Sign-in
Google accounts only, limited to company domains, with a verified email required.
Security
How sign-in, access, and data are handled.
Access
Signed-in tools
Tools, documentation, and the APIs that call paid services require sign-in.
Agent access
The A2A agent API requires an API key. Its discovery card is public.
Data handling
Encrypted in transit
Every page and API is served over HTTPS with HSTS.
Secrets
Keys live in the hosting provider's encrypted settings, not in source code.
Hosting
Hosted on Vercel in its US East region.
Records
Audit trail
Each purchase order state change records what moved it and when.
Tracing
OpenTelemetry tracing across steps.
Report an issue
Email info@alwayscool.ai with the details and steps to reproduce.