Configuration reference
All 276 configuration keys the framework reads whose name appears as a literal in a scanned source, grouped by namespace. The reading files are the provenance, and where a page discusses a key, it is linked. A key no page discusses still appears — that is the point of an index.
Deliberately not here, because none of them is a key an application declares: JVM system properties, the Maven plugin’s own goal parameters, metric and span names, keys whose last segment is a name the operator chose (a bucket alias, a datasource name) so no literal exists to find, and the stack-level keys read from tesseraql-stack.yml. A fixed key is never exempt: one spelled by joining a constant to a suffix is a key an operator cannot find here, which is a defect in the reading code, not a limit of the scan.
Keys are declared in config/application.yml and config/tesseraql.yml, overridden per environment by config/env/<profile>.yml, and readable in Studio’s Config screen. Nesting in YAML and the dotted form here are the same thing: tesseraql.studio.readOnly is tesseraql: then studio: then readOnly:.
server.port · tesseraql.app · tesseraql.apps · tesseraql.attachments · tesseraql.audit · tesseraql.batch · tesseraql.cache · tesseraql.connectors · tesseraql.console · tesseraql.copilot · tesseraql.datasources · tesseraql.diagnostics · tesseraql.docs · tesseraql.duckdb · tesseraql.files · tesseraql.framework · tesseraql.gateway · tesseraql.governance · tesseraql.http · tesseraql.i18n · tesseraql.identity · tesseraql.inbox · tesseraql.live · tesseraql.logging · tesseraql.mcp · tesseraql.messaging · tesseraql.metrics · tesseraql.migrations · tesseraql.modules · tesseraql.notifications · tesseraql.object-storage · tesseraql.oidc · tesseraql.orgunit · tesseraql.otel · tesseraql.outbox · tesseraql.plugins · tesseraql.resultMaterialization · tesseraql.retention · tesseraql.saml · tesseraql.scim · tesseraql.security · tesseraql.sessions · tesseraql.shutdown · tesseraql.sql · tesseraql.studio · tesseraql.temp · tesseraql.transfers · tesseraql.ui · tesseraql.workflow
server.port
Section titled “server.port”| Key | Read by | Documented in |
|---|---|---|
server.port |
MultiAppHost.java, TesseraqlRuntime.java | hosting |
tesseraql.app
Section titled “tesseraql.app”| Key | Read by | Documented in |
|---|---|---|
tesseraql.app.name |
AppInstaller.java, ApplicationName.java, ApplicationNameRules.java, +2 more | deployment, hosting |
tesseraql.app.requires.framework |
AppInstaller.java | — |
tesseraql.app.version |
AppDirectory.java, AppInstaller.java, AppMcpServer.java, +1 more | — |
tesseraql.app.work |
WorkHome.java | deployment, file-transfers |
tesseraql.apps
Section titled “tesseraql.apps”| Key | Read by | Documented in |
|---|---|---|
tesseraql.apps.account.enabled |
AccountAppProvider.java | — |
tesseraql.apps.exports.enabled |
ExportsAppProvider.java | file-transfers |
tesseraql.apps.tasks.enabled |
TasksAppProvider.java | — |
tesseraql.attachments
Section titled “tesseraql.attachments”| Key | Read by | Documented in |
|---|---|---|
tesseraql.attachments.mode |
AttachmentSettings.java | attachments |
tesseraql.attachments.scan.interval |
TesseraqlRuntime.java | — |
tesseraql.attachments.scan.lease |
TesseraqlRuntime.java | — |
tesseraql.attachments.scan.maxAttempts |
TesseraqlRuntime.java | — |
tesseraql.attachments.scan.mode |
TesseraqlRuntime.java | attachments |
tesseraql.attachments.scan.onInfected |
AttachmentSettings.java | attachments |
