How it works

Two flows, deliberately kept apart. Configuration that carries a secret never leaves your server. Everything the cloud is allowed to know travels outbound from the agent you run.

Your server                                   elucide cloud
------------                                  -------------
administrator
   |
   |  dataconnect-agent setup
   v
local agent  ------ local IPC only ----->  (nothing crosses here)
   |
   |  connects to your database directly, locally
   v
your data
   |
   |  status + metadata only -- no secrets, no rows
   v
                                            platform-api  <---- portal app / Studios

What this means in practice

No elucide web page ever asks for a database credential, server address or account name.
Setup happens once, on your machine, over a local socket -- not in a browser.
The cloud sees run outcomes and freshness, never patient rows or secrets.