How PocketBay protects your apps, credentials, and runtime

Build isolation

Each app builds and runs in an isolated environment. Uploads exclude node_modules, .git, caches, and local secrets before packaging.

Container boundaries

Apps run in single-container sandboxes with network policies suited for public web services — not shared processes across tenants.

Credential handling

Deploy uses one-time browser pairing instead of long-lived tokens in your repo. Non-public env vars stay separate from build artifacts.

Observability

Logs, metrics, health checks, and structured deploy errors are exposed to you and your AI agent — not arbitrary shell access.