Skip to content

Security

Credentials

Sign-in, runner passwords and model keys.

On this page

Owner sessions

TasteCase checks your sign-in session with Supabase before allowing private requests. Expired sessions require you to sign in again.

Runner tokens

A runner token is a secret password for one project’s runner. It is shown only once. Keep it out of chat, screenshots and source code. TasteCase stores a one-way fingerprint, not the token itself. Revoke it if it is lost or exposed; the runner can no longer connect, pick up work or upload results.

Provider keys

Your assistant’s model-provider key stays on the runner machine. Do not paste it into the website. TasteCase’s own Qloo and case-selection keys stay on its backend. See the configuration reference for the exact settings.