rivetkit

Fail

Audited by Runlayer on Mar 14, 2026

Risk Level: HIGH
Scan Summary
Max Score
94%
Files
84
Flagged
23
Chunks
125
Flagged Files (23)
rivetkit/reference/actors/ai-and-user-generated-actors.mdHIGH
93.9%

Tool passed security scan

Malicious tool definition detected

const freestyle = new FreestyleSandboxes({ apiKey: FREESTYLE_API_KEY }); const deploymentSource = prepareDirForDeploymentSync(projectDir); const { deploymentId } = await freestyle.deployWeb(deploymentSource, { envVars: { RIVET_ENDPOINT, RIVET_NAMESPACE: namespace.name, RIVET_TOKEN, }, entrypoint: "src/backend/server.ts", domains: [FREESTYLE_DOMAIN], build: false, }); // Step 4: Configure your self-hosted Rivet to run actors on the Freestyle // deployment await rivet.runnerConfigsUpsert("default"

rivetkit/reference/self-hosting/kubernetes.mdHIGH
93.5%

Risky tool definition detected

rivetkit/reference/self-hosting/docker-container.mdHIGH
91.6%

Risky tool definition detected

rivetkit/reference/self-hosting/filesystem.mdHIGH
91.5%

Risky tool definition detected

--- For a production-ready single-node Rivet deployment, use the file system backend (RocksDB-based); for multi-node deployments, PostgreSQL is the recommended backend today but remains experimental as we evaluate the best fit for scalability and performance, and Enterprise teams can contact [enterprise support](https://rivet.dev/sales) about FoundationDB.

rivetkit/reference/connect/gcp-cloud-run.mdMEDIUM
88.8%

Malicious tool definition detected

Adjust the region and image as needed. ```bash gcloud run deploy rivetkit-app \ --image us-central1-docker.pkg.dev/YOUR_PROJECT/rivetkit-app/rivetkit-app:latest \ --region us-central1 \ --allow-unauthenticated \ --min-instances 1 \ --set-env-vars RIVET_ENDPOINT=<your-rivet-endpoint>,RIVET_PUBLIC_ENDPOINT=<your-rivet-public-endpoint> ``` ### Connect to Rivet 1.

rivetkit/reference/self-hosting/production-checklist.mdMEDIUM
87.2%

Risky tool definition detected

Configure alerts to notify your team before issues become outages. ## Enterprise - **Contact [enterprise support](https://rivet.dev/sales) for production-ready deployments.** We can help with architecture review, scaling guidance, and FoundationDB support. _Source doc path: /docs/self-hosting/production-checklist_

rivetkit/reference/self-hosting/configuration.mdMEDIUM
87.0%

Risky tool definition detected

**Override Configuration Path** You can override the default configuration path using the `--config` flag: ```bash # Load from a specific file rivet-engine --config /path/to/config.json # Load from a directory rivet-engine --config /etc/rivet # Load multiple paths (merged in order) rivet-engine --config /etc/rivet/base.json --config /etc/rivet/override.json ``` ## Configuration Reference ## Related - [PostgreSQL](/docs/self-hosting/postgres): Configure the experimental PostgreSQL backend - [File

rivetkit/reference/self-hosting/render.mdMEDIUM
86.9%

Risky tool definition detected

rivetkit/reference/actors/debugging.mdMEDIUM
86.2%

Data Exfiltration

Privilege Escalation

Guardrail Bypass

rivetkit/reference/connect/kubernetes.mdMEDIUM
85.1%

Risky tool definition detected

You'll be provided `RIVET_ENDPOINT` and `RIVET_PUBLIC_ENDPOINT` environment variables. Create a `rivetkit-secrets.yaml` for your environment variables: ```yaml apiVersion: v1 kind: Secret metadata: name: rivetkit-secrets type: Opaque stringData: RIVET_ENDPOINT: <your-rivet-endpoint> RIVET_PUBLIC_ENDPOINT: <your-rivet-public-endpoint> ``` ### Deploy to Kubernetes

