ZIZOU docs

Everything you need to run, extend, and understand Zizou — the AI coding agent that lives in your terminal.

Security & API Key Storage

[!IMPORTANT] API keys entered via the initial setup screen are stored in plain text within a JSON file in your OS's default configuration directory (e.g. ~/.config/zizou-nodejs/config.json). They are not encrypted.

To avoid writing your key to disk entirely, provide it via environment variables instead — env vars always take precedence over stored keys.

Guardrails & Execution Control

Zizou enforces human-in-the-loop security boundaries:

  • Zero Autonomous Writes: File writes or modifications are shown as a diff and require approval before execution.
  • Zero Autonomous Command Runs: Shell commands must be explicitly approved by the user before running.