tesseraql.audit
Section titled “tesseraql.audit”| Key | Read by | Documented in |
|---|---|---|
tesseraql.audit.routes.enabled |
RouteCompiler.java, TesseraqlRuntime.java | approval-workflow, deployment, ops-console |
tesseraql.batch
Section titled “tesseraql.batch”| Key | Read by | Documented in |
|---|---|---|
tesseraql.batch.heartbeat.interval |
JobCommand.java, TesseraqlRuntime.java | — |
tesseraql.batch.heartbeat.livenessWindow |
TesseraqlRuntime.java | file-transfers |
tesseraql.batch.nodeId |
TesseraqlRuntime.java | notifications |
tesseraql.batch.reaperInterval |
TesseraqlRuntime.java | — |
tesseraql.batch.slaSweepInterval |
TesseraqlRuntime.java | jobs, notifications |
tesseraql.cache
Section titled “tesseraql.cache”| Key | Read by | Documented in |
|---|---|---|
tesseraql.cache.enabled |
RuntimePools.java | deployment, response-shaping |
tesseraql.cache.maxEntries |
RuntimePools.java | deployment, response-shaping |
tesseraql.cache.maxEntryRows |
RuntimePools.java | deployment, response-shaping |
tesseraql.connectors
Section titled “tesseraql.connectors”| Key | Read by | Documented in |
|---|---|---|
tesseraql.connectors.poll.allowedHosts |
OverlayEditor.java, JobRules.java | connectors, troubleshooting |
tesseraql.connectors.poll.allowedPaths |
JobRules.java | — |
tesseraql.connectors.poll.consumedRetention |
TesseraqlRuntime.java | — |
tesseraql.connectors.poll.credentials |
OverlayEditor.java | connectors |
tesseraql.connectors.poll.knownHostsFile |
JobRules.java | connectors |
tesseraql.connectors.poll.trustStore |
JobRules.java | — |
tesseraql.connectors.push.knownHostsFile |
PushStepRules.java | — |
tesseraql.connectors.push.trustStore |
PushStepRules.java | — |
tesseraql.connectors.webhooks |
OverlayEditor.java, WebhookVerifiers.java | connectors |
tesseraql.console
Section titled “tesseraql.console”| Key | Read by | Documented in |
|---|---|---|
tesseraql.console.login.enabled |
AccountAppProvider.java, AuthUiAppProvider.java, ExportsAppProvider.java, +1 more | authentication |
tesseraql.console.login.password.enabled |
FirstAdminHint.java, LoginMethods.java, TesseraqlRuntime.java | authentication, saml, troubleshooting |
tesseraql.copilot
Section titled “tesseraql.copilot”| Key | Read by | Documented in |
|---|---|---|
tesseraql.copilot.apiKey |
StudioRuntimeExtension.java | — |
tesseraql.copilot.enabled |
StudioRuntimeExtension.java | — |
tesseraql.copilot.endpoint |
StudioSupport.java | copilot |
tesseraql.copilot.maxTurns |
StudioRuntimeExtension.java | — |
tesseraql.copilot.model |
StudioRuntimeExtension.java | — |
tesseraql.datasources
Section titled “tesseraql.datasources”| Key | Read by | Documented in |
|---|---|---|
tesseraql.datasources |
DuckDbCommand.java, DataSources.java, FileScopes.java, +3 more | app-layout, capacity, deployment, +4 more |
tesseraql.datasources.main.fileTransferPool |
MainRoles.java | deployment |
tesseraql.datasources.main.jdbcUrl |
FirstAdminHint.java, McpDevTools.java, MultiAppHost.java | deployment, getting-started, troubleshooting |
tesseraql.datasources.main.jobPool |
MainRoles.java | deployment |
tesseraql.datasources.main.password |
FirstAdminHint.java, McpDevTools.java | — |
tesseraql.datasources.main.username |
FirstAdminHint.java, McpDevTools.java | — |
tesseraql.diagnostics
Section titled “tesseraql.diagnostics”| Key | Read by | Documented in |
|---|---|---|
tesseraql.diagnostics.batchFailureWarnPercent |
OpsDashboards.java | — |
