Security

Last updated: 6 October 2026

1. Your data stays with you

Agents, files, conversations and history live on your Mac. The clay.tenue.one relay keeps only accounts and a hash of each device key; messages, files and audio pass through it only in transit and are not stored.

2. No open ports

Your Mac opens one outbound connection to the relay. The Clay server on the Mac listens only locally (127.0.0.1) and is not exposed to the network or the internet.

3. Sign-in and devices

• Sign-in through Tenue ID (OpenID Connect, code + PKCE) with an approval page showing the device and a verification code.
• Each device has its own random 256-bit token; it can be revoked individually and immediately.
• One phone per account; a new phone signs the old one out.

4. Fingerprint approval

Sensitive actions (shell commands, opening apps, downloads, writing files, autonomous mode) run only after you confirm with your fingerprint or PIN on the phone. The confirmation secret stays in the phone's secure storage and is released only after the biometric check; the relay stores only a hash.

5. Signed updates

Mac app updates are digitally signed (Ed25519) with a key that is not on the server and verified before installation; Android updates are accepted by the system only if signed with the same key.

6. Report a vulnerability

Write to contact@tenue.ro with details. We respond quickly and take no legal action against researchers acting in good faith.

Back to Clay