Skip to main content

Configuration

Vanta reads its agent-layer config from vanta-ts/.env (gitignored; .env.example documents every key). The kernel is configured by a few environment variables passed at launch.

Pick a model backend

vanta setup # interactive: openai | gemini | anthropic | openrouter | ollama

This writes VANTA_PROVIDER + VANTA_MODEL to vanta-ts/.env. The default is local Ollama (qwen2.5:14b) — no API key, runs offline. The full first-run flow (hidden key prompt, live validation, messaging, Google auth, doctor) is on the Setup wizard page.

Core environment variables

VariablePurpose
VANTA_PROVIDERopenai · ollama · anthropic · gemini · openrouter
VANTA_MODELModel id for the chosen provider
VANTA_EFFORT_LEVELlow · medium · high · xhigh · max (maps to reasoning effort / thinking budget)
OPENAI_API_KEY / ANTHROPIC_API_KEYProvider keys (only the one you use)
VANTA_OLLAMA_URLLocal Ollama endpoint
VANTA_KERNEL_URLKernel address (default 127.0.0.1:7788)
VANTA_ROOTOverrides the kernel's working-dir scope — set per project
VANTA_MAX_ITERMax tool-call iterations per turn
VANTA_HOMEGlobal store dir (default ~/.vanta) — holds skills, memory, brain

Provider keys, fail-fast

Config is validated at startup — a missing or malformed value fails fast with an actionable message rather than at first use. Secrets are never logged or echoed; if you paste a real key, rotate it.

Search backend (optional)

VANTA_SEARCH_PROVIDER=auto # default: configured providers, then Brave browser and Bing
VANTA_SEARCH_URL=... # for self-hosted Searxng
SERPAPI_KEY=... / BRAVE_KEY=...

ddg and jina_ddg remain explicit legacy options, but automatic routing never uses them because DuckDuckGo frequently bot-blocks agent traffic. For stronger coverage, self-host Searxng or configure Brave, SerpAPI, Exa, Tavily, Parallel, Firecrawl, or xAI search.

Where state lives

PathWhat
.vanta/ (per project)events.jsonl, approvals.tsv, goals.tsv, loop + handoff state
~/.vanta/ (global)skills/, memories/, brain/ — git-versioned for free history

See Providers for the full backend matrix and Skills & memory for the store layout.