# Environment Variables

Typed Coinbase reads these when not passed directly to `Coinbase.new()`:

```bash
COINBASE_API_KEY_NAME="organizations/{org_id}/apiKeys/{key_id}"
COINBASE_PRIVATE_KEY="-----BEGIN EC PRIVATE KEY-----..."
```

Both come from a CDP API Key created in the [CDP Portal](https://portal.cdp.coinbase.com/). `COINBASE_PRIVATE_KEY` is either the EC (P-256) PEM export, or the portal's base64-encoded Ed25519 seed — the format is detected automatically, no configuration needed.

Neither is required for a `public=True` client, which only reaches `advanced_trade.products.public` and the `market_data` WebSocket channels.

See [API Keys Setup](/typed/coinbase/api-keys) for how to create these.