> ## Documentation Index
> Fetch the complete documentation index at: https://docs.tolmo.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Configure the CLI with environment variables

> Set API credentials, organization context, profiles, and installer options for the Tolmo CLI.

Use environment variables to configure Tolmo in your shell or CI environment.

| Variable | Behavior |
| - | - |
| `TOLMO_API_TOKEN` | API key or user token. When set, bypasses profile configuration and cached credentials |
| `TOLMO_ORG_SLUG` | Organization slug. Overrides the saved organization; required for organization commands with `TOLMO_API_TOKEN` unless you pass `--org` |
| `TOLMO_API_URL` | API base URL. Overrides the profile URL; defaults to `https://api.tolmo.com` without a profile |
| `TOLMO_PROFILE` | Profile name used when `--profile` is absent; defaults to `default` |
| `TOLMO_APP_URL` | Base URL for links the CLI prints into the Tolmo app; otherwise inferred from the API URL |
| `TOLMO_DISABLE_UPDATE_CHECK` | Any non-empty value disables update checks; checks are also skipped when `CI=true` |
| `TOLMO_DISABLE_SKILL_PROMPT` | Any non-empty value suppresses the agent skill installation prompt |
| `TOLMO_INSTALL_DIR` | Installer-only override for the directory containing the CLI binary |
| `TOLMO_SYSTEM_BIN_DIR` | Installer-only override for the system fallback directory; defaults to `/usr/local/bin` |

## Configuration precedence

| Setting | Resolution order, highest priority first |
| - | - |
| Profile | `--profile`, `TOLMO_PROFILE`, `default` |
| Organization | `--org`, `TOLMO_ORG_SLUG`, profile organization |
| API URL with a profile | `TOLMO_API_URL`, profile URL, production URL |
| API URL with `TOLMO_API_TOKEN` | `TOLMO_API_URL`, production URL |

`TOLMO_API_TOKEN` bypasses the entire profile. A profile's custom API URL and organization do not apply in this mode.

At login, `--api-url` takes precedence over `TOLMO_API_URL` and an existing profile URL. It is a login option, not a global flag. Cached user credentials are bound to the API origin that issued them. Sign in to a separate profile when you change environments.

Run `tolmo auth status` to see each effective value and its source.

## CI example

Inject your API key from your CI provider's secret store:

```bash theme={null}
export TOLMO_API_TOKEN="your-api-key"
export TOLMO_ORG_SLUG="acme"
tolmo findings list --status open --severity critical --json
```

See [CI/CD](https://docs.tolmo.com/guides/ci-cd.md) for complete pipeline examples.

## Installer example

Set the install directory on the shell that runs the installer:

```bash theme={null}
curl -fsSL https://tolmo.com/install.sh | TOLMO_INSTALL_DIR="$HOME/.local/bin" sh
export PATH="$HOME/.local/bin:$PATH"
```


This documentation is built and hosted on [Mintlify](https://mintlify.com), a developer documentation platform.