Local runtime & security
StellarFlow Desktop starts a local service on your device. The interface, session files, and tool calls do not pass through this website.
01 Local port
The app listens only on 127.0.0.1:30141 by default, so LAN and internet devices cannot connect directly. On quit, it stops active sessions before releasing the local port.
02 File-access boundary
The file API is not a general machine browser. It is limited to selected projects, session working directories, resolved project roots, and paths explicitly allowed by the app.
03 Model requests and credentials
When you send a task, required context travels from the local service to your selected model provider. Data handling then follows that provider's policy. Authentication credentials remain in the local pi Agent data directory.
An agent can invoke high-privilege tools. Desktop builds are designed for local use; do not publish the port through forwarding or an internet-facing reverse proxy.
04 Safer defaults
- Start read-only when exploring an unfamiliar project.
- Review the agent plan before installs, releases, or broad file operations.
- Keep StellarFlow current and verify installers with the SHA-256 value on the download page.