On this page
First setup
Complete the installed version's onboarding and use your own authorized model-provider credentials. A VPS application installation does not include unlimited model usage or third-party subscriptions.
Limit the blast radius
Run with a dedicated account and only the files, tools, and channels required for the task. Avoid unrestricted access to production databases, billing systems, cloud accounts, or unrelated users' data. Keep control endpoints authenticated and private.
Review untrusted input
Web pages, uploaded documents, messages, and third-party skills can contain malicious instructions. Treat them as data, not permission to run a command or disclose secrets. Review tool requests and expenses before granting broader capabilities.
Before real work
Use a disposable test project, set budget controls where supported, and back up persistent agent state. AI may make mistakes and changes can cause unrecoverable data loss. Do not remove approval checks simply to make a task faster.