中文 · English

Data handling

This is a description of behavior, not legal advice or a privacy policy. It states what the software does, does not do, and what we cannot independently verify. Last checked: 2026-09-17.

In one paragraph

check reads local material, inventory compares your inventory with a local index, and serve answers from a local index. Those commands do not initiate outbound requests. refresh, some collection scripts, proxy, and crosscheck can use the network or start third-party processes, as described below.

1. Local commands

check reads the directory and policy you specify. inventory reads the inventory and index you provide and does not overwrite an existing report by default. serve binds to 127.0.0.1 by default. “No outbound request” does not mean a service returns no data to its callers.

Verification: test/no-telemetry.test.mjs intercepts fetch, DNS, and non-loopback connections.

2. npm package

Zero runtime dependencies, no install scripts, and no native build.
The package files field defines published content. scripts/release-check.mjs checks for accidental inclusion of .env files, ledgers, or generated indexes.

3. Public evidence service

The index is derived from public sources such as the official MCP Registry, npm, PyPI, and public repositories. The API accepts GET requests only and has no account or upload endpoint.

Requests and logs are different. A visitor’s IP address and headers still reach the server handling the request. Application access logging is off by default. When AGENTGATE_ACCESS_LOG is enabled, it records method, route, status, duration, and request ID—not IP address, User-Agent, or query string. The deployed Caddy configuration had no HTTP access-log directive when checked on 2026-09-17. We cannot verify or promise the hosting provider’s network-layer logging or retention.

4. Components that can use the network or start processes

refresh retrieves public registry, npm, and PyPI data and may retrieve package files from unpkg/jsDelivr. It does not upload local scan results.
Collection scripts may use the local gh credentials to call the GitHub API. This is separate from check and serve.
proxy starts the command you provide and records local decisions and removal events. The started server may access the network or filesystem; the gateway is not a sandbox.
crosscheck visits URLs found in inspected text by default; --no-network disables that behavior.

5. Static pages

The site uses no cookies, analytics, third-party fonts, or CDN resources. Search and inventory matching run in the browser. Inventory text is kept in page memory and is not written to browser storage. External links are handled by the destination site.

6. Material you provide during a pilot

The pilot asks for a list of tool names. We do not put it in the repository or use it outside the pilot. Retention follows the written terms agreed before the pilot. There is currently no automated retention and deletion workflow. You can request immediate deletion by email.

7. Changes and contact

This page changes with the implementation. Report discrepancies to zhiliangtech@163.com. Security reports are covered on the security page.