Advanced Configuration

Fine-tune your CLI experience and explore the underlying architecture of the private mesh.

The Config File

Knaix stores its configuration in a JSON file located at ~/.knaix/config.json. You can manually edit this file to change the API URL or your authentication token.

{
  "token": "eyJhbGciOiJIUzI1...",
  "username": "diego",
  "api_url": "https://api.kovalentai.com"
}

Private Mesh Networking

By default, Knaix attempts to discover nodes via your Tailscale tailnet. If you are using a custom SOCKS5 proxy (like a shared office gateway), you can configure the CLI to route traffic through it.

Networking Requirement

The CLI requires outbound access to port 443 for the API and port 1055 for the node proxy service.

SSO Integration

Knaix uses the PKCE (Proof Key for Code Exchange) flow for secure OAuth2 authentication. This ensures that no long-lived passwords ever touch your local filesystem—only scoped, rotating access tokens.

If your organization requires a custom identity provider (Okta, Azure AD), please contact your Kovalent administrator to update the SSO endpoint in your profile.

Still have questions?

Check our GitHub Discussions or reach out to support@kovalentai.com