Privacy
agentdoctor collects nothing, transmits nothing, and has no servers.
That claim is easy to make and hard to trust, so here is exactly what the tool does, and how you can verify each point yourself.
What it reads
Only files in the project you point it at, plus your user-level configuration in ~/.claude unless you pass --no-user:
.claude/settings.json, .claude/settings.local.json, ~/.claude/settings.json, .mcp.json, CLAUDE.md / CLAUDE.local.md / AGENTS.md, .claude/agents/*.md, .claude/skills/*/SKILL.md, .claude/commands/*.md, .claude/hooks/*, .claude/keybindings.json, and .gitignore.
What it never reads
Credential files are excluded by path, before anything opens them: .credentials.json, credentials.json, .netrc, id_rsa, id_ed25519. The report tells you how many files were skipped for this reason. A test in the suite plants a tripwire value inside a credentials file and asserts it can never appear in any output.
What leaves your machine
Nothing. There is no telemetry, no analytics, no crash reporting, no licence check, no update check, and no phone-home of any kind. The tool makes zero network requests. You can confirm this by running it with the network disabled, or by reading the source — there is no HTTP client in it, and it has zero dependencies, so there is no transitive code that could add one.
What it writes
Nothing, unless you explicitly ask:
--write-baseline <file>writes a list of accepted finding fingerprints--init-ci,--init-skill,--init-agents,--init-policyeach create one well-known file and refuse to overwrite an existing one
It never edits your configuration. Findings tell you what to change; the change is yours.
Secrets in output
When a rule detects a credential-shaped value, the finding shows a short prefix and suffix with (redacted) — never the value. This holds in every output format, so reports are safe to paste into an issue, a CI log, or a model's context.
--share goes further: it emits only rule ids and counts, never file paths, messages, or snippets, so a score card is safe to post publicly from a private repository.
This website
Static files served by GitHub Pages. No analytics, no cookies, no trackers, no fonts or scripts loaded from third parties. The one exception is a linked badge image hosted by openhunts.com in the footer; requesting it reveals your IP address to that host, as any remote image does.
Contact
Questions or a discrepancy between this page and the code: <https://github.com/jqntn/agentdoctor/issues>