rivetkit/reference/self-hosting/postgres.mdMEDIUM
83.1%

Risky tool definition detected

Enterprise teams can contact [enterprise support](https://rivet.dev/sales) about FoundationDB for the most scalable production-ready deployment. ## Basic Configuration ```json Configuration-file { "database": { "postgres": { "url": "postgresql://user:password@host:5432/database" } } } ``` ```bash Environment-variables RIVET__database__postgres__url="postgresql://user:password@host:5432/database" ``` ## Managed Postgres Compatibility Some hosted PostgreSQL platforms require additional configurati

rivetkit/reference/connect/vm-and-bare-metal.mdMEDIUM
80.0%

Malicious tool definition detected

Environment=RIVET_ENDPOINT=<your-rivet-endpoint> Environment=RIVET_PUBLIC_ENDPOINT=<your-rivet-public-endpoint> [Install] WantedBy=multi-user.target ``` Replace the environment values with those from the Rivet dashboard and adjust paths to match your deployment.

rivetkit/reference/self-hosting/install.mdMEDIUM
78.7%

Malicious tool definition detected

docker run -p 6420:6420 rivetdev/engine ``` ## Prebuilt Binaries Prebuilt binaries coming soon ## Build From Source ```bash git clone https://github.com/rivet-dev/engine.git cd rivet cargo build --release -p rivet-engine ./target/release/rivet-engine ``` _Source doc path: /docs/self-hosting/install_

rivetkit/SKILL.mdLOW
73.0%

Risky tool definition detected

These endpoints are accessible through the gateway at `/gateway/{actor_id}/inspector/*`. Key endpoints: - `GET /inspector/summary` - full actor snapshot (state, connections, RPCs, queue) - `GET /inspector/state` / `PATCH /inspector/state` - read/write actor state - `GET /inspector/connections` - active connections - `GET /inspector/rpcs` - available actions - `POST /inspector/action/{name}` - execute an action with `{"args": [...]}` - `GET /inspector/queue?limit=50` - queue status - `GET /inspec