tesseraql.diagnostics.errorRateWarnPercent |
OpsDashboards.java | — |
tesseraql.diagnostics.pinning.enabled |
RuntimePools.java | — |
tesseraql.diagnostics.pinning.thresholdMillis |
RuntimePools.java | — |
tesseraql.diagnostics.readinessTtl |
OpsDashboards.java | deployment |
tesseraql.diagnostics.refusalRateWarnPerSecond |
OpsDashboards.java | notifications |
tesseraql.diagnostics.slowRateWarnPercent |
OpsDashboards.java | — |
tesseraql.diagnostics.slowSpanMillis |
OpsDashboards.java | — |
tesseraql.diagnostics.slowSqlCapacity |
RuntimePools.java | — |
tesseraql.diagnostics.slowSqlMillis |
RuntimePools.java | — |
tesseraql.diagnostics.traceRingCapacity |
TesseraqlRuntime.java | — |
tesseraql.docs
Section titled “tesseraql.docs”| Key | Read by | Documented in |
|---|---|---|
tesseraql.docs.share.secret |
ShareLinks.java | — |
tesseraql.docs.share.ttl |
ShareLinks.java | — |
tesseraql.duckdb
Section titled “tesseraql.duckdb”| Key | Read by | Documented in |
|---|---|---|
tesseraql.duckdb.extensionDirectory |
DuckDbCommand.java, DuckDbDatasources.java | duckdb |
tesseraql.duckdb.spoolDirectory |
DuckDbDatasources.java | duckdb |
tesseraql.files
Section titled “tesseraql.files”| Key | Read by | Documented in |
|---|---|---|
tesseraql.files.locale |
FileDefaults.java | deployment, file-transfers, jobs |
tesseraql.files.timezone |
ExportDeclarations.java, FileDefaults.java | deployment, file-transfers, jobs |
tesseraql.framework
Section titled “tesseraql.framework”| Key | Read by | Documented in |
|---|---|---|
tesseraql.framework.datasource |
MultiAppHost.java, RuntimePools.java | deployment, hosting |
tesseraql.gateway
Section titled “tesseraql.gateway”| Key | Read by | Documented in |
|---|---|---|
tesseraql.gateway.maxConcurrentPerMember |
MultiAppGateway.java | deployment |
tesseraql.gateway.maxStreamsPerMember |
MultiAppGateway.java | deployment |
tesseraql.gateway.readIdleTimeoutSeconds |
MultiAppGateway.java | deployment |
tesseraql.governance
Section titled “tesseraql.governance”| Key | Read by | Documented in |
|---|---|---|
tesseraql.governance.maxRiskScore |
GovernanceGate.java | — |
tesseraql.governance.requireApproval |
GovernanceGate.java | — |
tesseraql.http
Section titled “tesseraql.http”| Key | Read by | Documented in |
|---|---|---|
tesseraql.http.basePath |
RouteCompiler.java, RouteReloader.java, TesseraqlRuntime.java, +2 more | — |
tesseraql.http.eventLoopThreads |
TesseraqlRuntime.java | deployment |
tesseraql.http.idleTimeoutSeconds |
MultiAppGateway.java, TesseraqlRuntime.java | deployment |
tesseraql.http.maxBodyBytes |
TesseraqlRuntime.java | deployment, file-transfers |
tesseraql.http.maxEventStreams |
TesseraqlRuntime.java | capacity, deployment, realtime |
tesseraql.http.maxFormFields |
TesseraqlRuntime.java | deployment |
tesseraql.http.maxInFlight |
TesseraqlRuntime.java | capacity, deployment |
tesseraql.http.outbound |
HttpOutbound.java | authentication, connectors, copilot, +5 more |
tesseraql.http.outbound.allowedHosts |
OverlayEditor.java, HttpOutbound.java, HttpSourceRules.java | authentication, connectors, copilot, +5 more |
tesseraql.http.outbound.circuitBreaker.failureThreshold |
HttpOutbound.java | — |
tesseraql.http.outbound.circuitBreaker.openDuration |
HttpOutbound.java | — |
tesseraql.http.outbound.connectTimeout |
HttpOutbound.java | — |
tesseraql.http.outbound.credentials |
OverlayEditor.java, HttpOutbound.java | connectors |
tesseraql.http.outbound.maxResponseBytes |
HttpOutbound.java | — |
