OPENAI_API_KEY="sk-1234"
ANTHROPIC_API_KEY=""
OLLAMA=""
PROMPT_TOOLKIT_NO_CPR=1
CAI_STREAM=false
CAI_MODEL="alias1"
# Model sampling parameters (optional - defaults shown)
# CAI_TEMPERATURE=0.7
# CAI_TOP_P=1.0

# Alias API key (used for alias1, alias2, and alias2-mini)
ALIAS_API_KEY="sk-your-alias-key-here"

# Open-source mode. Set to 1/true to:
#   - bypass the startup license check (no ALIAS_API_KEY required to start),
#   - route update checks and `cai --update` to public PyPI instead of the
#     private Alias package index.
# CAI_LICENSE_OFF=1

# Set to true ONLY when running an authorised internal pentest. When false (default), fetch_url blocks loopback / RFC1918 / link-local / cloud-metadata hosts and non-http(s) schemes to prevent SSRF via prompt injection.
CAI_FETCH_ALLOW_INTERNAL=false
# Override the User-Agent used by fetch_url (OPSEC).
# CAI_FETCH_USER_AGENT="Mozilla/5.0 ..."