NowAIKit is designed with security as a priority:

• Supports OAuth 2.0 (preferred) and Basic authentication
• Credentials stored only in environment variables, never in code
• No credentials are logged or written to disk

• Read-only by default: All write operations disabled unless explicitly enabled
• Table allowlist: Only approved tables accessible unless ALLOW_ANY_TABLE=true
• Script execution safeguards: Requires both WRITE_ENABLED=true and SCRIPTING_ENABLED=true

1. Never enable SCRIPTING_ENABLED=true in production unless absolutely necessary
2. Keep WRITE_ENABLED=false for read-only integrations
3. Use OAuth authentication over Basic auth
4. Regularly rotate credentials
5. Use service accounts with minimal required permissions

If you discover a security vulnerability, please open a GitHub issue or contact the maintainers.

1. Script execution risk: When enabled, execute_script_include can run arbitrary server-side code
2. Natural language processing: Simplified NLP may misinterpret commands - always verify