.env.example

# Coinbase (CDP) API key. Read by `load_secrets` and required for MORE than live trading:
# candle history is fetched through the authenticated client, so `keel fetch` (and with it
# paper trading and `keel simulate`, which read the same cache) fails with an
# AuthenticationError when these are empty. A read-only CDP key is enough -- trading
# scopes are only needed if you let the agent place orders.
CDP_API_KEY=
CDP_API_SECRET=

# Read by `scripts/robinhood_smoke.py` ONLY -- the read-only live probe. `load_secrets` does not
# read these yet, so setting them does not wire the Robinhood adapter into a run; see
# `packages/keel-broker-robinhood/README.md`. ROBINHOOD_PRIVATE_KEY is the base64 of the raw
# 32-byte Ed25519 seed, not a PEM.
ROBINHOOD_API_KEY=
ROBINHOOD_PRIVATE_KEY=

# Alpaca keys for the equities paper profile (issue #370 B2). Read by `load_alpaca_secrets`
# from the environment first and this file second, and consumed only when a config's
# `broker:` section selects `name: alpaca` (config.paper-equities.yaml does). PAPER keys
# suffice for the paper profile: generate them from the Alpaca dashboard's paper trading
# account, and `broker.endpoint: paper` selects paper-api.alpaca.markets -- the adapter
# derives the host from that word and accepts no URL, so these cannot be pointed at the
# live venue by any configuration.
ALPACA_API_KEY_ID=
ALPACA_API_SECRET_KEY=

# Optional. Where CRITICAL escalations are POSTed as JSON (ntfy, Pushover, a Slack/Discord
# webhook, anything that accepts a POST body). Unset means alerting is off entirely and keel
# makes no network call for it -- but then `reconcile.position_unprotected` ("this tranche is
# held with NO protective stop -- re-place one or close it") reaches only the log file on the
# machine the agent runs on. With one cycle per UTC day, nobody reads that in time.
KEEL_ALERT_WEBHOOK=