Security by design.
Zero telemetry. Local privacy.
AGNT executes autonomous operations across local files and external APIs while preserving strict boundaries around credentials, telemetry, and user approval.
How AGNT protects your data and systems
Zero Telemetry Guarantee
Community Core contains zero phone-home tracking, telemetry, or remote prompt logging. Your code, local files, model inputs, and generated receipts remain strictly on your local machine.
OS Keychain Encryption
API keys and OAuth tokens are stored in your operating system's native encrypted keychain (Windows DPAPI, macOS Keychain, Linux libsecret). Secrets are never logged to plain-text files or stdout.
Human-in-the-Loop Safeguards
High-consequence actions—such as executing arbitrary shell commands, overwriting system files, or initiating payment APIs—trigger explicit visual confirmation modals before execution.
Receipt-Grade Evidence
Every agent execution records an immutable local audit receipt in SQLite, capturing step-by-step tool inputs, outputs, system state, human approvals, and cryptographic execution hashes.
Local-First vs Cloud Provider Routing
Air-Gapped Local Execution
When configured with local models, zero data leaves your local network interface.
- Local prompt execution on port 11434
- Direct filesystem access within project root
- Local SQLite receipt persistence
- No external network connections required
Direct TLS 1.3 Model Routing
When using hosted model providers, AGNT routes prompts directly to the provider without passing through AGNT servers.
- Direct client-to-provider TLS 1.3 requests
- API keys injected via environment memory
- No proxy or middleman inspection
- Strict TLS certificate pinning
Vulnerability Reporting & Audit Enquiries
Found a security issue?
We take security vulnerabilities seriously. Please send encrypted vulnerability reports directly to our security team. We respond within 24 hours.