The hub binds to 127.0.0.1 only and requires a bearer token on every route except /health. The token lives in client.json with mode 0600 and is compared in constant time. If no token is configured, the hub accepts local requests without auth, which is fine for a single-user machine and wrong for a shared one.

Messages and leases are stored under ~/.local/share/opencode/agent-mesh/ (or MESH_DATA_DIR). Messages are redacted for obvious tokens and keys before they are stored, but that redaction is best effort. Do not send secrets through the mesh.

Open an issue on the repository. Do not include tokens, keys, or session contents.