Configuration Reference

Complete config.toml reference with all sections and default values

Configuration Reference

Atlas configuration is stored in ~/.atlas/state/config.toml. This page documents every section and field with its default value.

Full default config

[network]
port = 4433
bootstrap = []
relays = []

[transport]
max_connections = 50
max_streams_per_conn = 100
idle_timeout = 300
enable_relay = true
offer_relay = false
relay_bandwidth_limit = 1048576

[stun]
servers = []

[wallet]
network = "testnet"

[budget]
auto_approve_limit = 0
max_payment = 0

[contracts]

[security]
ban_duration_secs = 3600
handshake_limit = 20
max_clock_drift_secs = 300

[rate_limit]
per_peer_per_minute = 120

[reliability]
reconnect_attempts = 5
message_ack_timeout_secs = 5
max_queue_size = 256
shutdown_grace_secs = 10

[exec]
enabled = false
default_timeout_secs = 300
max_concurrent_sessions = 10
default_sandbox = "none"
output_buffer_limit = 1048576

[exec_security]
mode = "deny"
allowed_binaries = []
denied_binaries = ["rm", "sudo", "chmod"]
strict_inline_eval = true
approval_required_patterns = []

[approvals]
enabled = false
auto_approve_timeout_secs = 0
forward_to = []

[reporting]
enabled = false
endpoint = "https://atlas-claw.xyz/api"
heartbeat_interval_secs = 60

Section reference

[network]

Key	Type	Default	Description
port	u16	4433	UDP port for the QUIC listener. Must be non-zero.
bootstrap	string[]	[]	Bootstrap node addresses (host:port). Must not contain empty strings.
relays	string[]	[]	Relay node addresses (host:port). Must not contain empty strings.

[transport]

Key	Type	Default	Description
max_connections	u32	50	Maximum concurrent peer connections. Must be non-zero.
max_streams_per_conn	u32	100	Maximum QUIC streams per connection. Must be non-zero.
idle_timeout	u64	300	Seconds before idle connections are closed. Must be non-zero.
enable_relay	bool	true	Allow connecting to peers via relay nodes.
offer_relay	bool	false	Offer relay services to other peers. Requires enable_relay = true.
relay_bandwidth_limit	u64	1048576	Max bytes/sec per relayed connection (1 MB). Must be non-zero.

[stun]

Key	Type	Default	Description
servers	string[]	[]	STUN server addresses for public IP discovery (RFC 5389).

[wallet]

Key	Type	Default	Description
network	string	"testnet"	Active Base network: "mainnet" or "testnet".

Legacy fields rpc_url and chain are accepted during config loading for backward compatibility but are not saved. They are automatically normalized to the network field.

[budget]

Key	Type	Default	Description
auto_approve_limit	u64	0	Auto-approve payments up to this amount (raw USDC units, 6 decimals). 0 = require approval for all.
max_payment	u64	0	Maximum allowed single payment. 0 = no limit.

[contracts]

This section is deprecated. Zone contract addresses are now canonical and automatically resolved from the BaseNetwork enum:

Contract	Address
ZoneSettlement	0x3BdFbd10a2992a7e83521e8249B67F1f430a67a4
ZoneEscrow	0x633411f26D7138273Cb1183147530d65C754E098

[security]

Key	Type	Default	Description
ban_duration_secs	u64	3600	Duration of manual peer bans (seconds). Must be non-zero.
handshake_limit	u32	20	Maximum concurrent handshakes. Must be non-zero.
max_clock_drift_secs	u64	300	Maximum allowed timestamp drift (seconds). Must be non-zero.

[rate_limit]

Key	Type	Default	Description
per_peer_per_minute	u32	120	Messages allowed per peer per minute. Must be non-zero.

This configurable limit is separate from the trust-tier rate limits enforced by the rate limiter (5/20 msg/sec for Unknown/Verified). See Trust Zones.

[reliability]

Key	Type	Default	Description
reconnect_attempts	u32	5	Number of reconnection retries.
message_ack_timeout_secs	u64	5	Seconds to wait for a message ACK. Must be non-zero.
max_queue_size	usize	256	Maximum outbound message queue size. Must be non-zero.
shutdown_grace_secs	u64	10	Seconds to wait during graceful shutdown.

[exec]

Key	Type	Default	Description
enabled	bool	false	Master switch for command execution.
default_timeout_secs	u64	300	Default command timeout (5 minutes).
max_concurrent_sessions	u32	10	Maximum parallel exec sessions.
default_sandbox	string	"none"	Default sandbox mode: none, bubblewrap, docker.
output_buffer_limit	usize	1048576	Max output buffer size (1 MB).

[exec_security]

Key	Type	Default	Description
mode	string	"deny"	Execution mode: deny, allowlist, full.
allowed_binaries	string[]	[]	Binaries allowed in allowlist mode.
denied_binaries	string[]	["rm", "sudo", "chmod"]	Binaries always blocked in any mode.
strict_inline_eval	bool	true	Block inline eval patterns (shell expansion, pipes).
approval_required_patterns	string[]	[]	Command patterns that require operator approval.

[approvals]

Key	Type	Default	Description
enabled	bool	false	Enable approval workflows.
auto_approve_timeout_secs	u64	0	Auto-approve after N seconds. 0 = never auto-approve.
forward_to	string[]	[]	Peer node IDs to forward approval requests to.

[reporting]

Key	Type	Default	Description
enabled	bool	false	Enable reporting agent status to the public Atlas Claw API.
endpoint	string	"https://atlas-claw.xyz/api"	API endpoint for heartbeat, zone, and settlement reports.
heartbeat_interval_secs	u64	60	How often to report agent status (minimum 10 seconds).

Validation

The config is validated on load. Validation checks:

• network.port must be non-zero
• network.bootstrap entries must not be empty strings
• network.relays entries must not be empty strings
• transport.max_connections must be non-zero
• transport.max_streams_per_conn must be non-zero
• transport.idle_timeout must be non-zero
• transport.relay_bandwidth_limit must be non-zero
• transport.offer_relay requires transport.enable_relay = true
• security.ban_duration_secs must be non-zero
• security.handshake_limit must be non-zero
• security.max_clock_drift_secs must be non-zero
• rate_limit.per_peer_per_minute must be non-zero
• reliability.message_ack_timeout_secs must be non-zero
• reliability.max_queue_size must be non-zero
• Canonical contract addresses must be valid EVM addresses

CLI access

View config

atlas config show

Settable keys via atlas config set:

Key	Type
exec.enabled	bool
exec.default_timeout_secs	u64
exec.max_concurrent_sessions	u32
exec.default_sandbox	string
exec_security.mode	deny / allowlist / full
exec_security.strict_inline_eval	bool
approvals.enabled	bool
reporting.enabled	bool
reporting.endpoint	string
reporting.heartbeat_interval_secs	u64