tesseraql.http.outbound.requestTimeout |
HttpOutbound.java | — |
tesseraql.http.outbound.retry.attempts |
HttpOutbound.java | — |
tesseraql.http.outbound.retry.backoff |
HttpOutbound.java | — |
tesseraql.http.outbound.retry.multiplier |
HttpOutbound.java | — |
tesseraql.http.workerThreads |
TesseraqlRuntime.java | capacity, deployment |
tesseraql.i18n
Section titled “tesseraql.i18n”| Key | Read by | Documented in |
|---|---|---|
tesseraql.i18n.defaultLocale |
TesseraqlRuntime.java, I18nSettings.java, I18nRules.java | deployment |
tesseraql.i18n.locales |
I18nSettings.java, I18nRules.java | internationalization |
tesseraql.i18n.preference |
I18nSettings.java | — |
tesseraql.identity
Section titled “tesseraql.identity”| Key | Read by | Documented in |
|---|---|---|
tesseraql.identity.defaultRealm |
IdentityConfigFactory.java | — |
tesseraql.identity.invite.channel |
TesseraqlRuntime.java | — |
tesseraql.identity.invite.ttlDays |
TesseraqlRuntime.java | — |
tesseraql.identity.invite.url |
TesseraqlRuntime.java | — |
tesseraql.identity.maxRows |
TesseraqlRuntime.java | — |
tesseraql.identity.recovery.channel |
TesseraqlRuntime.java | — |
tesseraql.identity.recovery.enabled |
LoginMethods.java, TesseraqlRuntime.java | — |
tesseraql.identity.recovery.ttlMinutes |
TesseraqlRuntime.java | — |
tesseraql.identity.recovery.url |
TesseraqlRuntime.java | — |
tesseraql.inbox
Section titled “tesseraql.inbox”| Key | Read by | Documented in |
|---|---|---|
tesseraql.inbox.retentionDays |
TesseraqlRuntime.java | inbox |
tesseraql.live
Section titled “tesseraql.live”| Key | Read by | Documented in |
|---|---|---|
tesseraql.live.maxPerSubject |
TesseraqlRuntime.java | realtime |
tesseraql.live.maxTotal |
TesseraqlRuntime.java | realtime |
tesseraql.logging
Section titled “tesseraql.logging”| Key | Read by | Documented in |
|---|---|---|
tesseraql.logging.accessLog |
RouteCompiler.java | deployment |
tesseraql.mcp
Section titled “tesseraql.mcp”| Key | Read by | Documented in |
|---|---|---|
tesseraql.mcp.auth |
TesseraqlRuntime.java | — |
tesseraql.mcp.enabled |
TesseraqlRuntime.java | app-mcp |
tesseraql.mcp.resource |
StackIssuer.java, TesseraqlRuntime.java | oauth, troubleshooting |
tesseraql.messaging
Section titled “tesseraql.messaging”| Key | Read by | Documented in |
|---|---|---|
tesseraql.messaging.backstop |
TesseraqlRuntime.java | — |
tesseraql.messaging.channels |
MessagingChannels.java | messaging |
tesseraql.metrics
Section titled “tesseraql.metrics”| Key | Read by | Documented in |
|---|---|---|
tesseraql.metrics.enabled |
TesseraqlRuntime.java | deployment |
tesseraql.metrics.unauthenticated |
TesseraqlRuntime.java | deployment |
tesseraql.migrations
Section titled “tesseraql.migrations”| Key | Read by | Documented in |
|---|---|---|
tesseraql.migrations.enabled |
AppMigrations.java | — |
tesseraql.migrations.historyName |
SchemaHistoryName.java | deployment |
tesseraql.modules
Section titled “tesseraql.modules”| Key | Read by | Documented in |
|---|---|---|
tesseraql.modules |
PackagedModules.java, ModulesGuard.java, ModuleDeclarationRules.java | admission, extending, getting-started, +3 more |
tesseraql.notifications
Section titled “tesseraql.notifications”| Key | Read by | Documented in |
|---|---|---|
tesseraql.notifications.alerts.channel |
TesseraqlRuntime.java | deployment, jobs, notifications |
tesseraql.notifications.alerts.checkInterval |
TesseraqlRuntime.java | notifications |
tesseraql.notifications.channels |
