Configuration reference
All 236 configuration keys the framework reads, scanned from the module sources on every refresh and grouped by namespace. The reading files are the provenance, and where a page discusses a key, it is linked. A key no page discusses still appears — that is the point of an index.
Keys are declared in config/application.yml and config/tesseraql.yml, overridden per environment by config/env/<profile>.yml, and readable in Studio’s Config screen. Nesting in YAML and the dotted form here are the same thing: tesseraql.studio.readOnly is tesseraql: then studio: then readOnly:.
server.port · tesseraql.app · tesseraql.apps · tesseraql.attachments · tesseraql.audit · tesseraql.batch · tesseraql.connectors · tesseraql.console · tesseraql.copilot · tesseraql.datasources · tesseraql.diagnostics · tesseraql.docs · tesseraql.duckdb · tesseraql.files · tesseraql.framework · tesseraql.gateway · tesseraql.governance · tesseraql.http · tesseraql.i18n · tesseraql.identity · tesseraql.inbox · tesseraql.live · tesseraql.logging · tesseraql.mcp · tesseraql.messaging · tesseraql.metrics · tesseraql.migrations · tesseraql.modules · tesseraql.notifications · tesseraql.object-storage · tesseraql.oidc · tesseraql.orgunit · tesseraql.otel · tesseraql.outbox · tesseraql.plugins · tesseraql.resultMaterialization · tesseraql.retention · tesseraql.saml · tesseraql.scim · tesseraql.security · tesseraql.sessions · tesseraql.shutdown · tesseraql.sql · tesseraql.studio · tesseraql.temp · tesseraql.transfers · tesseraql.ui · tesseraql.workflow
server.port
Section titled “server.port”| Key | Read by | Documented in |
|---|---|---|
server.port |
MultiAppHost.java, TesseraqlRuntime.java | hosting |
tesseraql.app
Section titled “tesseraql.app”| Key | Read by | Documented in |
|---|---|---|
tesseraql.app.name |
AppInstaller.java, ApplicationName.java, ApplicationNameRules.java, +2 more | deployment, hosting |
tesseraql.app.requires.framework |
AppInstaller.java | — |
tesseraql.app.version |
AppDirectory.java, AppInstaller.java, AppMcpServer.java, +1 more | — |
tesseraql.app.work |
WorkHome.java | deployment, file-transfers |
tesseraql.apps
Section titled “tesseraql.apps”| Key | Read by | Documented in |
|---|---|---|
tesseraql.apps.account.enabled |
AccountAppProvider.java | — |
tesseraql.attachments
Section titled “tesseraql.attachments”| Key | Read by | Documented in |
|---|---|---|
tesseraql.attachments.mode |
AttachmentSettings.java | attachments |
tesseraql.attachments.scan.interval |
TesseraqlRuntime.java | — |
tesseraql.attachments.scan.lease |
TesseraqlRuntime.java | — |
tesseraql.attachments.scan.maxAttempts |
TesseraqlRuntime.java | — |
tesseraql.attachments.scan.mode |
TesseraqlRuntime.java | attachments |
tesseraql.attachments.scan.onInfected |
AttachmentSettings.java | attachments |
tesseraql.audit
Section titled “tesseraql.audit”| Key | Read by | Documented in |
|---|---|---|
tesseraql.audit.routes.enabled |
RouteCompiler.java, TesseraqlRuntime.java | approval-workflow, deployment, ops-console |
tesseraql.batch
Section titled “tesseraql.batch”| Key | Read by | Documented in |
|---|---|---|
tesseraql.batch.heartbeat.interval |
JobCommand.java, TesseraqlRuntime.java | — |
tesseraql.batch.heartbeat.livenessWindow |
TesseraqlRuntime.java | file-transfers |
tesseraql.batch.nodeId |
TesseraqlRuntime.java | — |
tesseraql.batch.reaperInterval |
