Skip to main content

​
Does my code upload to GPR by default?

Agent execution and worktrees stay on your machine. The relay carries the ACP session needed to control and observe the agent from your phone. Hosted PR/issue sync talks to GitHub/Jira/Slack when you connect those providers.

​
Can GPR run without GitHub?

Yes. Local sessions, the board, and daemon git features work without a code host. You lose host PR open/merge APIs and GitHub issue sync.

​
Who can approve tool calls?

You, via the mobile session UI, for kinds that are not auto-approved. Defaults differ for chat vs unattended tasks. See Permissions.

​
Where are integration tokens stored?

OAuth tokens for connected providers are stored by the GPR backend (encrypted at rest when token keys are configured). Agent vendor credentials (API keys, CLI logins) stay on the machine running the agent.

​
What if a machine is stolen?

  1. Remove the connection / workspace from the app.
  2. On the machine if you still can: gpr uninstall --purge
  3. Rotate GitHub/Jira/Slack OAuth by disconnecting and reconnecting.
  4. Rotate agent credentials on that host.

​
Is the daemon sandboxed in a container?

No. The daemon runs as a normal user process with access to the bound workspace directories and whatever the agent can reach under that user.