MailRules.java, NotificationChannels.java | account, deployment, notifications |
tesseraql.object-storage
Section titled “tesseraql.object-storage”| Key | Read by | Documented in |
|---|---|---|
tesseraql.object-storage.allowedBuckets |
S3BlobStoreProvider.java, ObjectStorageEgressRules.java | attachments |
tesseraql.object-storage.provider |
BlobStores.java, ObjectStorageEgressRules.java | deployment |
tesseraql.object-storage.s3.checksumMode |
S3BlobStoreProvider.java | — |
tesseraql.object-storage.s3.credentials.accessKey |
S3BlobStoreProvider.java | — |
tesseraql.object-storage.s3.credentials.secretKey |
S3BlobStoreProvider.java | — |
tesseraql.object-storage.s3.endpoint |
S3BlobStoreProvider.java | — |
tesseraql.object-storage.s3.pathStyle |
S3BlobStoreProvider.java | — |
tesseraql.object-storage.s3.region |
S3BlobStoreProvider.java | — |
tesseraql.oidc
Section titled “tesseraql.oidc”| Key | Read by | Documented in |
|---|---|---|
tesseraql.oidc.claims.groups |
OidcConfig.java | — |
tesseraql.oidc.claims.login |
OidcConfig.java | — |
tesseraql.oidc.claims.map |
OidcConfig.java | — |
tesseraql.oidc.claims.name |
OidcConfig.java | — |
tesseraql.oidc.claims.roles |
OidcConfig.java | — |
tesseraql.oidc.claims.tenant |
OidcConfig.java | — |
tesseraql.oidc.clientId |
OidcConfig.java, OidcSamlRules.java | — |
tesseraql.oidc.clientSecret |
OidcConfig.java | — |
tesseraql.oidc.clockSkew |
OidcConfig.java | — |
tesseraql.oidc.discoveryUri |
OidcConfig.java, OidcSamlRules.java | — |
tesseraql.oidc.enabled |
OidcRuntimeExtension.java, LoginMethods.java, ManifestCoverage.java, +1 more | authentication |
tesseraql.oidc.link.enabled |
OidcConfig.java, ManifestCoverage.java | — |
tesseraql.oidc.link.provision |
OidcConfig.java, ManifestCoverage.java | — |
tesseraql.oidc.postLoginUrl |
OidcConfig.java | authentication |
tesseraql.oidc.redirectUri |
OidcConfig.java, OidcSamlRules.java | — |
tesseraql.oidc.requestTimeout |
OidcRuntimeExtension.java | — |
tesseraql.oidc.scopes |
OidcConfig.java | — |
tesseraql.orgunit
Section titled “tesseraql.orgunit”| Key | Read by | Documented in |
|---|---|---|
tesseraql.orgunit.mode |
IamAdminProviders.java, OrgUnitRules.java, OrgUnitSettings.java | data-scoping |
tesseraql.otel
Section titled “tesseraql.otel”| Key | Read by | Documented in |
|---|---|---|
tesseraql.otel.otlp.endpoint |
RuntimePools.java | deployment |
tesseraql.otel.serviceName |
RuntimePools.java | — |
tesseraql.outbox
Section titled “tesseraql.outbox”| Key | Read by | Documented in |
|---|---|---|
tesseraql.outbox.dispatch.fixedDelay |
TesseraqlRuntime.java | — |
tesseraql.outbox.dispatch.maxAttempts |
TesseraqlRuntime.java | messaging |
tesseraql.plugins
Section titled “tesseraql.plugins”| Key | Read by | Documented in |
|---|---|---|
tesseraql.plugins.allowlist |
Plugins.java | saml |
tesseraql.plugins.dir |
AdmissionProfile.java, Plugins.java | — |
tesseraql.plugins.requireSignature |
Plugins.java | — |
tesseraql.plugins.trustedKeys |
Plugins.java | app-layout, faq |
tesseraql.resultMaterialization
Section titled “tesseraql.resultMaterialization”| Key | Read by | Documented in |
|---|---|---|
tesseraql.resultMaterialization.maxRows |
SqlDefaults.java | file-transfers |
tesseraql.resultMaterialization.onOverflow |
SqlDefaults.java | — |
tesseraql.retention
Section titled “tesseraql.retention”| Key | Read by | Documented in |
|---|---|---|
tesseraql.retention.attachments |
TesseraqlRuntime.java | attachments |