TesseraqlRuntime.java | — |
tesseraql.batch.slaSweepInterval |
TesseraqlRuntime.java | jobs, notifications |
tesseraql.connectors
Section titled “tesseraql.connectors”| Key | Read by | Documented in |
|---|---|---|
tesseraql.connectors.poll.allowedHosts |
OverlayEditor.java, JobRules.java | connectors, troubleshooting |
tesseraql.connectors.poll.allowedPaths |
JobRules.java | — |
tesseraql.connectors.poll.consumedRetention |
TesseraqlRuntime.java | — |
tesseraql.connectors.poll.credentials |
OverlayEditor.java | connectors |
tesseraql.connectors.poll.knownHostsFile |
JobRules.java | connectors |
tesseraql.connectors.poll.trustStore |
JobRules.java | — |
tesseraql.connectors.push.knownHostsFile |
PushStepRules.java | — |
tesseraql.connectors.push.trustStore |
PushStepRules.java | — |
tesseraql.connectors.webhooks |
OverlayEditor.java, WebhookVerifiers.java | connectors |
tesseraql.console
Section titled “tesseraql.console”| Key | Read by | Documented in |
|---|---|---|
tesseraql.console.login.enabled |
AccountAppProvider.java, AuthUiAppProvider.java | authentication |
tesseraql.console.login.password.enabled |
FirstAdminHint.java, LoginMethods.java, TesseraqlRuntime.java | authentication, saml, troubleshooting |
tesseraql.copilot
Section titled “tesseraql.copilot”| Key | Read by | Documented in |
|---|---|---|
tesseraql.copilot.apiKey |
StudioRuntimeExtension.java | — |
tesseraql.copilot.enabled |
StudioRuntimeExtension.java | — |
tesseraql.copilot.endpoint |
StudioSupport.java | copilot |
tesseraql.copilot.maxTurns |
StudioRuntimeExtension.java | — |
tesseraql.copilot.model |
StudioRuntimeExtension.java | — |
tesseraql.datasources
Section titled “tesseraql.datasources”| Key | Read by | Documented in |
|---|---|---|
tesseraql.datasources |
DuckDbCommand.java, DataSources.java, FileScopes.java, +2 more | app-layout, deployment, getting-started, +3 more |
tesseraql.datasources.main.jdbcUrl |
FirstAdminHint.java, McpDevTools.java, MultiAppHost.java | deployment, getting-started, troubleshooting |
tesseraql.datasources.main.password |
FirstAdminHint.java, McpDevTools.java | — |
tesseraql.datasources.main.username |
FirstAdminHint.java, McpDevTools.java | — |
tesseraql.diagnostics
Section titled “tesseraql.diagnostics”| Key | Read by | Documented in |
|---|---|---|
tesseraql.diagnostics.batchFailureWarnPercent |
OpsDashboards.java | — |
tesseraql.diagnostics.errorRateWarnPercent |
OpsDashboards.java | — |
tesseraql.diagnostics.pinning.enabled |
RuntimePools.java | — |
tesseraql.diagnostics.pinning.thresholdMillis |
RuntimePools.java | — |
tesseraql.diagnostics.readinessTtl |
OpsDashboards.java | — |
tesseraql.diagnostics.slowRateWarnPercent |
OpsDashboards.java | — |
tesseraql.diagnostics.slowSpanMillis |
OpsDashboards.java | — |
tesseraql.diagnostics.slowSqlCapacity |
RuntimePools.java | — |
tesseraql.diagnostics.slowSqlMillis |
RuntimePools.java | — |
tesseraql.diagnostics.traceRingCapacity |
TesseraqlRuntime.java | — |
tesseraql.docs
Section titled “tesseraql.docs”| Key | Read by | Documented in |
|---|---|---|
tesseraql.docs.share.secret |
ShareLinks.java | — |
tesseraql.docs.share.ttl |
ShareLinks.java | — |
tesseraql.duckdb
Section titled “tesseraql.duckdb”| Key | Read by | Documented in |
|---|---|---|
tesseraql.duckdb.extensionDirectory |
DuckDbCommand.java, DuckDbDatasources.java | duckdb |
tesseraql.duckdb.spoolDirectory |
DuckDbDatasources.java | duckdb |
