Skip to main content
The draft CLI reads these environment variables; it does not load HAIP 1 configuration files or support their transport settings. help requires no environment. verify reads its record and independently trusted manifest from files and does not need service credentials. Other commands require both HAIP_URL and HAIP_TOKEN. For local development, copy the printed producer credential into a private terminal environment and enable the localhost exception. Do not commit a token, place it in an origin URL, paste it into a public command transcript or expose an operator credential to a producer script. An idempotency key is a command argument, not a replacement for authentication. Generate it once per logical mutation and preserve it across retries. Rotating the bearer credential does not reset producer identity, retained quotas or execution occurrence consumption. Exports are created with private file permissions and exclusive creation. Choose a new filename when retaining a second export, rather than weakening that safeguard.