Browser and network protections
Why only your own browser can reach Limn, and what Limn sends over the network.
Limn has no sign-in of its own, so it protects itself a different way: only your own computer can reach it, and only Limn’s own pages can use it. This page explains those protections in plain terms, and lists everything Limn sends over the network.
#Only your computer can reach Limn
It listens on this computer only
Limn listens on your computer’s own internal address (localhost), not on your network. Other computers on your Wi-Fi or office network cannot open it.
Other websites cannot read it
A web page you have open in another tab could try to talk to Limn in the background. Limn answers only pages served from your own computer, so another site cannot read your data. It also refuses any request from another site that would change something, such as posting a comment or merging.
Disguised addresses are refused
A hostile site can try to reach Limn through a web address that secretly points at your computer. Limn refuses any request that does not use a local address, so that trick fails too.
The app loads nothing from elsewhere
The app’s pages run only Limn’s own scripts and fonts, and cannot be shown inside another site. Images in comments are the one exception: they load from wherever their author put them, as they do on GitHub.
Costly actions are rate limited
Actions that use your AI plan or your GitHub allowance can be called only so often, so a stuck page or script cannot run them in a loop.
#What leaves your computer
Limn talks only to the services below, and only to the ones you use:
| Sent to | What | When |
|---|---|---|
| GitHub | Reads of your repositories; the writes you press or switch on | Always, while Limn runs |
| Anthropic or OpenAI | Code, diffs, pull request and ticket text, docs sections for each AI run | When an AI run starts |
| Jira, Linear, Notion or GitHub Issues | Reads of linked tickets; two Jira writes you press | Once a tracker is set up |
| Confluence or Notion | Reads of the pages you add to Docs | When you add or refresh a document |
| SonarCloud | Reads of each pull request’s findings | Once SonarCloud is set up |
| Slack | The digest and the event messages you switch on | Once a webhook is saved |
| npm, GitHub | Downloads of the AI programs, the scoring model and the sandbox image | First start, or when you press Set up |
Limn sends nothing to its author. What each AI provider does with the work it receives is on How Anthropic and OpenAI treat your work.