v1.0

javis-slave/README.md

@@ -72,6 +72,8 @@ javis-slave --headless                           no window (services, Pi)
 javis-slave --pair 192.168.1.10:8765 123456 --name Kueche
 javis-slave --list-devices                       show mic/speaker indices
 javis-slave --input-device 1 --output-device 0 --input-gain 1.5 --api-port 8766
+javis-slave --show-control-token                 print the control-API token
+javis-slave --control-token <TOKEN>              set your own token (≥ 16 chars)
 ```
 
 Settings are stored in `%LOCALAPPDATA%\JavisSlave\slave_config.json`
@@ -81,6 +83,12 @@ with `JAVIS_SLAVE_CONFIG_DIR`. A rotating log is written to `<config dir>/logs/s
 ## Notes
 
 - Transport is plain HTTP — use on a trusted LAN only.
+- The control API on port 8766 (volume, power, mic, …) requires
+  authentication: `Authorization: Bearer <token>` from other machines, or the
+  header `X-Javis-Control: 1` from the same machine (loopback). The token is
+  generated on first start and stored in `slave_config.json` (mode 0600 on
+  Linux); show it with `--show-control-token` or in the GUI settings.
+  Only `GET /mcp/v1/health` is public.
 - Microphones/speakers that don't support 16 kHz are opened at their native
   rate and resampled automatically (common for USB audio on Linux).
 - System control endpoints (volume / brightness / power, see