tesseraql.retention.jobs |
TesseraqlRuntime.java | — |
tesseraql.retention.outbox |
TesseraqlRuntime.java | deployment, notifications |
tesseraql.retention.sweep |
TesseraqlRuntime.java | deployment |
tesseraql.saml
Section titled “tesseraql.saml”| Key | Read by | Documented in |
|---|---|---|
tesseraql.saml.allowIdpInitiated |
SamlRuntimeExtension.java | — |
tesseraql.saml.attributes.displayName |
SamlRuntimeExtension.java | — |
tesseraql.saml.attributes.email |
SamlRuntimeExtension.java | — |
tesseraql.saml.attributes.groups |
SamlRuntimeExtension.java | — |
tesseraql.saml.attributes.loginId |
SamlRuntimeExtension.java | — |
tesseraql.saml.attributes.map |
SamlRuntimeExtension.java | — |
tesseraql.saml.attributes.roles |
SamlRuntimeExtension.java | — |
tesseraql.saml.attributes.tenant |
SamlRuntimeExtension.java | — |
tesseraql.saml.clockSkew |
SamlRuntimeExtension.java | saml |
tesseraql.saml.enabled |
LoginMethods.java, SamlRuntimeExtension.java, ManifestCoverage.java, +1 more | authentication, saml |
tesseraql.saml.idp.metadata |
SamlRuntimeExtension.java | — |
tesseraql.saml.idp.publicKey |
SamlRuntimeExtension.java | — |
tesseraql.saml.idp.sloUrl |
SamlRuntimeExtension.java | — |
tesseraql.saml.idp.ssoUrl |
SamlRuntimeExtension.java | — |
tesseraql.saml.link.enabled |
SamlRuntimeExtension.java, ManifestCoverage.java | — |
tesseraql.saml.link.provision |
SamlRuntimeExtension.java, ManifestCoverage.java | — |
tesseraql.saml.link.subjectAttribute |
SamlRuntimeExtension.java | — |
tesseraql.saml.requireSignedLogout |
SamlRuntimeExtension.java | — |
tesseraql.saml.sp.acsUrl |
SamlRuntimeExtension.java, OidcSamlRules.java | — |
tesseraql.saml.sp.audience |
SamlRuntimeExtension.java | saml |
tesseraql.saml.sp.nameIdFormat |
SamlRuntimeExtension.java | — |
tesseraql.saml.sp.signingKey |
SamlRuntimeExtension.java | — |
tesseraql.scim
Section titled “tesseraql.scim”| Key | Read by | Documented in |
|---|---|---|
tesseraql.scim.attributes.enabled |
ScimRuntimeExtension.java | iam-admin |
tesseraql.scim.attributes.map |
ScimRuntimeExtension.java | iam-admin |
tesseraql.scim.enabled |
ScimRuntimeExtension.java, ManifestCoverage.java | — |
tesseraql.scim.groups.addMember |
ScimRuntimeExtension.java | — |
tesseraql.scim.groups.count |
ScimRuntimeExtension.java | — |
tesseraql.scim.groups.create |
ScimRuntimeExtension.java | — |
tesseraql.scim.groups.delete |
ScimRuntimeExtension.java | — |
tesseraql.scim.groups.enabled |
ScimRuntimeExtension.java, ManifestCoverage.java | iam-admin |
tesseraql.scim.groups.findById |
ScimRuntimeExtension.java | — |
tesseraql.scim.groups.keys |
ScimRuntimeExtension.java | — |
tesseraql.scim.groups.list |
ScimRuntimeExtension.java | — |
tesseraql.scim.groups.listMembers |
ScimRuntimeExtension.java | — |
tesseraql.scim.groups.removeMember |
ScimRuntimeExtension.java | — |
tesseraql.scim.groups.replace |
ScimRuntimeExtension.java | — |
tesseraql.scim.outbound.enabled |
ScimRuntimeExtension.java | — |
tesseraql.scim.outbound.target.token |
ScimRuntimeExtension.java | — |
tesseraql.scim.outbound.target.url |
ScimRuntimeExtension.java | — |
tesseraql.scim.users.count |
ScimRuntimeExtension.java | — |
tesseraql.scim.users.create |
ScimRuntimeExtension.java | — |
tesseraql.scim.users.delete |
ScimRuntimeExtension.java | — |
tesseraql.scim.users.findById |
ScimRuntimeExtension.java | — |
tesseraql.scim.users.findByUserName |
ScimRuntimeExtension.java | — |
tesseraql.scim.users.keys |
ScimRuntimeExtension.java | — |
