From 92942fb9f40622844187bd3a1dae44eedc3bfa57 Mon Sep 17 00:00:00 2001 From: sheilattran8 <123210881+sheilattran8@users.noreply.github.com> Date: Tue, 25 Aug 2026 09:43:23 -0700 Subject: [PATCH] docs: document AGENT_CONTROL_RUNTIME_TOKEN_HEADER --- core/configuration.mdx | 32 ++++++++++++++++++++++++++++++++ 1 file changed, 32 insertions(+) diff --git a/core/configuration.mdx b/core/configuration.mdx index 3d64381..1704927 100644 --- a/core/configuration.mdx +++ b/core/configuration.mdx @@ -10,6 +10,7 @@ icon: "gear" |----------|---------|-------------| | `AGENT_CONTROL_URL` | `http://localhost:8000` | Server URL | | `AGENT_CONTROL_API_KEY` | — | API key for authentication | +| `AGENT_CONTROL_RUNTIME_TOKEN_HEADER` | `Authorization` | Header used to send runtime tokens. Must match the server setting. | For server database configuration, use the `AGENT_CONTROL_DB_*` variables in the server section below. @@ -27,6 +28,37 @@ For server database configuration, use the `AGENT_CONTROL_DB_*` variables in the | `API_VERSION` | `v1` | API version prefix | | `API_PREFIX` | `/api` | API path prefix | +### Runtime Token + +| Variable | Default | Description | +|----------|---------|-------------| +| `AGENT_CONTROL_RUNTIME_TOKEN_HEADER` | `Authorization` | Header from which the server reads runtime tokens. Must match the SDK setting. | + +By default, the SDK sends the runtime token in the `Authorization` header as `Authorization: Bearer `. + +If a gateway reserves `Authorization` for its own identity credential, configure the server and SDK to use a dedicated header: + +```bash +export AGENT_CONTROL_RUNTIME_TOKEN_HEADER="X-Agent-Control-Runtime-Token" +``` + +With this setting, Agent Control SDK 8.5.0 or later sends the runtime token in `X-Agent-Control-Runtime-Token` as a raw token without a `Bearer` prefix. `Authorization` remains available for gateway authentication. + +You can alternatively set the header when initializing the SDK: + +```python +agent_control.init( + agent_name="my-agent", + runtime_token_header="X-Agent-Control-Runtime-Token", +) +``` + +If `runtime_token_header` is not provided, the SDK uses `AGENT_CONTROL_RUNTIME_TOKEN_HEADER`. If neither is configured, it defaults to `Authorization`. + + +Upgrading to version 8.5.0 or later does not change the default header. A dedicated header is used only after you configure the environment variable or the SDK option. + + ### CORS | Variable | Default | Description |