diff --git a/docs/graphql/manual/deployment/graphql-engine-flags/reference.rst b/docs/graphql/manual/deployment/graphql-engine-flags/reference.rst
index 21fc12bd695..70cacd705de 100644
--- a/docs/graphql/manual/deployment/graphql-engine-flags/reference.rst
+++ b/docs/graphql/manual/deployment/graphql-engine-flags/reference.rst
@@ -71,19 +71,27 @@ These are the environment variables which are available:
 
 .. code-block:: none
 
-   HASURA_GRAPHQL_DATABASE_URL   Postgres database URL
-                                 <postgres/postgresql>://<user>:<password>@<host>:<port>/<db-
-                                 name>
-                                 Example: postgres://admin:mypass@mydomain.com:5432/mydb
+   HASURA_GRAPHQL_DATABASE_URL      Postgres database URL
+                                    <postgres/postgresql>://<user>:<password>@<host>:<port>/<db-
+                                    name>
+                                    Example: postgres://admin:mypass@mydomain.com:5432/mydb
 
-   HASURA_GRAPHQL_ACCESS_KEY     Secret access key, required to access this instance.
-                                 If specified client needs to send 'X-Hasura-Access-Key'
-                                 header
+   HASURA_GRAPHQL_ACCESS_KEY        Secret access key, required to access this instance.
+                                    If specified client needs to send 'X-Hasura-Access-Key'
+                                    header
 
-   HASURA_GRAPHQL_AUTH_HOOK      The authentication webhook, required to authenticate
-                                 incoming request  
+   HASURA_GRAPHQL_AUTH_HOOK         The authentication webhook, required to authenticate
+                                    incoming request  
 
-   HASURA_GRAPHQL_CORS_DOMAIN    The domain, including sheme and port, to allow CORS for
+   HASURA_GRAPHQL_CORS_DOMAIN       The domain, including sheme and port, to allow CORS for
+
+   HASURA_GRAPHQL_JWT_SECRET        The JSON containing type and the JWK used for
+                                    verifying. e.g: `{"type": "HS256", "key":
+                                    "<your-hmac-shared-secret>"}`,`{"type": "RS256",
+                                    "key": "<your-PEM-RSA-public-key>"}
+                                    Enable JWT mode, the value of which is a JSON
+
+   HASURA_GRAPHQL_ENABLE_CONSOLE    Enable API console. It is served at '/' and '/console'
 
 
 .. note::