AI, deploy, and more
Manage Duaer security policies
Duaer’s security page in Settings points docs here for instance-level security policy entry points. The security audit is a separate read-only check.
Policy entry points
Use this page as the docs entry for security policies, blocks, and related switches. The docs URL on the Settings security page is this path.
For a one-shot read-only scan of credentials and nodes, use the security audit. SSRF environment variables are under security environment variables.
Questions
What does the Duaer security-policies page cover?
Instance-level security switches and policy entry points. The security page in Settings links its docs here. It is not one security-audit report. The audit is a read-only check under hosting.
In this section
Run your first AI Agent in Duaer
Duaer’s AI intro starts at the AI Agent node: connect a chat model, then tools when you need them. This page is the smallest digital organization that runs, not a credential manual for every vendor.
AIChat hub in Duaer
Duaer Chat hub gives people a chat entry without the canvas. From v3 it is off by default. You can turn it on temporarily with DUAER_ENABLED_MODULES. v4 removes it.
AIUse RAG in Duaer
Duaer RAG writes documents into a vector store, then retrieves pieces for the model when someone asks. Templates usually have a load branch and a retrieve branch.
AIUse $fromAI in tool parameters
Duaer’s $fromAI marks a parameter the AI Agent fills when it calls a tool. Keys may only use letters, numbers, and underscores. Some models require at least one dynamic parameter.
AIScore Duaer AI digital organizations with metrics
Duaer metric-based evaluations run a digital organization against a test set and record scores you calculated. Calculate metrics before the Evaluation node.
AICommon wiring issues in Duaer evaluations
When triggers, field maps, or test-set rows do not line up in a Duaer evaluation digital organization, check the wiring first. Node tips link to sections such as combining triggers.
AITurn on the MCP server in Duaer
Duaer can expose the instance as an MCP server so outside clients operate digital organizations with permission. Turn access on in the instance first, then configure the client.
AIDraft digital organizations with AI in Duaer
Duaer’s AI builder generates or edits digital-organization nodes from a description. You still confirm on the canvas. It does not put a production trigger live without confirmation.
AIConnect an MCP client to Duaer
After MCP access is on in Duaer, put the connection URL and auth into the client config. The MCP docs link in the product opens this page.
AIAI assistant on Duaer cloud
The Duaer cloud AI assistant is toggled in Settings and helps edit digital organizations. Self-hosted setups use a separate instance AI configuration.
AIMCP access on Duaer cloud
After you turn on MCP access on a Duaer cloud instance, outside clients can connect. Some settings screens and component examples point docs here.
DeploySet up instance AI on self-hosted Duaer
Self-hosted Duaer configures the assistant in the instance AI wizard in Settings. Sandbox and web search are optional. Prepare environment variables before startup.
DeployHost Duaer with Docker
From Duaer v3, Docker is the only supported deployment. If the instance check finds you are not in a container, it opens this page.
DeployRun the Duaer task runner as an external process
Duaer deprecates the internal task runner. Run the runner separately, set it to external, and share DUAER_RUNNERS_AUTH_TOKEN with the launcher.
DeployConfigure Duaer binary storage with environment variables
Duaer uses environment variables for binary storage mode and path. Worker and queue notes link here. Do not use the removed in-memory mode.
DeploySecurity environment variables for Duaer
Duaer security switches such as SSRF are configured with environment variables. From v3 the default blocked IP ranges are wider, and the check links here.
DeployEnvironment variables that affect digital organizations
Duaer can set digital-organization behavior such as the default caller policy with environment variables. If the default is still any, the v3 check reports it and opens this page.
MoreManage credentials in Duaer
Duaer stores credentials on the instance and protects them with the encryption key. Nodes reference a credential instead of putting secrets in parameters. Canvas tips that say credentials open this page.
MoreEnd-user credentials in Duaer
End-user credentials belong to the end user’s own connections. Admin docs link here to mark that admins should not hold or casually replace them.
MoreConfigure Duaer digital-organization settings
Duaer digital-organization settings include timezone, error handling, and caller policy. After v3 removes “Any workflow”, the check links to the who-can-call section.
MoreConfigure Duaer when you embed it
When you embed Duaer in another product, configuration can overwrite credentials and related behavior. The worker note about the credential-overwrites endpoint links here.
MoreCourses entry on Duaer docs
The Courses link in the product opens this page. It is an entry to practice notes, not a separate video school.
MoreDuaer level two: how items flow
This chapter explains what one input looks like in Duaer and how a node runs with many items. Node docs that mention the data structure link here.
MoreLooping docs moved
Legacy URL. Per-item execution and Execute Once in Duaer are on the flow-logic looping page.
MoreThe Function node is removed
Duaer no longer ships the Function node. Write JavaScript in the Code node. This URL remains so old links are not empty.