Network security

Codevisor apps reach a machine through your Codevisor account: traffic between the app and the machine is end-to-end encrypted, and the machine only makes outbound connections to Codevisor Cloud. Signing a machine out with codevisor auth logout removes it from your account and revokes its credential.

The server's own HTTP API speaks plain HTTP and WebSocket and does not terminate TLS. If scripts or custom clients call it from another host, put it behind a TLS-terminating reverse proxy or a private overlay network.

Recommended baseline

• Run with --auth token whenever the bind address is not loopback.
• Restrict port 49361 with a host firewall or private network policy.
• Terminate HTTPS and WSS before traffic crosses an untrusted network.
• Keep the SQLite database and installation directory readable only by the service user.
• Store bearer tokens in an operating-system credential manager.
• Rotate the stable connection token with codevisor token --rotate if it is exposed. Separately issued tokens have no individual revocation endpoint.
• Remove machines you no longer use from your account with codevisor auth logout on the machine, or from the machine list in the Codevisor app.

Extension trust

Installing a plugin may run its declared install command and later runs its server command. A stdio MCP server runs arbitrary local commands. Skills can direct an agent to execute tools and change files. Review the source, manifest, command, requested tools, and update before adding any of them to a sensitive machine.

MCP credentials are encrypted with a key stored in the server data directory, but a process running as the service user can still access Codevisor's files. Filesystem permissions remain the primary local boundary.

Plugin panes use short-lived, pane-scoped tokens and HttpOnly cookies through the server proxy. Never give a plugin webview the machine bearer token.

The hosted API reference intentionally does not execute requests. This prevents server addresses and bearer tokens from being sent to www.codevisor.dev.