| WIKIJS_URL | Yes | Base URL of the Wiki.js instance, e.g. https://wiki.example.com |
| WIKIJS_TOKEN | Yes | API key from Administration → API Access. WIKIJS_API_KEY is accepted as an alias Secret. |
| WIKIJS_LOCALE | No | Locale assumed by page tools that are not given one; part of a page's identity (default: en) |
| WIKIJS_READ_ONLY | No | Set to true to register only the read tools (default: false) |
| WIKIJS_ALLOWED_PATHS | No | Comma-separated page path prefixes the write tools are confined to, matched by path segment |
| WIKIJS_ALLOW_TOOLS | No | Comma-separated tool names or list_* prefixes to register; 'essential' selects a curated preset (default: all tools) |
| WIKIJS_DENY_TOOLS | No | Comma-separated tool names or list_* prefixes to remove from whatever the allow list left |
| WIKIJS_INSECURE_TLS | No | Set to true to accept a self-signed certificate from a self-hosted instance (default: false) |
| WIKIJS_URL | Yes | Base URL of the Wiki.js instance, e.g. https://wiki.example.com |
| WIKIJS_TOKEN | Yes | API key from Administration → API Access. WIKIJS_API_KEY is accepted as an alias Secret. |
| WIKIJS_LOCALE | No | Locale assumed by page tools that are not given one; part of a page's identity (default: en) |
| WIKIJS_READ_ONLY | No | Set to true to register only the read tools (default: false) |
| WIKIJS_ALLOWED_PATHS | No | Comma-separated page path prefixes the write tools are confined to, matched by path segment |
| WIKIJS_ALLOW_TOOLS | No | Comma-separated tool names or list_* prefixes to register; 'essential' selects a curated preset (default: all tools) |
| WIKIJS_DENY_TOOLS | No | Comma-separated tool names or list_* prefixes to remove from whatever the allow list left |
| WIKIJS_INSECURE_TLS | No | Set to true to accept a self-signed certificate from a self-hosted instance (default: false) |