Settings

Settings holds your preferences for the orchestrator — open it from the sidebar. Most of it is per-user (your tokens and variables, Nucleus instructions, theme); the DevBox Security profiles are tenant-level — shared across your team. The page is organised into the sections below (the right-hand nav jumps between them).

Environment Variables

Everything injected into the DevBoxes you launch, in one honest place. Three groups:

• Service access — the provider tokens your runs need to reach repositories and tickets: GitHub, Azure DevOps, GitLab, and Jira. Each row names the env var it injects (GH_TOKEN, AZURE_DEVOPS_EXT_PAT, GITLAB_TOKEN, JIRA_API_TOKEN) and the scopes the token needs. A configured token shows a check mark; a missing one is exactly what makes a run against that provider skip before spending AI tokens — see run readiness & skip reasons.
• Agent Secrets — the AI coding agents’ own API keys and tokens, an alternative to signing each agent in per worker: the Claude OAuth token (CLAUDE_CODE_OAUTH_TOKEN), Anthropic API key (ANTHROPIC_API_KEY), GitHub Copilot token (COPILOT_GITHUB_TOKEN), and OpenAI API key (OPENAI_API_KEY). The Claude and Anthropic keys additionally carry two toggles — Use for Nucleus (Bring Your Own Key) routes Nucleus’s own requests through your key, and Use for DevBox authentication injects the key into the DevBoxes you launch; the Copilot and OpenAI tokens are plain injected tokens. See agent secrets.
• Global variables — free-form variables injected into every DevBox you launch. Mark a variable secret to encrypt it at rest and redact its value from run traces. Project variables override global ones on a name collision — see sources & precedence.

Values are encrypted at rest and are only ever handed to your running DevBox instances — secret values are never shown back to you once saved (you replace a value by pasting a new one).

Agent sign-in (Claude, Codex, Copilot) is per worker, not per user — set it up from any worker’s page via Manage agent sign-in, or see the agent sign-in guide.

Nucleus

Customize Nucleus’s behavior with a personal instruction file — a NUCLEUS.md, conceptually like a CLAUDE.md. Use it to set tone, standing preferences, or project context the assistant should always keep in mind. You can edit it inline and reset it back to the default at any time. This section holds the NUCLEUS.md only.

Nucleus is built on Anthropic (Claude) models. Every plan includes a monthly AI allowance, but you can bring your own key for usage beyond your plan — or to run entirely on your own account. The keys live under Environment Variables → Agent Secrets: add an Anthropic API key or a Claude OAuth token and enable Use for Nucleus (Bring Your Own Key). The OAuth option routes Nucleus through your personal Claude Code subscription — make sure your usage complies with Anthropic’s terms. See also AI Credits for how plan allowance and BYOK interact.

Appearance

Pick the app theme: Light, Dark, or System (follow your OS). The choice applies immediately and persists on this device.

DevBoxes

Two groups of settings for your DevBoxes:

Display

• Hide external and system DevBoxes — show only the DevBoxes managed by ClusterCode, hiding anything else running on your workers.

DevBox Security — configure your tenant’s security profiles. Each tenant defines a default security profile applied to every DevBox launched on its workers (it governs what the DevBox can reach — egress, allowed domains, and so on). You’ll see one card per tenant you belong to, showing its current default profile and your role; from here you set that default. You can still override the profile or add extra allowed domains per DevBox at launch time. Changing the tenant default requires the right role (e.g. owner/admin).

Session persistence

Keep your engine logins, session history, and settings so a new DevBox picks up where the last one left off — on any worker. Persist my sessions is on by default; Include my self-hosted workers is off by default (config only, your code never leaves your machine); Delete stored data wipes everything with a 14-day recovery window. See Session persistence for the full picture, including how it’s encrypted end-to-end.

Notifications

Control which email notifications you receive:

• DevBox Alerts — DevBox lifecycle events (created, started, stopped, deleted).
• Worker Alerts — worker connection and disconnection events.

Billing & Plan and Account notifications are always on — they cover events you shouldn’t miss (payment, plan changes, account security).

About

Shows the running application version (click to copy) — handy when reporting an issue so we know exactly which build you’re on.