bcat.service and ollama.service only. Does not affect nginx, docker, or other shared services./api/v1/* endpoints.
Each token has its own scopes and rate limit. Tokens are shown once at creation —
only the SHA-256 hash is stored, so a leaked DB cannot leak the secret. Revocation is instant.
infer scope (raw model passthrough, bypasses routing) is admin-only and not selectable here.
0 or unlimited for no per-token limit.
self_studied memories). Every probe is logged below — accepted, rejected, or otherwise — so you can audit exactly what bcat is teaching itself.