Reference

All settings

Every field on the Settings page: what it does, whether it's stored encrypted, and which docs page explains it.

4 min readUpdated 28 September 2026

Everything on the Settings page, section by section, with a link to the setup guide for each key. Fields marked encrypted are encrypted before they're saved, and only their last four characters are ever shown again.

This page is generated

The tables below are built from the same list the Settings page uses, so they're always current.

#Free-quota guard

The first section on the page is a table of every metered provider:

Column	Meaning
Service	The provider
Free plan	Its free allowance, monthly or one-time
Used by this app	What Larvabot has used this period
Provider reports	What the provider itself says is left, for those that report it
Hard cap	Where Larvabot stops. Editable. `0` switches the service off

How the quota guard works

#Keys and connections

#AI

Tried top to bottom. Model fields are optional overrides.

Field	Key	Stored	Notes	Guide
Gemini API key	`GEMINI_API_KEY`	encrypted		Google Gemini
Gemini model	`GEMINI_MODEL`	plain	e.g. `gemini-flash-latest`	Google Gemini
Groq API key	`GROQ_API_KEY`	encrypted		Groq
Groq model	`GROQ_MODEL`	plain	e.g. `openai/gpt-oss-120b`	Groq
Cloudflare account ID	`CLOUDFLARE_ACCOUNT_ID`	plain		Cloudflare Workers AI
Cloudflare Workers AI token	`CLOUDFLARE_AI_TOKEN`	encrypted		Cloudflare Workers AI
Cloudflare model	`CLOUDFLARE_AI_MODEL`	plain	e.g. `@cf/meta/llama-3.3-70b-instruct-fp8-fast`	Cloudflare Workers AI
Cerebras API key	`CEREBRAS_API_KEY`	encrypted		Cerebras
Cerebras model	`CEREBRAS_MODEL`	plain	e.g. `gpt-oss-120b`	Cerebras
Mistral API key	`MISTRAL_API_KEY`	encrypted		Mistral
OpenRouter API key	`OPENROUTER_API_KEY`	encrypted		OpenRouter
OpenRouter model	`OPENROUTER_MODEL`	plain	e.g. `openai/gpt-oss-120b:free`	OpenRouter
Custom AI base URL	`LLM_BASE_URL`	plain	e.g. `http://your-vps:11434/v1`	Custom OpenAI-compatible AI
Custom AI model	`LLM_MODEL`	plain	e.g. `llama3.1`	Custom OpenAI-compatible AI
Custom AI key	`LLM_API_KEY`	encrypted		Custom OpenAI-compatible AI

#Search

Field	Key	Stored	Notes	Guide
Tavily API key	`TAVILY_API_KEY`	encrypted		Tavily
Linkup API key	`LINKUP_API_KEY`	encrypted		Linkup
Exa API key	`EXA_API_KEY`	encrypted		Exa
Serper API key	`SERPER_API_KEY`	encrypted		Serper
Brave Search API key	`BRAVE_API_KEY`	encrypted		Brave Search API
Jina API key	`JINA_API_KEY`	encrypted	Also raises Jina Reader limits	Jina
SearXNG URL	`SEARXNG_URL`	encrypted	Your own server. Include the login if it is password-protected. e.g. `https://user:pass@search.yourdomain.com`	SearXNG

#Contacts

Field	Key	Stored	Guide
Prospeo API key	`PROSPEO_API_KEY`	encrypted	Prospeo
Tomba API key	`TOMBA_API_KEY`	encrypted	Tomba
Tomba API secret	`TOMBA_API_SECRET`	encrypted	Tomba
Hunter API key	`HUNTER_API_KEY`	encrypted	Hunter

#Sending (SMTP)

Brevo: host smtp-relay.brevo.com, port 587, login = your Brevo SMTP login, password = an SMTP key.

Field	Key	Stored	Notes	Guide
SMTP host	`SMTP_HOST`	plain	e.g. `smtp-relay.brevo.com`	Brevo (SMTP)
SMTP port	`SMTP_PORT`	plain	e.g. `587`	Brevo (SMTP)
SMTP login	`SMTP_USER`	encrypted		Brevo (SMTP)
SMTP password / key	`SMTP_PASS`	encrypted		Brevo (SMTP)
Send window (UTC hours, weekdays)	`SEND_WINDOW`	plain	e.g. `7-16`	Brevo (SMTP)

#Inbox (IMAP)

Gmail: host imap.gmail.com, your address, and an app password (Google Account → Security → App passwords).

Field	Key	Stored	Notes	Guide
IMAP host	`IMAP_HOST`	plain	e.g. `imap.gmail.com`	Gmail (IMAP)
IMAP user (the inbox address)	`IMAP_USER`	encrypted		Gmail (IMAP)
IMAP app password	`IMAP_PASS`	encrypted		Gmail (IMAP)

#Alerts (Telegram)

A ping on your phone when a conversation fits really well (85+). Create a bot with @BotFather, paste its token, send the bot any message, then press Detect.

Field	Key	Stored	Notes	Guide
Bot token	`TELEGRAM_BOT_TOKEN`	encrypted	From @BotFather, looks like 123456:ABC…	Telegram alerts
Your chat ID	`TELEGRAM_CHAT_ID`	plain	Filled in by Detect	Telegram alerts

#Telegram groups (read-only)

Flags people asking for what you built in groups you've already joined. Larvabot only reads; it never posts, joins or reacts. Get api_id and api_hash at my.telegram.org → API development tools.

Field	Key	Stored	Notes	Guide
api_id	`TELEGRAM_API_ID`	plain		Telegram groups
api_hash	`TELEGRAM_API_HASH`	encrypted		Telegram groups

#Conversations (optional keys)

Everything works without these; they add sources or raise limits.

Field	Key	Stored	Notes	Guide
YouTube Data API key	`YOUTUBE_API_KEY`	encrypted	Free in Google Cloud: enable YouTube Data API v3, create an API key. Adds YouTube comments.	YouTube
Stack Exchange key	`STACKEXCHANGE_KEY`	plain	Free at stackapps.com: raises the daily limit from 300 to 10,000 requests.	Stack Exchange
GitHub token	`GITHUB_TOKEN`	encrypted	A fine-grained token with no permissions is enough: raises search limits and adds Discussions.	GitHub
Bluesky handle	`BLUESKY_HANDLE`	plain	e.g. you.bsky.social. Bluesky search needs a login.	Bluesky
Bluesky app password	`BLUESKY_APP_PASSWORD`	encrypted	Bluesky → Settings → Privacy and security → App passwords. Not your main password.	Bluesky
Lemmy instance	`LEMMY_INSTANCE`	plain	Default lemmy.world; it searches every federated community it knows.	Lemmy

#Reddit (optional)

Only if you have an approved Reddit API app. Not needed: F5Bot and web search cover Reddit.

Field	Key	Stored	Notes	Guide
Reddit client ID	`REDDIT_CLIENT_ID`	plain		Reddit
Reddit client secret	`REDDIT_CLIENT_SECRET`	encrypted		Reddit

#Things that live elsewhere

Setting	Where
Sender name and address	Each project's Setup tab. Sending setup
Emails per day	Each email campaign, on the Setup tab. Campaigns
Your name, email and password	Account. Account and sign-in

Keep going

Tools and keys overviewEvery free service Larvabot can use, grouped by job, in the order it tries them, with a link to set up each key.Read

The keys you actually needThe smallest set of free keys that makes Larvabot useful, what each extra key adds, and the order to add them in.Read