Privacy

Last updated: 1 November 2026

The short form

The maisecrets plugin sends no data to us. It has no telemetry, no account and no licence check, and it sends no value and no prompt to mcpgate or to anybody else. It talks to a server only where this page says so below.

What the plugin stores, and where

Everything stays on your machine:

• Detected values go into a local vault: the macOS login keychain, the Windows Credential Locker, or an encrypted file on Linux. Each value has a time to live. When it expires, the plugin deletes the value.
• An index in ~/.maisecrets/index.json holds metadata and keyed fingerprints, never a value.
• An event log and an audit log in ~/.maisecrets/ record which rule matched, which placeholder was resolved and which protection was loosened, never a value.
• A record of internal failures holds maisecrets' own errors as closed codes, such as the code, the client and the plugin version. It holds no error text, no path, no prompt and no value.
• A record of destinations notes the hosts that each stored secret was sent to. It stays on your machine and goes when the value expires. /maisecrets:settings secret_destinations off stops it.
• The client's own transcript file on your disk: the plugin masks a detected value in it, in place.
• The clipboard receives the rewritten prompt when the plugin blocks a prompt.

You can read and delete all of it. /maisecrets:list shows the entries, and /maisecrets:forget deletes one.

What leaves your machine

No telemetry, and no download by itself. The plugin sends nothing to a server of its own. A connection starts only from a command you run, from an MCP server that you added yourself, or from a NER service that you turned on:

• Your own ssh command in the Claude Code sandbox goes through Claude Code's local sandbox proxy to the host you named. Before an ssh command that carries a value, a check tries a few direct connections that the sandbox must refuse. The check sends no data.
• Vault references, only with an MCP server that you added yourself (user scope, an https URL) and that offers them. After the first token from that server, maisecrets asks the server once for its metadata. When the AI later writes such a token into a file or a command, maisecrets sends the server a key and the names of the tokens, and gets their values back. It sends no value and no prompt. /maisecrets:settings client_header false turns it off.
• Sensitive References, only after you log in once in your browser (/maisecrets:sref login). When a file write or a command needs the value of a reference, maisecrets asks the gateway that showed this reference in the same session in the last 24 hours. The request names the reference, the kind of target, and the path of the file or the name of the program. Without a login, nothing is sent. See Sensitive References.
• /maisecrets:report prints a prefilled link. It opens no browser and files nothing. The connection starts when you open the link. See "Reports you send" below.
• The NER service: off by default. maisecrets sends no text to a NER service until you turn one on with /maisecrets:ner. It sends text to an address only when you set that address yourself. Before any text goes out, maisecrets replaces the values that it found, and your stored values, with filler. With local, the service is the container mcpgate/ner on your own computer (a loopback address or a socket): it gets tool results and, from 0.8.7 in Claude Code, your typed prompts. With url, a service that you name gets tool results only, never a prompt; a public address needs https. The same is true for a fallback service. maisecrets downloads the image only after you agree. From 0.8.7, it starts a stopped local container again at the session start. /maisecrets:ner prompts off keeps your prompts away from the service, and /maisecrets:ner off stops all of it. Each request writes a line without text to a local log. See Names from a NER service.
• The Windows Credential Locker can roam through a Microsoft account on a machine that is not domain-joined. If that matters, choose the encrypted-file store.

Two features stay on your machine and open no connection: read_pdf convert runs pdftotext locally, and rules of your own come from local folders only. maisecrets does not fetch or update a rule folder.

The public repository holds every file the plugin runs, so you can check this list.

Reports you send

When ms:(…) did not know a value with a fixed start, its answer offers an issue link with the shape of the value, such as sb_pat_[A-Za-z0-9]{32}, never the value. You see the shape first, and nothing goes out until you open the link.

The command /maisecrets:report prints the issue text and a prefilled link to GitHub. It opens no browser and files nothing. When you open the link, you decide in GitHub's form whether to send the issue. The link carries the issue text, the plugin version, your platform and the rule name of a detection or the codes of an internal failure, never a value. Set report_url to your own tracker, or to null to turn reporting off. GitHub processes the issue under its own privacy statement.

This website

This page is part of mcpgate.de. The website sets no cookies and runs no analytics. The privacy policy of mcpgate.de covers the server logs of the website and names the controller.

Contact

For questions about privacy, see the Impressum.