Skip to Main

Security

Security controls you can actually use.

Ember puts account protection, key controls, and legal information where you can inspect them—not behind promises we cannot verify.

  1. 01Passkeys
  2. 02Two-step verification
  3. 03API key limits

Passkeys

Register a passkey in your profile if your browser supports it. Sign-in offers passkeys only where this deployment has enabled them.

Manage account security

Two-step verification

Add a second step to sign-in and keep backup codes for the moment you need them.

Open profile security

API key limits

Each key can have an expiry, a quota, a model allow-list, and an IP allow-list. You set them in the signed-in key workspace.

Manage API keys

Responses stay clean

Responses from Ember models carry no internal service identifiers, error messages never echo credentials, and every request ID is issued by Ember. If you see anything else, report it as a defect.

Read the developer guide

Operator and filing

Ember is operated by 芯想(深圳)控股有限公司. The ICP filing is listed in the footer and links to the official registry.