Security and privacy for developers

Koder and KARMENBOT run on your computer. Keys and settings stay local. Review the selected approval mode before allowing edits or commands.

Keys

• Enter API keys and GitHub tokens in settings, never in chat.
• When public API tokens become available, keep them on your own computer, never in web page source. They cannot read model keys.

Approvals and permissions

See approval modes. Accepting a license enables no optional permissions.

Network requests

Third-party authorization

Disconnecting a plugin in Koder does not revoke authorization on the other service. Revoke it on that service’s website.

Report a security issue

See security.txt for contact details and security patches for published fixes.

Licenses

KARMENBOT terminal source is licensed under GPL-3.0-only with a linking exception.