tesseraql.files
Section titled “tesseraql.files”| Key | Read by | Documented in |
|---|---|---|
tesseraql.files.locale |
CatalogLocaleRules.java | code-catalogs, file-transfers |
tesseraql.framework
Section titled “tesseraql.framework”| Key | Read by | Documented in |
|---|---|---|
tesseraql.framework.datasource |
MultiAppHost.java, RuntimePools.java | deployment, hosting |
tesseraql.gateway
Section titled “tesseraql.gateway”| Key | Read by | Documented in |
|---|---|---|
tesseraql.gateway.maxConcurrentPerMember |
MultiAppGateway.java | deployment |
tesseraql.gateway.maxStreamsPerMember |
MultiAppGateway.java | deployment |
tesseraql.gateway.readIdleTimeoutSeconds |
MultiAppGateway.java | deployment |
tesseraql.governance
Section titled “tesseraql.governance”| Key | Read by | Documented in |
|---|---|---|
tesseraql.governance.maxRiskScore |
GovernanceGate.java | — |
tesseraql.governance.requireApproval |
GovernanceGate.java | — |
tesseraql.http
Section titled “tesseraql.http”| Key | Read by | Documented in |
|---|---|---|
tesseraql.http.basePath |
RouteCompiler.java, RouteReloader.java, TesseraqlRuntime.java, +2 more | — |
tesseraql.http.eventLoopThreads |
TesseraqlRuntime.java | deployment |
tesseraql.http.idleTimeoutSeconds |
MultiAppGateway.java, TesseraqlRuntime.java | deployment |
tesseraql.http.maxBodyBytes |
TesseraqlRuntime.java | deployment, file-transfers |
tesseraql.http.maxEventStreams |
TesseraqlRuntime.java | deployment, realtime |
tesseraql.http.maxFormFields |
TesseraqlRuntime.java | deployment |
tesseraql.http.maxInFlight |
TesseraqlRuntime.java | deployment |
tesseraql.http.outbound |
HttpOutbound.java | authentication, connectors, copilot, +5 more |
tesseraql.http.outbound.allowedHosts |
OverlayEditor.java, HttpOutbound.java, HttpSourceRules.java | authentication, connectors, copilot, +5 more |
tesseraql.http.outbound.circuitBreaker.failureThreshold |
HttpOutbound.java | — |
tesseraql.http.outbound.circuitBreaker.openDuration |
HttpOutbound.java | — |
tesseraql.http.outbound.connectTimeout |
HttpOutbound.java | — |
tesseraql.http.outbound.credentials |
OverlayEditor.java, HttpOutbound.java | connectors |
tesseraql.http.outbound.maxResponseBytes |
HttpOutbound.java | — |
tesseraql.http.outbound.requestTimeout |
HttpOutbound.java | — |
tesseraql.http.outbound.retry.attempts |
HttpOutbound.java | — |
tesseraql.http.outbound.retry.backoff |
HttpOutbound.java | — |
tesseraql.http.outbound.retry.multiplier |
HttpOutbound.java | — |
tesseraql.http.workerThreads |
MultiAppGateway.java, TesseraqlRuntime.java | deployment |
tesseraql.i18n
Section titled “tesseraql.i18n”| Key | Read by | Documented in |
|---|---|---|
tesseraql.i18n.defaultLocale |
TesseraqlRuntime.java, I18nSettings.java, I18nRules.java | — |
tesseraql.i18n.locales |
I18nSettings.java, I18nRules.java | internationalization |
tesseraql.i18n.preference |
I18nSettings.java | — |
tesseraql.identity
Section titled “tesseraql.identity”| Key | Read by | Documented in |
|---|---|---|
tesseraql.identity.defaultRealm |
IdentityConfigFactory.java | — |
tesseraql.identity.invite.channel |
TesseraqlRuntime.java | — |
tesseraql.identity.invite.ttlDays |
TesseraqlRuntime.java | — |
tesseraql.identity.invite.url |
TesseraqlRuntime.java | — |
tesseraql.identity.maxRows |
TesseraqlRuntime.java | — |
tesseraql.identity.recovery.channel |
TesseraqlRuntime.java | — |
tesseraql.identity.recovery.enabled |
