Home / Ops / More in this area
Updated Jul 01, 2026 · Affirmology_APIKeys_Registry_v1.md
RULE: this file records WHAT each key is, its purpose, and WHERE the value lives. It never stores the secret value itself. Raw values stay in the env stores below (and should also be backed up in a password manager). Never commit secrets. Last updated 2026-07-01.
affirmology-studio/.env (local studio dev)affirmology-studio-api (RENDER_SERVICE_ID in the .env) - the deployed studioaffirmology-agent/.env (the engine: chart + script + audio)affirmology-demo-worker (set via wrangler secret put)| Key | Purpose | Lives in | Notes |
|---|---|---|---|
| ANTHROPIC_API_KEY | Claude: script gen (Sonnet) + report (Opus, currently OFF) | agent/.env + Render | Balance $9.60 as of 2026-07-01. Reports disabled (--no-pdf). ~$0.10 - 0.20/song. Refill at console.anthropic.com → Billing. Set auto-reload when funded. |
| ELEVENLABS_API_KEY | Voice synthesis for the audio | agent/.env | Billed separately from Anthropic. Jeff has EL credit. |
| ELEVENLABS_VOICE_ID | Config (not secret) | agent/.env | |
| FISH_API_KEY | Fish Audio voices (alt TTS) | agent/.env + studio/.env | |
| GEMINI_API_KEY | Gemini (aux model) | agent/.env | |
| OPENROUTER_API_KEY | OpenRouter (aux model routing) | agent/.env | |
| GOOGLE_CLOUD_PROJECT | Config (not secret) | agent/.env | |
| AIRTABLE_API_KEY | CRM read/write incl. schema (base appSuTUcOQbpkxLUR) | studio/.env + Render | PAT; has schema.bases:write (used to add fields). |
| RESEND_API_KEY | Transactional email (welcomes, batches) | studio/.env + Render + worker secret | From = hello@affirmology.ai. |
| CLOUDFLARE_API_TOKEN | Deploy the demo worker (wrangler deploy) |
studio/.env | "Edit Cloudflare Workers" scope. Jeff issued 2026-06-30. Lets Claude self-deploy the worker. |
| CLOUDFLARE_DEMO_TOKEN | Cloudflare (demo scope) | studio/.env | Purpose TBD/confirm. |
| CLOUDFLARE_STREAMINGPLAYER_TOKEN | Cloudflare Stream (video player) | studio/.env | |
| RENDER_API_KEY | Render management API (env vars, deploys, logs) | studio/.env | |
| RENDER_SERVICE_ID | id of affirmology-studio-api (not secret) |
studio/.env | |
| DEMO_AUTH_TOKEN | Auth: studio ⇄ worker + demo bridge (X-Affirmology-Auth) | studio/.env + Render + worker (MAC_MINI_AUTH_TOKEN) | MUST match the worker's MAC_MINI_AUTH_TOKEN. Verified matching 2026-07-01. |
| CLOUD_STUDIO_AUTH_TOKEN / STUDIO_AUTH_TOKEN | Bearer for Studio API (Hermes/oracles, /api/hermes) | studio/.env + Render | |
| MAC_MINI_URL | Worker → studio render bridge URL | worker secret | Points at the cloud studio now (laptop funnel is dead). |
| FROM_EMAIL / WELCOME_BCC | Config (not secret): sender + welcome BCC | worker + Render | WELCOME_BCC defaults to jeff@affirmology.ai in code. |
| SIGNWELL_API_KEY | SignWell e-sign (LEGACY, NDA moved to free clickwrap) | studio/.env | Unused; safe to retire. |
| EXPO_TOKEN | EAS app builds (apps lane) | provided per session | Keep for the session; don't delete. |
.p8 private key: affirmology-app/asc-api-key.p8 (also affirmology-atlas/asc-api-key.p8). Secret; never commit.YGGKMDU9H2 | Issuer ID: 19bd7795-ced8-487f-add1-a8aaf7a6d81f (ids, not secrets)6784908433 ai.affirmology.app; Atlas 6784894586 ai.affirmology.atlas