Alva.ai

server: istio-envoy
date: Sun, 06 Sep 2026 07:27:22 GMT
content-type: text/html; charset=utf-8
content-security-policy: default-src 'self' https://www.static.alva.xyz https://alva-ai-static.b-cdn.net/ https://alva-static.b-cdn.net; style-src 'self' 'unsafe-inline' https://www.static.alva.xyz https://alva-ai-static.b-cdn.net/ https://alva-static.b-cdn.net https://accounts.google.com; script-src 'self' 'unsafe-eval' 'unsafe-inline' 'wasm-unsafe-eval' https://www.googletagmanager.com https://accounts.google.com https://challenges.cloudflare.com https://cdn.jsdelivr.net https://www.static.alva.xyz https://alva-ai-static.b-cdn.net/ https://alva-static.b-cdn.net https://vercel.live https://posthog.corp.alva.xyz; img-src * blob: data:; font-src 'self' data: https://www.static.alva.xyz https://alva-ai-static.b-cdn.net/ https://alva-static.b-cdn.net; connect-src 'self' https://api-llm.stg.alva.ai https://api-llm.prd.alva.ai https://api-llm.stg.alva.ai https://api-llm.stg.alva.ai/query https://api-llm.prd.alva.ai/query https://api-llm.prd.alva.ai/v1/conversation https://api-llm.prd.alva.ai/api/v1/channel/stream https://api-llm.prd.alva.ai/api/v1/channel https://api-llm.prd.alva.ai/prompt https://api-llm.prd.alva.ai/avatar/upload https://cdn.jsdelivr.net https://sentry.corp.galxe.com https://www.static.alva.xyz https://alva-ai-static.b-cdn.net/ https://alva-static.b-cdn.net https://www.google-analytics.com https://analytics.google.com https://www.googletagmanager.com https://www.google.com https://accounts.google.com https://challenges.cloudflare.com https://posthog.corp.alva.xyz https://api-llm.prd.alva.ai/v1/conversation/resume wss://api-llm.prd.alva.ai/ws/spaceid wss://api-llm.prd.alva.ai/api/v1/audio/transcriptions/stream http://localhost:50001; object-src 'none'; base-uri 'self' https://www.static.alva.xyz https://alva-ai-static.b-cdn.net/ https://alva-static.b-cdn.net; form-action 'self'; frame-ancestors 'none'; frame-src 'self' https://challenges.cloudflare.com https://accounts.google.com blob: https://vercel.live https://jsoncrack.com https://*.stg.alva.ai https://*.alva.ai; upgrade-insecure-requests; worker-src 'self' blob: https://www.static.alva.xyz https://alva-ai-static.b-cdn.net/ https://alva-static.b-cdn.net
link: </sitemap.xml>; rel="sitemap", </index.md>; rel="alternate"; type="text/markdown", </llms.txt>; rel="describedby"; type="text/plain", </agent.json>; rel="describedby"; type="application/json", </developers.md>; rel="alternate"; type="text/markdown", </explore.md>; rel="alternate"; type="text/markdown", </.well-known/agent-skills/index.json>; rel="describedby"; type="application/json", </AGENTS.md>; rel="describedby"; type="text/markdown", </mcp>; rel="service"; type="application/json", </.well-known/mcp>; rel="service"; type="application/json", </.well-known/mcp/server-card.json>; rel="service-desc"; type="application/json", </openapi.json>; rel="service-desc"; type="application/openapi+json", </.well-known/api-catalog>; rel="service-desc"; type="application/linkset+json", <https://github.com/alva-ai/skills>; rel="repository"; type="text/html", <https://github.com/alva-ai/alfs-fuse>; rel="repository"; type="text/html", <https://github.com/alva-ai/toolkit-ts>; rel="repository"; type="text/html"
link: <https://alva-ai-static.b-cdn.net/ssr-assets/prd/_next/static/media/Delight_Medium-s.p.48bd8f9e.ttf>; rel=preload; as="font"; crossorigin=""; type="font/ttf", <https://alva-ai-static.b-cdn.net/ssr-assets/prd/_next/static/media/Delight_Regular-s.p.c023d756.ttf>; rel=preload; as="font"; crossorigin=""; type="font/ttf", <https://alva-ai-static.b-cdn.net/ssr-assets/prd/_next/static/chunks/b25ae799f83f415d.css>; rel=preload; as="style", <https://alva-ai-static.b-cdn.net/ssr-assets/prd/_next/static/chunks/0bb960826191f17a.css>; rel=preload; as="style", <https://alva-ai-static.b-cdn.net/ssr-assets/prd/_next/static/chunks/61b73ecbfa635281.css>; rel=preload; as="style"
permissions-policy: accelerometer=(), ambient-light-sensor=(), autoplay=(), battery=(), cross-origin-isolated=(), display-capture=(), document-domain=(), encrypted-media=(), execution-while-not-rendered=(), execution-while-out-of-viewport=(), fullscreen=(self), geolocation=(), gyroscope=(), keyboard-map=(), magnetometer=(), microphone=(self), midi=(), navigation-override=(), payment=(), picture-in-picture=(), publickey-credentials-get=(), screen-wake-lock=(), sync-xhr=(), usb=(), web-share=(), xr-spatial-tracking=(), clipboard-read=(self), clipboard-write=(self), gamepad=(), speaker-selection=()
vary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch, Accept-Encoding
x-csp-mode: relaxed-script-src
cache-control: private, no-cache, no-store, max-age=0, must-revalidate
x-envoy-upstream-service-time: 195
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: no-referrer
x-download-options: noopen
strict-transport-security: max-age=31536000;
content-encoding: br
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000