Create your agent

This is the official documentation of the forestadmin/laravel-forestadmin v2+ and forestadmin/symfony-forestadmin PHP agents.

  // Mandatory options (those will be provided during onboarding)
  'authSecret' => env('FOREST_AUTH_SECRET'),
  'envSecret' => env('FOREST_ENV_SECRET'),
  'isProduction' => false,

  // Optional variables
  'customizeErrorMessage' => ...,
  'logger' => ...,
  'loggerLevel' => ...,
  'permissionsCacheDurationInSeconds' => ...,
  'prefix' => ...,
  'schemaPath' => ...,

Mandatory variables

All mandatory variables are provided as environment variables during onboarding.

Your agent cannot be started without them, and no default values are provided.

authSecret (string, no default)

This variable contains a random secret token which is used to sign authentication tokens used in request between your users and your agent.

It is generated during onboarding, but never leaves your browser, and is not saved on our side.

Never share it to anybody, as that would allow attackers to impersonate your users on your agent!

envSecret (string, no default)

This variable contains a random secret token which is used to authenticate requests between your agent and our servers.

Unlike the authSecret, it is stored in our database, so it can be privately shared with Forest Admin employees.

Never share it publicly, as it would allow attackers to impersonate your agent with our servers. That would not cause any data leak, but opens the possibility for attackers to cause denial of service.

isProduction (boolean, no default)

In development mode the agent has a few extra behaviors (when using )

  • At startup, the agent will print the URL of all mounted charts

  • At startup, the agent will update the .forestadmin-schema.json.

  • When exceptions are thrown, a report will be printed to stdout.

Optional variables

customizeErrorMessage (function, defaults to null)

When unexpected errors are raised in the agent code during a request, the error will be logged (using options.logger), but in the admin-panel, the final user will get a default message 'Unexpected error'.

This is done as to:

  • Prevent error message from leaking internal information about the agent (credentials, ...).

  • Prevent technical/cryptic error messages to show in the frontend.

This behavior can be customized.

  'customizeErrorMessage' => function ($error) {
    if ($error instanceof ConnectionRefusedError) {
      return 'Failed to connect to the database, ' +
        'contact John at 06 12 34 56 78 and tell him to reboot the server';

    return 'Unexpected error, ' +
      'contact Jane at 06 87 65 43 21 and tell her to get it fixed.';

forestServerUrl (string, defaults to '')

Forest Admin encourages customers to use In-app installations.

You may want to have control of the logger which is used by Forest Admin.

This configuration key allows to format and route logs to a logging service, instead of printing them in stdout.

  'loggerLevel' => 'Info',
  'logger' => function (string $logLevel, string $message) {

permissionsCacheDurationInSeconds (number, defaults to 15 minutes)

Forest Admin administrators can restrict operations which final users can perform ↗.

Those permissions are enforced both in the frontend, and in your agent.

This configuration variable allows to customize how often the agent should ask the server to provide the permissions table.

  'permissionsCacheDurationInSeconds' => 15 * 60,

prefix (string, default to empty string)

This variable adds a prefix to the url at which routes are locally mounted on your application. It is mostly used for customers which wish to mount multiple agent instances on the same Node.js process (for setups using multiple Forest Admin projects).

Note that this variable has no influence on the base URL that will be used by your users to reach the agent: it is determined only by the application URL provided during onboarding and deployment.

This is done so that customers using reverse proxies can implement their routing table as they see fit.

Desired Local URLsDesired Public URLsHow to configure your agent


prefix = '' agentUrl = ''


prefix = '' agentUrl = ''


prefix = 'prefix' agentUrl = ''


prefix = 'local-prefix' agentUrl = ''

  'prefix' => 'api',

schemaPath (string, defaults to '.forestadmin-schema.json')

This variable allows to choose where the .forestadmin-schema.json file should be written in development, and read from in production.

This allows to:

  • Improve git repository organisation

  • Work around read only folders (for instance, if developing using a read only docker volume).

  • Have flexibility when using custom builds in production (code minification, ...)

  'schemaPath' => '/volumes/fa-agent-configuration/schema.json',

Last updated