Ollama Smart Router is designed for local or trusted-network use. Do not expose it directly to the public internet.

• Bind to 127.0.0.1 unless you have a specific reason to expose the service.
• Configure api_keys or OLLAMA_SMART_ROUTER_API_KEY before binding to 0.0.0.0.
• Put the router behind your own firewall, VPN, or reverse proxy if other machines need access.
• Leave log_prompt_text: false unless debugging locally.
• Keep config.yaml private because it may contain API keys and local network details.

If you find a security issue, avoid posting secrets, prompt contents, or private model outputs in public issue reports. Share the minimum reproduction details needed to diagnose the problem.