Credentials and secrets
Hallvi keeps every token and secret on the computer where it runs. The agent works with them without seeing their values.
- Your server gets a secret's value only when a command needs it.
- Hallvi has no login, so anyone who can use your user account can use your connections.
- To read back a value Hallvi generated, press Reveal or Copy on the Environment Variables page.
| What | Kept in | The agent sees | Your server gets |
|---|---|---|---|
| ChatGPT login | ~/.config/hallvi/pi | No | No |
| GitHub, Hetzner and Cloudflare tokens | ~/.config/hallvi/pi | No | No |
| SSH key for each application | ~/.local/share/hallvi | No | The public half |
| Application secrets, such as database passwords | ~/.local/share/hallvi | The name only | The value, when a command needs it |
Only your user account can read these files, and nothing else protects them. Hallvi has no login, so anyone who can use your account can use your connections.
Application secrets
- Generated. Hallvi creates random values, such as passwords, itself.
- Asked for. For a value only you know, Hallvi shows a card with a password field. Paste the value and press Give it.
- Reading one back. On the Environment Variables page, under Made by Hallvi, press Reveal or Copy. Hallvi cannot show values you typed.
Disconnect or revoke
| Account | How |
|---|---|
| GitHub | Disconnect on the GitHub page in Settings. To revoke it on GitHub too, use authorized GitHub Apps. |
| Hetzner, Cloudflare | Delete the token in the provider's console. |
| ChatGPT | Disconnect on the ChatGPT & model page stops new messages. It keeps the login file and does not revoke the token. |
Where Hallvi reads your code
Hallvi works on a copy of your repository. The Workspace page in Settings decides where:
This is the default. Commands run as your user, without Hallvi's tokens. A shell command can still reach your files, so this is a precaution, not a sandbox.
Commands run with no network and none of your files. It needs Docker running, and never falls back by itself. Use it for code you do not trust.
If you connect backup storage, Hallvi also copies its own records and keys there, encrypted.