tesseraql.scim.users.list |
ScimRuntimeExtension.java | — |
tesseraql.scim.users.replace |
ScimRuntimeExtension.java | — |
tesseraql.security
Section titled “tesseraql.security”| Key | Read by | Documented in |
|---|---|---|
tesseraql.security.apiKeys |
ApiKeyConfigRules.java | authentication |
tesseraql.security.apiKeys.clients |
SecurityConfigFactory.java, ApiKeyConfigRules.java | — |
tesseraql.security.apiKeys.header |
SecurityConfigFactory.java | — |
tesseraql.security.conditions.zone |
ConditionZone.java | deployment, iam-admin |
tesseraql.security.credentialThrottle.addressAttempts |
TesseraqlRuntime.java | — |
tesseraql.security.credentialThrottle.addressWindow |
TesseraqlRuntime.java | — |
tesseraql.security.credentialThrottle.enabled |
TesseraqlRuntime.java | — |
tesseraql.security.credentialThrottle.loginAttempts |
TesseraqlRuntime.java | — |
tesseraql.security.credentialThrottle.loginWindow |
TesseraqlRuntime.java | — |
tesseraql.security.defaults |
SecurityDefaultRules.java | authentication, troubleshooting |
tesseraql.security.defaults.mcp |
McpSecurityDefaults.java | — |
tesseraql.security.defaults.routes |
SecurityDefaults.java | authentication, troubleshooting |
tesseraql.security.jwt |
BearerConfigRules.java, JwtConfigRules.java | ai-mcp, authentication |
tesseraql.security.jwt.algorithm |
SecurityConfigFactory.java, JwtConfigRules.java | — |
tesseraql.security.jwt.audience |
TokenCommand.java, SecurityConfigFactory.java, JwtConfigRules.java | — |
tesseraql.security.jwt.clockSkew |
SecurityConfigFactory.java | — |
tesseraql.security.jwt.groupsClaim |
SecurityConfigFactory.java | — |
tesseraql.security.jwt.issuer |
SecurityConfigFactory.java | — |
tesseraql.security.jwt.jwks.cacheTtl |
SecurityConfigFactory.java | — |
tesseraql.security.jwt.jwks.refreshFloor |
SecurityConfigFactory.java | — |
tesseraql.security.jwt.jwks.requestTimeout |
SecurityConfigFactory.java | — |
tesseraql.security.jwt.jwksUri |
SecurityConfigFactory.java, JwtConfigRules.java | — |
tesseraql.security.jwt.loginClaim |
SecurityConfigFactory.java | — |
tesseraql.security.jwt.nameClaim |
SecurityConfigFactory.java | — |
tesseraql.security.jwt.permissionsClaim |
TokenCommand.java, OAuthRuntimeExtension.java, SecurityConfigFactory.java | — |
tesseraql.security.jwt.publicKey |
SecurityConfigFactory.java, JwtConfigRules.java | — |
tesseraql.security.jwt.requireExpiration |
SecurityConfigFactory.java | — |
tesseraql.security.jwt.rolesClaim |
TokenCommand.java, OAuthRuntimeExtension.java, SecurityConfigFactory.java | — |
tesseraql.security.jwt.secret |
TokenCommand.java, SecurityConfigFactory.java, JwtConfigRules.java | authentication |
tesseraql.security.jwt.tenantClaim |
SecurityConfigFactory.java | — |
tesseraql.security.mtls |
MtlsConfigRules.java | authentication |
tesseraql.security.mtls.clients |
SecurityConfigFactory.java, MtlsConfigRules.java | — |
tesseraql.security.mtls.clockSkew |
SecurityConfigFactory.java | — |
tesseraql.security.mtls.forwardedHeader |
MultiAppHost.java, SecurityConfigFactory.java, MtlsConfigRules.java | — |
tesseraql.security.mtls.trustBundle |
SecurityConfigFactory.java, MtlsConfigRules.java | — |
tesseraql.security.network.allow |
TesseraqlRuntime.java | authentication, iam-admin |
tesseraql.security.oauth.accessTokenTtl |
OAuthRuntimeExtension.java | oauth |
tesseraql.security.oauth.enabled |
OAuthRuntimeExtension.java, TesseraqlRuntime.java, OAuthScopeRules.java | — |
tesseraql.security.oauth.refreshTokenTtl |
