09 / Reference
Security & license
Understand where your workspace data is handled, what an approval controls, and how to report a problem. The controls described here have limits and do not guarantee that every task or integration is safe.
Workspace data and credentials
- Hosted workspace. The Muster service stores and processes account and workspace records. Relevant task content can be sent to the model providers and connected services you use.
- Provider keys. Keys saved through hosted account settings are held in an account-scoped encrypted vault on the service and used for provider requests. Settings reports whether a key is configured without returning its saved value.
- Existing desktop installations. Local workspace and configuration data can remain on the computer running that installation. Using a local interface does not prevent external provider or app requests.
- Companions and backups. Phones and watches can retain session data, drafts or caches. They are not full workspace backups. Review the export and restore behavior of your installed version; account sign-in and Drive consent do not prove that every record or credential can be recovered.
The privacy policy describes data handling. Account & device setup explains the distinction between an account, a provider connection, device permission and backup consent.
Action controls and their limits
Supported engines surface permission requests as approval cards. Read the proposed action and destination before responding. Standing grants apply within their configured scope; engine and tool behavior can differ. An approval record does not establish that the resulting work is correct.
Configured budgets and available usage reports help you review consumption. Provider reporting can be incomplete or delayed, and connected services can bill separately. Privacy Shield can mask recognized patterns on supported paths; it is not a guarantee that all sensitive content is detected or kept on your device.
Task receipts retain available activity and usage information. Signature verification checks a supported receipt's integrity; it does not prove task quality or comprehensive security. See Approvals & privacy for the controls in the conversation.
Reporting a security issue
Use the private reporting contact in security.txt. Include the affected version and steps to reproduce, and omit real provider keys, session credentials and personal task content. Do not publish exploit details in a public support thread.
Applicable licenses
The current source license identifies Muster under the Business Source License 1.1, © 2026-present Ramagiritharun (Tharun Ramagiri), with the terms in its accompanying LICENSE. It lists a change date of 2030-08-19 and Apache License, Version 2.0 as the change license. Content covered by a separate proprietary or third-party license follows that license.
Use the license supplied with the particular version for its exact grants, restrictions and notices. These setup guides describe the Muster service and supported apps; they do not replace or amend an existing license. The service's terms of service are separate.
Where to go next
Read Account & device setup for connections and storage, Approvals & privacy for human decisions, or For agents for authorized workspace access.