rivetkit/reference/self-hosting/railway.mdLOW
68.2%

Tool passed security scan

rivetkit/reference/general/architecture.mdLOW
67.9%

Tool passed security scan

rivetkit/reference/cookbook/multiplayer-game.mdLOW
67.7%

Tool passed security scan

rivetkit/reference/connect/freestyle.mdLOW
66.1%

Tool passed security scan

rivetkit/reference/self-hosting/docker-compose.mdLOW
62.4%

Tool passed security scan

rivetkit/reference/general/endpoints.mdLOW
59.7%

Tool passed security scan

rivetkit/reference/general/production-checklist.mdLOW
58.7%

Tool passed security scan

rivetkit/reference/clients/swift.mdLOW
55.5%

Tool passed security scan

rivetkit/reference/actors/authentication.mdLOW
55.3%

Tool passed security scan

Passed Files (61)Click to expand
rivetkit/reference/connect/railway.mdOK
49.1%

Tool passed security scan

rivetkit/reference/connect/aws-ecs.mdOK
45.5%

Tool passed security scan

rivetkit/reference/connect/hetzner.mdOK
43.8%

Tool passed security scan

rivetkit/reference/actors/lifecycle.mdOK
43.0%

Tool passed security scan

rivetkit/reference/actors/websocket-handler.mdOK
42.5%

Tool passed security scan

rivetkit/reference/general/docs-for-llms.mdOK
42.5%

Tool passed security scan

rivetkit/reference/actors/workflows.mdOK
42.4%

Tool passed security scan

rivetkit/reference/actors/actions.mdOK
41.9%

Tool passed security scan

rivetkit/reference/general/http-server.mdOK
40.0%

Tool passed security scan

rivetkit/reference/actors/sqlite.mdOK
39.7%

Tool passed security scan

rivetkit/reference/connect/aws-lambda.mdOK
36.6%

Tool passed security scan

rivetkit/reference/connect/cloudflare-workers.mdOK
35.3%

Tool passed security scan

rivetkit/reference/actors/quickstart/cloudflare-workers.mdOK
34.8%

Tool passed security scan

rivetkit/reference/actors/troubleshooting.mdOK
33.5%

Tool passed security scan

rivetkit/reference/actors/connections.mdOK
32.6%

Tool passed security scan

rivetkit/reference/actors/sqlite-drizzle.mdOK
31.4%

Tool passed security scan

rivetkit/reference/actors/destroy.mdOK
29.2%

Tool passed security scan

rivetkit/reference/general/edge.mdOK
27.1%

Tool passed security scan

rivetkit/reference/connect/vercel.mdOK
26.2%

Tool passed security scan

rivetkit/reference/actors/queues.mdOK
25.0%

Tool passed security scan

rivetkit/reference/actors/scaling.mdOK
23.7%

Tool passed security scan

rivetkit/reference/actors/errors.mdOK
23.4%

Tool passed security scan

rivetkit/reference/actors/postgres.mdOK
23.3%

Tool passed security scan

rivetkit/reference/actors/events.mdOK
21.9%

Tool passed security scan

rivetkit/reference/general/cors.mdOK
20.8%

Tool passed security scan

rivetkit/reference/general/runtime-modes.mdOK
20.7%

Tool passed security scan

rivetkit/reference/connect/supabase.mdOK
20.7%

Tool passed security scan

rivetkit/reference/actors/communicating-between-actors.mdOK
20.6%

Tool passed security scan

rivetkit/reference/actors/keys.mdOK
20.2%

Tool passed security scan

rivetkit/reference/actors/design-patterns.mdOK
19.8%

Tool passed security scan

rivetkit/reference/actors/quickstart/next-js.mdOK
19.3%

Tool passed security scan

rivetkit/reference/actors/versions.mdOK
19.2%

Tool passed security scan

rivetkit/reference/actors/limits.mdOK
19.0%

Tool passed security scan

rivetkit/reference/self-hosting/multi-region.mdOK
18.8%

Tool passed security scan

rivetkit/reference/actors/fetch-and-websocket-handler.mdOK
17.6%

Tool passed security scan

rivetkit/reference/general/registry-configuration.mdOK
17.3%

Tool passed security scan

rivetkit/reference/clients/swiftui.mdOK
16.5%

Tool passed security scan

rivetkit/reference/actors/access-control.mdOK
16.5%

Tool passed security scan

rivetkit/reference/general/logging.mdOK
15.7%

Tool passed security scan

rivetkit/reference/actors/helper-types.mdOK
14.3%

Tool passed security scan

rivetkit/reference/actors/sharing-and-joining-state.mdOK
12.6%

Tool passed security scan

rivetkit/index.jsonOK
11.6%

Tool passed security scan

rivetkit/reference/general/environment-variables.mdOK
11.2%

Tool passed security scan

rivetkit/reference/actors/http-api.mdOK
11.1%

Tool passed security scan

rivetkit/reference/clients/javascript.mdOK
10.8%

Tool passed security scan

rivetkit/reference/actors/quickstart/backend.mdOK
9.5%

Tool passed security scan

rivetkit/reference/actors/request-handler.mdOK
6.7%

Tool passed security scan

rivetkit/reference/general/actor-configuration.mdOK
5.6%

Tool passed security scan

rivetkit/reference/actors/testing.mdOK
5.5%

Tool passed security scan

rivetkit/reference/actors/statuses.mdOK
5.5%

Tool passed security scan

rivetkit/reference/clients/react.mdOK
5.3%

Tool passed security scan

rivetkit/reference/actors/quickstart/react.mdOK
5.2%

Tool passed security scan

rivetkit/reference/actors/kv.mdOK
3.6%

Tool passed security scan

rivetkit/reference/actors/input.mdOK
3.0%

Tool passed security scan

rivetkit/reference/actors/schedule.mdOK
2.9%

Tool passed security scan

rivetkit/reference/actors/state.mdOK
2.6%

Tool passed security scan

rivetkit/reference/actors/ephemeral-variables.mdOK
2.4%

Tool passed security scan

rivetkit/reference/actors/appearance.mdOK
2.3%

Tool passed security scan

rivetkit/openapi.jsonOK
1.6%

Tool passed security scan

rivetkit/reference/actors/metadata.mdOK
1.5%

Tool passed security scan

rivetkit/reference/actors/types.mdOK
1.2%

Tool passed security scan

Audit Metadata
Max File Score
94%
Classification
KNOWN_SERVER_PARTIAL_KNOWN
Files Scanned
84
Files Flagged
23
Chunks Analyzed
125
Analyzed
Mar 14, 2026, 05:51 AM
Security Audit — runlayer — rivetkit