Security first
Powerful without asking for everything.
Rigonic is designed around explicit permissions, server-side secrets and separation between the public dashboard and the internal bot API.
Secrets stay server-side
Discord client secrets, internal API keys and provider keys are never meant to be exposed to browser JavaScript.
Discord OAuth
The dashboard only exposes manageable servers from the logged-in Discord account.
Permission-aware
Rigonic can keep sensitive permissions optional instead of requiring Administrator by default.
Encrypted provider keys
AI provider credentials are sent server-to-server and encrypted before persistent storage.
Separated architecture
Bot, API and web dashboard remain separate layers for cleaner security boundaries and easier scaling.
No public admin indexing
Dashboard and admin areas are marked for noindex and remain behind Discord authentication.