Søren

Søren.

Name Password

Access token

Sent as the X-Soren-Token header on API calls. Stored in this browser only.

Conversations

Huddles▸

Settings

Appearance

Theme

Fast mode (Haiku · reasoning off)

Hide huddles from sidebar

Time

Time zone

Signal

Status—

Relay address

Answer messages from Signal

Reach me on

Søren reaches you through signal-bot, a relay on this machine. Run signal-bot source add Søren --inbound --default-inbox --limit 60 and paste the token it prints. The token is kept in Søren's secret store and never shown again; it is never in the agent's environment, and reading the secrets file needs your approval. Reach me on picks where messages Søren starts go. Auto means Signal once a token is set. Concerns and notifications have an hourly limit, and if Signal fails only a content-free notice goes over Telegram; failure alerts keep their one-line text and their own interval. With Answer messages from Signal on, Søren answers what you send it there, in its own conversation, at most 30 turns an hour; send /stop to stop a reply. When a Signal turn needs your approval, Søren asks there: react 👍 or 👎 to the prompt, quote it with yes or no, or send yes and its code. No answer within the approval timeout, or a prompt it cannot send, denies.

Voice

Quality

Voice visual

Avatar (Live2D)

The avatar uses Live2D Cubism Core — proprietary Live2D Inc. freeware, fetched on demand from cubism.live2d.com under Live2D's own license (separate from Søren's open-source license) and cached locally; never bundled. The pulse needs none of this.

Signing in

—

Password

—

For signing in from a browser, on the tailnet or from outside it. Saving one signs out every browser signed in to this account, this one included. Stored only as a hash; it is never shown again.

This browser

Access token

Sent as the X-Soren-Token header on API calls. Stored in this browser only.

Tailnet helpers

Helper token—

One secret Søren presents to the tailnet helpers (computer use, TTS, Playwright). Stored on the server and shared across your devices — you set it once and it's never shown again. Must match the helper box's SOREN_HELPER_TOKEN.

Share my data

Accounts you pick here can read your workspace and transcripts. They can't write to them. Admins may also have access — see with your administrator.

Turn Søren's tools on or off. Applies to every device. (Built-in file/shell tools aren't listed — they're core and gated per action.)

Skills Søren can invoke, discovered from .claude/skills and your skills dir. Managed as files (drop a SKILL.md to add one).

Your own integration keys — scoped to your account only, and never shown again once saved. Keys marked using the instance default come from .env; only accounts an admin has granted inheritance fall back that way.

Keys your tools ask for

Declared by the tools installed on this box with REQUIRES — including your own, from tools/ or ~/.soren/tools. Same contract as above. A tool stays hidden until its key resolves, so these are listed whether or not they're set.

Accounts on this instance. A token is shown once when created — it's stored hashed and can't be recovered.

Admin settings

Admins can read every workspace

When on, any admin can read every account's workspace and transcripts. Turn it off to limit admins to their own data and whatever has been explicitly shared with them.

Storage

…

Put the key back?

Danger zone

Encrypt state at rest

Off by default, and deliberately so. Turning it on seals .env and every memory, transcript and account credential with the master key, and writes a plaintext backup beside them that you have to shred yourself. If that key is lost, none of it is recoverable. Turning it off stops writing new ciphertext; anything already sealed stays readable, and you will be asked separately whether to decrypt it.

Memory

Concerns raised by the agent

The agent flagged these for your attention instead of acting on its own.

Proposals awaiting review

The downtime consolidator wants to pin or change these always-injected memories, or has a curation question for you. Since pinned notes are shown to the agent every conversation, they need your OK.

Add a memory

Stored memories

Pinned memories are shown to the agent at the start of every conversation. Click a memory's text to edit it.

Recent changes

Every change to the memory store, whoever made it — you, the agent, or the consolidator. New since your last look is marked.

Consolidator

Downtime consolidation

Model

Review shared promotions

A scheduled agent that tidies long-term memory during downtime. It reads your transcripts and adds what's missing, but deleting or rewriting a memory, and pinned changes, are only proposed (shown above) for you to approve. Turn on review shared promotions to also review new shared memories and promotions to shared — stricter, but you'll approve more.

Model — Effort — Mode — Idle Cost $0 Tokens 0

◇ Plan

connecting