Product boundary
Headless Music has its own application and runtime. The public Dashboard cannot start tracks, read the queue, or change playback settings.
Server-side secrets
Discord tokens, Lavalink passwords, and optional provider credentials belong in the service environment, not in the browser or public messages.
Future integrations
Any future gateway would need its own authenticated, permission-checked API and isolation; it is not documented as a current feature.
Do not share credentials to debug the service. A diagnostic report must exclude secrets.
Related pages
