Security
Designed so the desktop app does less risky work.
Privora keeps billing, account sessions, and hosted model credentials on the web/backend side. Desktop focuses on local files, local settings, and authenticated API calls.
No hosted key in desktop
The OpenRouter key belongs only in backend environment secrets, never the desktop bundle.
Gateway-enforced credits
Hosted runs are designed to pass through server checks for plan, balance, model allowlist, and caps.
Browser account flow
Sign-in and billing happen on the website. Desktop connection will use a short-lived browser callback flow.