TesseraqlRuntime.java | — |
tesseraql.identity.recovery.ttlMinutes |
TesseraqlRuntime.java | — |
tesseraql.identity.recovery.url |
TesseraqlRuntime.java | — |
tesseraql.inbox
Section titled “tesseraql.inbox”| Key | Read by | Documented in |
|---|---|---|
tesseraql.inbox.retentionDays |
TesseraqlRuntime.java | inbox |
tesseraql.live
Section titled “tesseraql.live”| Key | Read by | Documented in |
|---|---|---|
tesseraql.live.maxPerSubject |
TesseraqlRuntime.java | realtime |
tesseraql.live.maxTotal |
TesseraqlRuntime.java | realtime |
tesseraql.logging
Section titled “tesseraql.logging”| Key | Read by | Documented in |
|---|---|---|
tesseraql.logging.accessLog |
RouteCompiler.java | deployment |
tesseraql.mcp
Section titled “tesseraql.mcp”| Key | Read by | Documented in |
|---|---|---|
tesseraql.mcp.auth |
TesseraqlRuntime.java | — |
tesseraql.mcp.enabled |
TesseraqlRuntime.java | app-mcp |
tesseraql.mcp.resource |
StackIssuer.java, TesseraqlRuntime.java | oauth |
tesseraql.messaging
Section titled “tesseraql.messaging”| Key | Read by | Documented in |
|---|---|---|
tesseraql.messaging.backstop |
TesseraqlRuntime.java | — |
tesseraql.messaging.channels |
MessagingChannels.java | messaging |
tesseraql.metrics
Section titled “tesseraql.metrics”| Key | Read by | Documented in |
|---|---|---|
tesseraql.metrics.enabled |
TesseraqlRuntime.java | deployment |
tesseraql.metrics.unauthenticated |
TesseraqlRuntime.java | deployment |
tesseraql.migrations
Section titled “tesseraql.migrations”| Key | Read by | Documented in |
|---|---|---|
tesseraql.migrations.enabled |
AppMigrations.java | — |
tesseraql.migrations.historyName |
SchemaHistoryName.java | deployment |
tesseraql.modules
Section titled “tesseraql.modules”| Key | Read by | Documented in |
|---|---|---|
tesseraql.modules |
PackagedModules.java, ModulesGuard.java, ModuleDeclarationRules.java | admission, extending, getting-started, +3 more |
tesseraql.notifications
Section titled “tesseraql.notifications”| Key | Read by | Documented in |
|---|---|---|
tesseraql.notifications.alerts.channel |
TesseraqlRuntime.java | jobs, notifications |
tesseraql.notifications.alerts.checkInterval |
TesseraqlRuntime.java | notifications |
tesseraql.notifications.channels |
MailRules.java, NotificationChannels.java | account, notifications |
tesseraql.object-storage
Section titled “tesseraql.object-storage”| Key | Read by | Documented in |
|---|---|---|
tesseraql.object-storage.allowedBuckets |
ObjectStorageEgressRules.java | attachments |
tesseraql.object-storage.provider |
BlobStores.java, ObjectStorageEgressRules.java | deployment |
tesseraql.oidc
Section titled “tesseraql.oidc”| Key | Read by | Documented in |
|---|---|---|
tesseraql.oidc.claims.groups |
OidcConfig.java | — |
tesseraql.oidc.claims.login |
OidcConfig.java | — |
tesseraql.oidc.claims.map |
OidcConfig.java | — |
tesseraql.oidc.claims.name |
OidcConfig.java | — |
tesseraql.oidc.claims.roles |
OidcConfig.java | — |
tesseraql.oidc.claims.tenant |
OidcConfig.java | — |
tesseraql.oidc.clientId |
OidcConfig.java | — |
tesseraql.oidc.clientSecret |
OidcConfig.java | — |
tesseraql.oidc.clockSkew |
OidcConfig.java | — |
tesseraql.oidc.discoveryUri |
OidcConfig.java | — |
tesseraql.oidc.enabled |
OidcRuntimeExtension.java | authentication |
tesseraql.oidc.link.enabled |
OidcConfig.java | — |
tesseraql.oidc.link.provision |
OidcConfig.java | — |
