-4.5) |
economy | Cost-effective models for routine tasks |
local | Locally-hosted models for maximum privacy |
Execution Modes
| Mode | Description |
|---|---|
STANDARD | Normal operation — enforcement actions applied |
PLAN_ONLY | Generate execution plan without running |
SHADOW | Run enforcement in shadow mode (log only, don't block) |
AUTONOMOUS | Fully autonomous — minimal human oversight |
ID Conventions
All IDs in Intutic use prefixed nanoid format:
| Prefix | Entity |
|---|---|
wk_ | Workspace |
mb_ | Member |
tr_ | Trace |
sp_ | SOP |
vk_ | Virtual API Key |
ev_ | Event |
tc_ | Tool Call |
in_ | Incident |
an_ | Anomaly |
se_ | Session |
Never use raw UUIDs or Date.now() directly. Use newId(prefix) and newIso() from @intutic/id.