Both are off by default — nothing survives a page refresh. Turning either on
saves that data to this browser's local storage on this device only (never sent
anywhere); turning it back off deletes what was saved. Remembering keys locally
is a tradeoff — anything else with access to this browser profile could read them.
CLEAR CACHE wipes local storage plus the current session (conversation, workspace,
plan, keys) back to a blank slate, regardless of these toggles.
Some providers restrict direct browser calls (CORS) — Anthropic, OpenAI, Gemini, Groq,
OpenRouter, and AgentRouter are the most reliable from a plain browser tab; if a
provider's request fails immediately with a network error, that's usually why.
Ollama needs no key since it runs on your own machine, but by default it blocks
browser origins too — start it with OLLAMA_ORIGINS=* set (or your exact
origin) for requests from this page to reach it.
// READY
Give IVAN a task. It will plan, call tools, and report back — running
JS, tracking a plan, holding files in its workspace, and searching the web
(via Wikipedia) — until it's done or hits a step limit. Pick a model and
paste an API key in SETTINGS first.