tesseraql.oidc.postLoginUrl |
OidcConfig.java | authentication |
tesseraql.oidc.redirectUri |
OidcConfig.java | — |
tesseraql.oidc.requestTimeout |
OidcRuntimeExtension.java | — |
tesseraql.oidc.scopes |
OidcConfig.java | — |
tesseraql.orgunit
Section titled “tesseraql.orgunit”| Key | Read by | Documented in |
|---|---|---|
tesseraql.orgunit.mode |
IamAdminProviders.java, OrgUnitRules.java, OrgUnitSettings.java | data-scoping |
tesseraql.otel
Section titled “tesseraql.otel”| Key | Read by | Documented in |
|---|---|---|
tesseraql.otel.otlp.endpoint |
RuntimePools.java | deployment |
tesseraql.otel.serviceName |
RuntimePools.java | — |
tesseraql.outbox
Section titled “tesseraql.outbox”| Key | Read by | Documented in |
|---|---|---|
tesseraql.outbox.dispatch.fixedDelay |
TesseraqlRuntime.java | — |
tesseraql.outbox.dispatch.maxAttempts |
TesseraqlRuntime.java | messaging |
tesseraql.plugins
Section titled “tesseraql.plugins”| Key | Read by | Documented in |
|---|---|---|
tesseraql.plugins.allowlist |
Plugins.java | saml |
tesseraql.plugins.dir |
AdmissionProfile.java, Plugins.java | — |
tesseraql.plugins.requireSignature |
Plugins.java | — |
tesseraql.plugins.trustedKeys |
Plugins.java | app-layout, faq |
tesseraql.resultMaterialization
Section titled “tesseraql.resultMaterialization”| Key | Read by | Documented in |
|---|---|---|
tesseraql.resultMaterialization.maxRows |
RouteCompiler.java, TesseraqlRuntime.java | file-transfers |
tesseraql.resultMaterialization.onOverflow |
RouteCompiler.java, TesseraqlRuntime.java | — |
tesseraql.retention
Section titled “tesseraql.retention”| Key | Read by | Documented in |
|---|---|---|
tesseraql.retention.attachments |
TesseraqlRuntime.java | attachments |
tesseraql.retention.jobs |
TesseraqlRuntime.java | — |
tesseraql.retention.outbox |
TesseraqlRuntime.java | notifications |
tesseraql.retention.sweep |
TesseraqlRuntime.java | — |
tesseraql.saml
Section titled “tesseraql.saml”| Key | Read by | Documented in |
|---|---|---|
tesseraql.saml.allowIdpInitiated |
SamlRuntimeExtension.java | — |
tesseraql.saml.attributes.displayName |
SamlRuntimeExtension.java | — |
tesseraql.saml.attributes.email |
SamlRuntimeExtension.java | — |
tesseraql.saml.attributes.groups |
SamlRuntimeExtension.java | — |
tesseraql.saml.attributes.loginId |
SamlRuntimeExtension.java | — |
tesseraql.saml.attributes.map |
SamlRuntimeExtension.java | — |
tesseraql.saml.attributes.roles |
SamlRuntimeExtension.java | — |
tesseraql.saml.attributes.tenant |
SamlRuntimeExtension.java | — |
tesseraql.saml.clockSkew |
SamlRuntimeExtension.java | saml |
tesseraql.saml.enabled |
SamlRuntimeExtension.java | authentication, saml |
tesseraql.saml.idp.metadata |
SamlRuntimeExtension.java | — |
tesseraql.saml.idp.publicKey |
SamlRuntimeExtension.java | — |
tesseraql.saml.idp.sloUrl |
SamlRuntimeExtension.java | — |
tesseraql.saml.idp.ssoUrl |
SamlRuntimeExtension.java | — |
tesseraql.saml.link.enabled |
SamlRuntimeExtension.java | — |
tesseraql.saml.link.provision |
SamlRuntimeExtension.java | — |
tesseraql.saml.link.subjectAttribute |
SamlRuntimeExtension.java | — |
tesseraql.saml.requireSignedLogout |
SamlRuntimeExtension.java | — |
tesseraql.saml.sp.acsUrl |
SamlRuntimeExtension.java | — |
tesseraql.saml.sp.audience |
SamlRuntimeExtension.java | saml |
tesseraql.saml.sp.nameIdFormat |
SamlRuntimeExtension.java | — |
tesseraql.saml.sp.signingKey |
