Security

The public API is a gate, not a tunnel.

External systems send public-safe requests to the API gateway. The gateway validates, sanitizes, scopes, logs, and queues jobs. The local Atlas bridge polls outbound and returns sanitized results.

Request controls

  • API key authentication
  • Scope checks
  • Terms acceptance
  • Rate limits
  • Payload size limits
  • SSRF and local path guards

Bridge controls

  • Outbound polling only
  • Signed service token
  • Job allowlist
  • Sanitized results
  • Proof records

Always blocked

  • Private local file reads
  • Gmail, publishing, payment, deployment, and device actions
  • Shell, Docker, Codex, local model, and private memory access