---
title: Configuration
description: Every command and environment variable.
---

Configuration comes from environment variables only. Every secret `NAME` can instead be given as `NAME_FILE`, a path
to a file holding the value; setting both is an error.

## Commands

| Command | What it does |
| --- | --- |
| `migrate [up]` | Applies the embedded schema migrations. |
| `migrate status` | Lists the migrations and whether each is applied. |
| `migrate down-to N` | Rolls back to version N (0 = empty schema). For development. |
| `sync [--source rpo\|fs\|all]` | One sync pass (default `all`). |
| `sync --every 1h` | Repeats the pass until stopped. A failed pass is logged; the schedule continues. |
| `sync --unblock --source rpo` / `fs:<list>` | Restores a source after a validation block. |
| `serve` | The HTTP API. |
| `suppress --subject <IČO> [--reason TEXT]` | Records an objection: keeps a subject out of name search. Prints the objection's number. |
| `suppress --undo --id N` | Revokes one objection, and says whether another still hides the subject. |
| `suppress --list [--id N]` | Prints every objection with its number; with `--id`, the records it covers and why. |
| `suppress --release --id N --record R` | Excludes one record from an objection (a wrong link); `--unrelease` withdraws it. |
| `suppress --export --output FILE [--overwrite]` | Writes the backup of the objections. Keep the file private. |
| `suppress --restore FILE` | Puts a backup back (`-` reads standard input) and confirms the installation. |
| `suppress --init-empty` | Confirms a new installation with no objections to restore. |
| `mcp --url URL` | MCP over stdio for a local AI client; forwards to the REST API at URL. See [AI agents (MCP)](/api/mcp). |
| `mcp-tools` | Prints the MCP tool list. |
| `demo` | Migrates, then loads fictional subjects into a new, empty database and marks it as a demo for good; `sync` then refuses it. See [Quick start](/quickstart#try-the-demo). |
| `openapi` | Prints the OpenAPI 3.1 document. |
| `version` | Prints the version. |

Exit codes: `0` success (also when another sync holds the lock), `1` failure (including a blocked source), `2` a
command-line mistake.

## Database

| Variable | Default | Meaning |
| --- | --- | --- |
| `REGISTER_DATABASE_URL` (secret) | — | PostgreSQL connection string; used by `serve`. |
| `REGISTER_MIGRATE_DATABASE_URL` (secret) | `REGISTER_DATABASE_URL` | Used by `migrate`, for example with a DDL role. |
| `REGISTER_SYNC_DATABASE_URL` (secret) | `REGISTER_DATABASE_URL` | Used by `sync`. A direct connection, not a pooler. |
| `REGISTER_OPERATOR_DATABASE_URL` (secret) | `REGISTER_SYNC_DATABASE_URL` | Used by `suppress`: the role that may change objections. A direct connection. |
| `REGISTER_DB_ROLE_API`, `_SYNC`, `_OPERATOR` | — | Names of the database roles; `migrate` grants each exactly the table rights it needs. Unset: nothing is granted. |
| `REGISTER_LOG_LEVEL` | `info` | `debug`, `info`, `warn`, `error`. Logs never contain names, queries or identifiers. |

## Sync

| Variable | Default | Meaning |
| --- | --- | --- |
| `REGISTER_RPO_BUCKET_URL` | the official bucket | Base URL of the RPO bulk files. |
| `REGISTER_FS_BASE_URL` | `https://report.financnasprava.sk` | Base URL of the list exports. |
| `REGISTER_WORK_DIR` | `<temp>/accquix-register` | Downloads in progress. |
| `REGISTER_DOWNLOAD_CONCURRENCY` | `6` | Parallel snapshot downloads. |
| `REGISTER_RPO_PART_RECORDS` | `100000` | Records in every snapshot part except the last. |
| `REGISTER_RPO_DAILY_MAX_RECORDS` | `20000` | A larger daily file is rejected. |
| `REGISTER_RPO_SNAPSHOT_MIN_RATIO` | `0.98` | A smaller new snapshot blocks absence marking. |
| `REGISTER_ABSENCE_MAX_RATIO` | `0.005` | RPO: absence marking above this share of active records is blocked. |
| `REGISTER_RPO_DATE_SKEW_DAYS` | `1` | RPO: a file whose `exportDate` is further than this from the date in its name is rejected; a date after tomorrow always is. |
| `REGISTER_RPO_BOOTSTRAP_MIN_RECORDS` | `2200000` | RPO: a first snapshot with fewer records is not published. |
| `REGISTER_RPO_SNAPSHOT_SETTLE` | `2h` | RPO: a snapshot is used only when its newest file has been in the bucket this long. |
| `REGISTER_FS_SKIP_MIN_ROWS` | `false` | Drops the row floors of the lists (`ds_dphs` 100 000, `ds_dsrdp` 500 000, `ds_iz_ran` 200 000, `ds_dphv` 10 000, `ds_dphz` 1 000, `ds_dpho` 300). |
| `REGISTER_FS_MAX_DROP` | per list | Overrides the drop threshold of every list (defaults: 0.03 for `ds_dsrdp`, `ds_dphs`, `ds_iz_ran`; 0.20 for the small lists). |

## API

| Variable | Default | Meaning |
| --- | --- | --- |
| `REGISTER_LISTEN` | `:8080` | Listen address. |
| `REGISTER_API_KEYS` (secret) | — | `name:sha256hex,…`: hashes of the keys. |
| `REGISTER_ALLOW_ANONYMOUS` | `false` | Serve without keys; disables the natural-person DIČ lookup. |
| `REGISTER_SEARCH_FUZZY` | `true` | Enables `mode=fuzzy`. |
| `REGISTER_MCP` | `false` | Serves the read-only MCP endpoint `/mcp` for AI agents. |
| `REGISTER_MCP_ALLOWED_ORIGINS` | — | Browser origins allowed to call `/mcp`, comma-separated. Empty refuses all. |
| `REGISTER_MCP_KEY` (secret) | — | For `mcp --url`: the API key sent to the instance. |
| `REGISTER_RATE_PER_SECOND` / `REGISTER_RATE_BURST` | `20` / `40` | Token bucket per caller, per instance. |
| `REGISTER_FUZZY_EVERY` | `5s` | One fuzzy search per caller per interval (burst 2). |
| `REGISTER_FUZZY_CONCURRENCY` | `1` | Fuzzy searches at once, per instance. |
| `REGISTER_FUZZY_TIMEOUT` | `2s` | Timeout of a fuzzy search. |
| `REGISTER_QUERY_TIMEOUT` | `3s` | Timeout of a default search or lookup. |
| `REGISTER_MAX_IN_FLIGHT` | the pool size | Data requests the instance runs at once. Beyond that a request waits `REGISTER_ADMIT_WAIT`, then gets `503` with `reason: overloaded`, so an overloaded instance keeps serving at its capacity. |
| `REGISTER_ADMIT_WAIT` | `250ms` | How long a request waits for a free slot. |
| `REGISTER_SEARCH_WORD_STEP_MAX` / `REGISTER_SEARCH_WORD_CAP` | `1000` / `1000` | The adaptive word step of the default search. |