SamlRuntimeExtension.java | — |
tesseraql.scim
Section titled “tesseraql.scim”| Key | Read by | Documented in |
|---|---|---|
tesseraql.scim.attributes.map |
ScimRuntimeExtension.java | iam-admin |
tesseraql.scim.groups.keys |
ScimRuntimeExtension.java | — |
tesseraql.scim.outbound.target.token |
ScimRuntimeExtension.java | — |
tesseraql.scim.outbound.target.url |
ScimRuntimeExtension.java | — |
tesseraql.scim.users.keys |
ScimRuntimeExtension.java | — |
tesseraql.security
Section titled “tesseraql.security”tesseraql.sessions
Section titled “tesseraql.sessions”| Key | Read by | Documented in |
|---|---|---|
tesseraql.sessions.idleTimeout |
TesseraqlRuntime.java | authentication, iam-admin |
tesseraql.sessions.maxPerSubject |
TesseraqlRuntime.java | authentication |
tesseraql.sessions.store |
TesseraqlRuntime.java | deployment |
tesseraql.sessions.ttl |
TesseraqlRuntime.java | authentication |
tesseraql.shutdown
Section titled “tesseraql.shutdown”| Key | Read by | Documented in |
|---|---|---|
tesseraql.shutdown.forceOnTimeout |
TesseraqlRuntime.java | — |
tesseraql.shutdown.timeout |
MultiAppHost.java, TesseraqlRuntime.java | deployment, hosting |
tesseraql.sql
Section titled “tesseraql.sql”| Key | Read by | Documented in |
|---|---|---|
tesseraql.sql.timeoutSeconds |
SqlDefaults.java | deployment, multi-tenancy |
tesseraql.studio
Section titled “tesseraql.studio”| Key | Read by | Documented in |
|---|---|---|
tesseraql.studio.confirmApply |
StudioRuntimeExtension.java | studio |
tesseraql.studio.dataBrowser.edit.enabled |
StudioRuntimeExtension.java | studio |
tesseraql.studio.dataBrowser.enabled |
StudioRuntimeExtension.java | five-minute-demo, studio |
tesseraql.studio.enabled |
StudioRuntimeExtension.java, StudioAppProvider.java | studio |
tesseraql.studio.scaffold.enabled |
StudioRuntimeExtension.java | studio |
tesseraql.studio.testRunner.enabled |
StudioRuntimeExtension.java | notifications, studio |
tesseraql.studio.testRunner.maxRows |
StudioRuntimeExtension.java | — |
tesseraql.studio.testRunner.queryTimeoutSeconds |
StudioRuntimeExtension.java | — |
tesseraql.temp
Section titled “tesseraql.temp”| Key | Read by | Documented in |
|---|---|---|
tesseraql.temp.bucket |
TesseraqlRuntime.java | deployment |
tesseraql.temp.maxBytes |
TesseraqlRuntime.java | deployment |
tesseraql.temp.store |
TesseraqlRuntime.java | file-transfers |
tesseraql.transfers
Section titled “tesseraql.transfers”| Key | Read by | Documented in |
|---|---|---|
tesseraql.transfers.retentionDays |
TesseraqlRuntime.java | — |
tesseraql.transfers.reviewTtl |
TesseraqlRuntime.java | — |
tesseraql.transfers.sweepInterval |
TesseraqlRuntime.java | — |
tesseraql.ui
Section titled “tesseraql.ui”| Key | Read by | Documented in |
|---|---|---|
tesseraql.ui.color |
TesseraqlRuntime.java | — |
tesseraql.ui.density |
TesseraqlRuntime.java | — |
tesseraql.ui.neutral |
TesseraqlRuntime.java | notifications |
tesseraql.ui.stylesheet |
TesseraqlRuntime.java | — |
tesseraql.ui.theme |
TesseraqlRuntime.java | account |
tesseraql.workflow
Section titled “tesseraql.workflow”| Key | Read by | Documented in |
|---|---|---|
tesseraql.workflow.bulk.maxKeys |
RouteCompiler.java | approval-workflow |
tesseraql.workflow.mode |
RouteCompiler.java, WorkflowCases.java, WorkflowRules.java, +1 more | approval-workflow |
tesseraql.workflow.sweep.interval |
WorkflowSettings.java | approval-workflow |