OAuthRuntimeExtension.java | oauth |
tesseraql.security.policies |
ScaffoldCommand.java, SymbolsCommand.java, SecurityConfigFactory.java, +5 more | deployment |
tesseraql.security.responseHeaders |
SystemApps.java, ResponseHeaderDefaults.java | — |
tesseraql.security.roles |
SecurityConfigFactory.java, TesseraqlRuntime.java, DeclaredRoleRules.java | iam-admin |
tesseraql.security.token.enabled |
TesseraqlRuntime.java | — |
tesseraql.security.token.ttl |
TesseraqlRuntime.java | — |
tesseraql.sessions
Section titled “tesseraql.sessions”| Key | Read by | Documented in |
|---|---|---|
tesseraql.sessions.idleTimeout |
TesseraqlRuntime.java | authentication, iam-admin |
tesseraql.sessions.maxPerSubject |
TesseraqlRuntime.java | authentication |
tesseraql.sessions.store |
TesseraqlRuntime.java | deployment |
tesseraql.sessions.ttl |
TesseraqlRuntime.java | authentication |
tesseraql.shutdown
Section titled “tesseraql.shutdown”| Key | Read by | Documented in |
|---|---|---|
tesseraql.shutdown.forceOnTimeout |
TesseraqlRuntime.java | — |
tesseraql.shutdown.timeout |
MultiAppHost.java, TesseraqlRuntime.java | deployment, hosting, kubernetes |
tesseraql.sql
Section titled “tesseraql.sql”| Key | Read by | Documented in |
|---|---|---|
tesseraql.sql.timeoutSeconds |
SqlDefaults.java | deployment, multi-tenancy |
tesseraql.studio
Section titled “tesseraql.studio”| Key | Read by | Documented in |
|---|---|---|
tesseraql.studio.confirmApply |
StudioRuntimeExtension.java | studio |
tesseraql.studio.dataBrowser.edit.enabled |
StudioRuntimeExtension.java | studio |
tesseraql.studio.dataBrowser.enabled |
StudioRuntimeExtension.java | five-minute-demo, studio |
tesseraql.studio.enabled |
StudioRuntimeExtension.java, StudioAppProvider.java | studio |
tesseraql.studio.scaffold.enabled |
StudioRuntimeExtension.java | studio |
tesseraql.studio.testRunner.enabled |
StudioRuntimeExtension.java | notifications, studio |
tesseraql.studio.testRunner.maxRows |
StudioRuntimeExtension.java | — |
tesseraql.studio.testRunner.queryTimeoutSeconds |
StudioRuntimeExtension.java | — |
tesseraql.temp
Section titled “tesseraql.temp”| Key | Read by | Documented in |
|---|---|---|
tesseraql.temp.bucket |
TempStores.java, ObjectStorageEgressRules.java | deployment |
tesseraql.temp.maxBytes |
TempStores.java | deployment |
tesseraql.temp.store |
TempStores.java, ObjectStorageEgressRules.java | file-transfers, jobs, kubernetes, +1 more |
tesseraql.transfers
Section titled “tesseraql.transfers”| Key | Read by | Documented in |
|---|---|---|
tesseraql.transfers.retentionDays |
TesseraqlRuntime.java | deployment |
tesseraql.transfers.reviewTtl |
TesseraqlRuntime.java | — |
tesseraql.transfers.sweepInterval |
TesseraqlRuntime.java | — |
tesseraql.ui
Section titled “tesseraql.ui”| Key | Read by | Documented in |
|---|---|---|
tesseraql.ui.color |
TesseraqlRuntime.java | — |
tesseraql.ui.density |
TesseraqlRuntime.java | — |
tesseraql.ui.neutral |
TesseraqlRuntime.java | notifications |
tesseraql.ui.stylesheet |
TesseraqlRuntime.java | — |
tesseraql.ui.theme |
TesseraqlRuntime.java | account |
tesseraql.workflow
Section titled “tesseraql.workflow”| Key | Read by | Documented in |
|---|---|---|
tesseraql.workflow.bulk.maxKeys |
RouteCompiler.java | approval-workflow |
tesseraql.workflow.mode |
RouteCompiler.java, WorkflowCases.java, WorkflowRules.java, +1 more | approval-workflow |
tesseraql.workflow.sweep.interval |
WorkflowSettings.java | approval-workflow |