Security
Safe by design, not by promise
The agent on the server where your site runs can do real work, so every command is signed, reviewed and — if it changes anything — waits for your OK. Here’s exactly how it works, and what happens to your data.
The AI does the thinking. Fixed rules and your approval limit the doing.
01 /The limits
Looking is free. Changing is your call.
Before a command reaches your server, a second AI reviews it: does it change anything, read passwords or send data out? Commands that only look run on their own. Everything else waits for your OK — and if the review fails, the command waits too.
outside — waits for your OK
- Change files or settings
- Install or remove software
- Restart or stop services
mellonbot agent- Read logs and settings
- Check disk, memory and CPU
- List services and open ports
- Check certificates and updates
- Open your site’s pages
- Look for errors and changed files
- Read passwords or keys
- Send data off the server
- Anything the review can’t rate
outside — waits for your OK
The agent runs with full admin rights so it can fix real problems. That’s why every change needs your OK.
Stop any session, any time
02 /Approvals
Nothing changes without your OK
Mellonbot can look around on its own. Changing anything is your call — every time.
| Command | What happens |
|---|---|
| Check disk spaceOnly looks | Runs on its own |
| Read the nginx error logOnly looks | Runs on its own |
| Restart crashed nginxChanges a service | You approve |
| Raise PHP memory limitEdits a config file · backed up first | You approve |
| Read wp-config.phpContains passwords | You approve |
| Reboot the serverDestructive | You approve · flagged high risk |
- Changes always wait for you
- If the review fails, the command waits
- Viewers can watch, not approve
- One command at a time
- Every command has a time limit
03 /Every fix
Seven safeguards on every single fix
Whoever asks for a fix and however small it is, it goes through the same careful steps.
If anything looks different from what Mellonbot expected, it stops and tells you instead of carrying on.
- 01ProposedYou see what it will change and why, in plain words, before anything runs.
- 02ReviewedA second AI checks each command: does it change anything, read passwords or send data out?
- 03Approved by youChanges run only after you or a teammate who can edit say yes — and that’s recorded.
- 04Backed upFiles are copied to a backup folder on your server before they’re edited.
- 05Applied, one command at a timeEach with a time limit, never several at once, so nothing gets tangled.
- 06VerifiedMellonbot checks the fix actually worked, and tells you if it didn’t.
- 07A way backEvery change comes with how to undo it, and the backups stay on your server.
activity · web-01live
- Wed 14:05You approved · Read wp-config.php✓ 2 passwords hidden
- Wed 13:46You declined · Reboot the server✗ not run
- Wed 13:30Waiting · Clear 6 GB of old logs⏸ waiting for you
- Wed 13:17You approved · Restart crashed nginx✓ verified
- Wed 13:07Ran on its own · Check disk space✓ read-only · 38% used
04 /Accountability
Every command is on the record
Each session shows every command Mellonbot ran, why it ran it, who approved it and what came back — with passwords hidden. Your whole team sees the same record.
Mellonbot keeps notes about your server so it doesn’t start from scratch each time, and it never writes passwords or keys into them.
05 /Your data and access
Your secrets stay yours
What Mellonbot keeps, what it filters out, and how you stay in control of your account.
- 01Passwords hiddenPasswords and keys we detect are hidden before anything is stored, shown or sent to the AI.
- 02Nobody logs inNo one at Mellonbot logs in to your server. Only the agent connects, outbound.
- 03Signed commandsThe agent only runs commands Mellonbot signed for that one server, so nobody can slip it one.
- 04Signed updatesAgent updates are signed too, and roll back by themselves if the new version fails.
- 05Encrypted on the wayThe agent talks to Mellonbot over HTTPS only, and needs no open ports.
- 06Viewers can’t approveInvite teammates as viewers: they see every session, but can’t approve anything.
- 07No training on your dataWe don’t train AI models on your data.
- 08Delete any timeDelete a server and its history goes with it. Delete your account whenever you like.
06 /Questions
Security questions, answered
Does anyone at Mellonbot log in to my server?
No. Mellonbot is software, not a support service. We never ask for your server login. You install the agent yourself, it only connects out, and every command it runs is reviewed first and shown in the session.
Which servers can I connect?
Only servers you own or are allowed to manage. You install the agent yourself with one command or the WordPress plugin, and you can remove it the same way.
Can Mellonbot run any command it likes?
The agent runs with full admin rights so it can fix real problems, which is why it only runs commands Mellonbot signed for your server, and a second AI reviews each one first. Commands that only look run on their own. Anything that changes your server, reads passwords or sends data out waits for your OK, and if the review fails, the command waits too.
What if a fix makes things worse?
Files are backed up before they’re edited, commands run one at a time and Mellonbot checks the result. If it didn’t work, Mellonbot tells you. Every change comes with how to undo it, and the backups stay on your server. Reviews and approvals lower the risk of a change, but can’t rule it out completely.
Can I stop Mellonbot at any time?
Yes. Nothing changes until you approve it, and you can stop a session at any time — anything still waiting is cancelled. A command that’s already running finishes or hits its time limit.
Is my data used to train AI?
We don’t train AI models on your data. Command output is sent to our AI provider so it can work out what’s wrong, with passwords and keys we detect hidden first.
How do I remove Mellonbot?
Uninstall the agent with one command, or deactivate and delete the WordPress plugin: this removes the service or cron job and its files. Backups it made stay on your server until you delete them. You can delete a server, with its history, or your whole account any time.
Still have a question?
Every message goes straight to the founder.
Free plan · 100 credits to start
Let Mellonbot look after your website
Create a free account and connect your first site in a few minutes. Upgrade only when you need more.
- No card needed
- Leave any time
Prefer to talk first? Get in touch →
mellonbot — startfree- ✓ 100 credits to start
- ✓ No card needed
- ✓ One command to connect your site
Already have an account? Sign in