Account
Security and privacy
How your code, secrets and accounts are protected.
- Secrets (environment variables, provider keys, MCP headers) are encrypted at rest and never sent to AI models.
- Apps run in isolated sandboxes in production, each with its own preview address separate from your MoboStudioAI session.
- Tokens (personal access tokens, built-in AI keys) are stored as hashes, shown once, and can be revoked instantly.
- Sign in with a password, Google, GitHub, Apple or a phone code, and review or sign out other sessions in Settings → Sessions.
- Security-relevant actions are recorded in an audit log available to administrators.