Server Configuration
Describes the environment variables required to run the server.
| Name | Required | Description | Default |
|---|---|---|---|
| ZKETTLE_DATA | No | Data directory for the SQLite database. | ./data |
| ZKETTLE_HOST | No | Listen address (e.g., 127.0.0.1 or 0.0.0.0). | 127.0.0.1 |
| ZKETTLE_PORT | No | HTTP port for the server. | 3000 |
| ZKETTLE_TUNNEL | No | Expose the server via Cloudflare Quick Tunnel (true/1/yes). | |
| ZKETTLE_METRICS | No | Enable /metrics endpoint (requires ZKETTLE_ADMIN_TOKEN). | |
| ZKETTLE_TLS_KEY | No | TLS private key file path. | |
| ZKETTLE_BASE_URL | No | Base URL for generated links (e.g., https://your-domain.com). | http://localhost:{port} |
| ZKETTLE_TLS_CERT | No | TLS certificate file path. | |
| ZKETTLE_LOG_FORMAT | No | Log format: json or text. | |
| ZKETTLE_ADMIN_TOKEN | No | Admin API bearer token (enables admin endpoints and metrics). | |
| ZKETTLE_TRUST_PROXY | No | Trust X-Forwarded-For headers when behind a reverse proxy (true/1/yes). | |
| ZKETTLE_CORS_ORIGINS | No | Comma-separated allowed CORS origins. | |
| ZKETTLE_DELETE_TOKEN | No | Default delete token used for revoking secrets via the CLI/agent. | |
| ZKETTLE_MAX_SECRET_SIZE | No | Max encrypted secret size in bytes (0 = 500KB default). |
Capabilities
Server capabilities have not been inspected yet.
Tools
Functions exposed to the LLM to take actions
| Name | Description |
|---|---|
No tools | |
Prompts
Interactive templates invoked by user choice
| Name | Description |
|---|---|
No prompts | |
Resources
Contextual data attached and managed by the client
| Name | Description |
|---|---|
No resources | |