Security & access.
The Remote Control URL is a key to your streaming software, and your OBS password passes through our server to reach it. Here is what that means and how to stay safe.
Two things to keep safe
The Remote Control URL grants control of your streaming software. Treat it like a key. Never show it on stream and never share it. If it ever leaks, open the connection card and reset it, which issues a fresh URL and stops the old one from working. Re-add the new URL to your dock or source.
To relay your commands, your OBS WebSocket password is sent to OverlayThing. It is only ever used to control the OBS running on your own machine, and nothing else. Meld needs no password at all. If that is a concern for you, the rest of the feature works the same way.
Who can do what
Dashboard buttons and hotkey URLs are yours to press. Chat commands run only for the roles you allow in each binding's who can use it picker, so you can hand !brb to your mods without opening anything else up. See Bindings & triggers for the per-command roles.