> ## Documentation Index
> Fetch the complete documentation index at: https://docs.anonalabs.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Configuration and profiles

> Where the CLI keeps settings and credentials, and the variables it reads.

Every setting resolves in this order: the flag, then the environment, then the selected profile in the config file.

| Setting | Flag | Environment | Profile key | Default |
| - | - | - | - | - |
| API key | `--api-key` | `ANONA_COMPUTE_API_KEY`, `E2B_API_KEY` (and `ANONA_API_KEY` when it holds an `e2b_` key) | `api_key` | browser sign-in |
| Domain | | `ANONA_COMPUTE_DOMAIN`, `E2B_DOMAIN` | `domain` | `compute.anonalabs.com` |
| API URL | `--api-url` | `ANONA_COMPUTE_API_URL`, `E2B_API_URL` | `api_url` | `https://api.<domain>` |
| Dashboard URL | `--web-url` (login) | `ANONA_COMPUTE_WEB_URL` | `web_url` | `https://app.<domain>` |
| Default template | `-t` | | `default_template` | `base` |
| Profile | `--profile` | `ANONA_COMPUTE_PROFILE` | | `default` |

```bash cli_config.sh theme={null}
anona-compute config set default_template python
anona-compute config get default_template
anona-compute --profile staging config set domain compute.anonalabs.com
anona-compute config list            # every profile; API keys are masked
```

## Files

| What | Where |
| - | - |
| Settings | `$XDG_CONFIG_HOME/anona-compute/config.toml` (usually `~/.config/anona-compute/config.toml`; `ANONA_COMPUTE_CONFIG` overrides), mode 0600 |
| Browser sign-in secret | The OS keychain (macOS Keychain, Windows Credential Manager, Secret Service on Linux), else `credentials.json` (mode 0600) next to `config.toml`. `ANONA_COMPUTE_CREDENTIAL_STORE=file` or `keyring` forces one |
| SSH keys for `anona-compute ssh` | `$XDG_RUNTIME_DIR/anona-compute/ssh/<sandbox id>`, ephemeral |

The browser sign-in keeps a dashboard session for the machine (shown on the dashboard's **CLI & agent sessions** page as `CLI on <hostname>`) and trades it for an API token that lasts 15 minutes. Signing out, revoking the session on that page, removal from the organization and role changes reach the API within seconds, also for tokens already issued; after a role change the CLI (and a running MCP server) fetches a new token on its own.

The CLI never reads Anona Memory's settings or keys, and never sends an Anona Memory key to the compute API.


This documentation is built and hosted on [Mintlify](https://mintlify.com), a developer documentation platform.