Your machine, but never loose on it.
Uai runs on your own hardware, with your keys, in your name — yet every
task is fenced in its own throwaway container and fresh
git worktree. Power without blast radius.
Secret-blind by design
The cloud stores an environment schema — keys and labels, never values — and holds no AI keys, no SSH keys, no GitHub tokens. Secrets live encrypted on your host under a host master key. The cloud only knows "host H has credentials: yes/no."
Attributed to you, not a bot
Every task carries the task creator's own credentials. Commits are authored with your git identity (your name and email), and git runs over SSH with your own per-user key — an ed25519 keypair generated on the host, private key encrypted under the host master key, only the public key pasted into GitHub. Pull requests use your GitHub user-to-server token from the Uai GitHub App, injected per task. So the work attributes to the actual person, never a bot.
Isolation
Each task gets its own Compose stack, worktree, and branch. Declared
preview ports bind to 127.0.0.1 and reach you through the
cloud proxy; undeclared ports are never forwarded. Agent CLIs run inside
the task container, not on your host. When the task ends, the container
and worktree are deleted.
What lives where
| The cloud (app.runuai.com) | Your host | |
|---|---|---|
| AI keys | Never | Encrypted, on the box |
| SSH keys · GitHub tokens | Never | Per-user, encrypted on the box |
| Your source code | Never | Worktree on disk |
| Environment values | Schema only (keys/labels) | Real values, encrypted |
| Orchestration | Tasks, chat, routing | Runs the work |
Common questions
Does the cloud store my AI keys or GitHub tokens?
No. The cloud is secret-blind: it holds an environment schema (keys and labels), never values — and no AI keys, no SSH keys, no GitHub tokens. Secrets live encrypted on your host.
Do commits and PRs show up as a bot?
No. Every task runs with your own credentials — your git identity, your per-user SSH key, and your GitHub user token — so commits and pull requests attribute to you, not a bot.
Do you mark up tokens?
No. You bring your own AI keys; inference is billed by your provider and never marked up by us.
Does it touch ~/.claude or ~/.ssh?
No. Tasks never bind-mount ~/.claude or ~/.ssh. Instead the host generates a per-user SSH key for you — never touching your personal ~/.ssh — and injects your per-task credentials into a throwaway container.
Is my code on your cloud?
No. Worktrees live on your host. The cloud orchestrates; it does not hold your source.
Do I need a GPU?
No. Uai calls hosted models (Claude, Codex); there is no local inference.
Trust it because you can see it.
Your host, your keys, your name — every task sandboxed. Set one up and read the model end to end.