Connectivity & Security
realvco uses a multi-layer security model so your mVPS and AI companions run in a protected environment.
The Three Pillars
| Mechanism | Description | Benefit |
|---|---|---|
| Cloudflare Tunnel | VPS only initiates outbound connections — no inbound ports | Hides real IP, blocks direct attacks |
| Magic Token | Embedded one-time token for verification | No passwords to remember; short-lived = safer |
| Permission separation | Rose / Ada / Vi have different permission scopes | Limits blast radius of any single mistake |
Chapters
How Magic Token Works
Learn how Magic Token authenticates a single click — what keeps it safe, and how to protect it.
How Connectivity Works
How Cloudflare Tunnel gets your VPS online without exposing a single port.
Security Best Practices
Day-to-day operational security: backups, permission hygiene, anomaly monitoring.