tool,version,date,evidence_grade,method,destination,trigger,what_is_sent,content_of_work_sent,on_by_default,off_switch,off_switch_documented,off_switch_verified,source_url
OpenJarvis,desktop-v1.0.2,2026-07-08,A,"A/B capture at local listener (edition 1 test, not repeated in September)","PostHog host 34.231.106.201.sslip.io, hard-coded project key","During use, 30 second flush","Event chat_session_ended: turn count, tokens in and out, latency p50 and p95, tool counts, error count, duration, hashed model name, OS, Python version, analytics library version, anonymous install UUID",No (captured),yes,[analytics] enabled = false in ~/.openjarvis/config.toml,no,yes,https://stridenote.net/openjarvis-retested-mac/
OpenJarvis installer,install.sh,2026-07-08,C,"Source reading (edition 1 test, not repeated in September)",Analytics endpoint,During install,Install progress,Not assessed,yes,None; OPENJARVIS_ANALYTICS_HOST redirects the request,no,n/a,https://stridenote.net/openjarvis-retested-mac/
OpenCode CLI,1.18.31,2026-09-21,A,Socket sampling plus capture at local proxy,registry.npmjs.org /opencode-ai/latest,At launch,GET with empty body; User-Agent opencode/<version>; per-request traceparent and b3 trace IDs; IP address,No,yes,autoupdate false or notify in config; OPENCODE_DISABLE_AUTOUPDATE,yes,yes,
OpenCode CLI,1.18.31,2026-09-21,A,Observed install of new version during first launch,registry.npmjs.org (package download),At launch when a newer version exists,"Package download; installed 1.18.31 over 1.18.30 within 6 s, no prompt",No,yes,autoupdate false in config; OPENCODE_DISABLE_AUTOUPDATE,yes,yes,
OpenCode CLI,1.18.31,2026-09-21,A,Capture at local proxy with a stale cache,models.opencode.ai /api.json,"At launch when the cache is stale, then every 60 minutes",GET with empty body; User-Agent opencode/latest/<version>/cli; per-request trace IDs; IP address,No,yes,OPENCODE_DISABLE_MODELS_FETCH,yes,yes,
DeepSeek Harness,0.1.5-rc.2,2026-09-21,A,Telemetry endpoint redirected to a local collector (DSH_TELEMETRY_OTLP_URL); web UI driven by headless browser,harness-telemetry.deepseeksvc.com /v1/logs (shipped default; redirected in test),"Submitting a thumbs rating (category only is enough), text feedback, note edit, or withdrawing a rating","Full session log: system prompt, tool schemas, user prompts, tool calls and results including file contents, assistant replies, absolute workspace path (includes macOS username), client time zone, provider and model, persistent anonymous user id",Yes,yes (FEEDBACK_ONLY),DSH_TELEMETRY_DISABLED (any value) or DSH_TELEMETRY_MODE=DISABLED,"partly (package READMEs and config comments, not the main README or UI)",yes,
DeepSeek Harness,0.1.5-rc.2,2026-09-21,A,File observed on disk at first launch,$DSH_HOME/.anonymous-user-id (local),"First launch in default mode, before any feedback",Random UUID stored locally; attached as user.id to every upload,No,yes,DSH_TELEMETRY_DISABLED prevents the file,partly,yes,
DeepSeek Harness,0.1.1-rc.2,2026-09-21,B,Socket sampling over 7 minutes of web use plus config reading,None observed; telemetry plugin shipped with mode DISABLED,n/a,Nothing observed,No,no,n/a,n/a,n/a,
Pi,0.87.0,2026-09-21,A,Capture at local proxy (hold mode),pi.dev /api/report-install,First launch of each new version,GET with version in the query; User-Agent pi/<version> (OS; node version; CPU arch); IP address,No,yes,PI_TELEMETRY=0 or enableInstallTelemetry false; PI_OFFLINE=1,yes,yes,
Pi,0.87.0,2026-09-21,A,Capture at local proxy (hold mode),pi.dev /api/latest-version,Every launch,"GET, no body; same User-Agent; IP address",No,yes,PI_OFFLINE=1 or --offline,yes,yes,
Pi,0.87.0,2026-09-21,A,Capture at local proxy (hold mode),github.com /sharkdp/fd/releases/latest,Launch when the fd helper binary is missing,"GET, no body; User-Agent pi-coding-agent",No,yes,PI_OFFLINE=1,yes,yes,
Hermes Agent,0.21.1,2026-09-21,A,"Capture at local proxy (hold mode), fresh HERMES_HOME",platform.claude.com /v1/oauth/token,"First launch of a Hermes home, with Anthropic not configured",POST grant_type=refresh_token with Claude Code's stored refresh token (read from macOS Keychain or ~/.claude/.credentials.json) and client_id; User-Agent axios/1.7.9 chosen to match Claude Code's token requests,"No (credential, not work)",yes,None found,n/a (feature documented as auto-detect),no switch,
Hermes Agent,0.21.1,2026-09-21,A,Capture at local proxy (hold mode),github.com NousResearch/hermes-agent.git (git ls-remote),"Launch, cached 6 hours",Git smart-HTTP ref listing; User-Agent git/<version>; IP address,No,yes,updates.check: false,yes (config comments),yes,
Hermes Agent,0.21.1,2026-09-21,A,Capture at local proxy (hold mode),hermes-agent.nousresearch.com /docs/api/model-catalog.json; raw.githubusercontent.com fallback,Launch; cache 20 minutes,"GET, no body; User-Agent hermes-cli/<version>",No,yes,model_catalog.enabled: false,yes,yes,
Hermes Agent,0.21.1,2026-09-21,A,Capture at local proxy (hold mode),models.dev /api.json,Launch,"GET, no body; User-Agent python-requests",No,yes,None (url override only),n/a,n/a,
Hermes Agent,0.21.1,2026-09-21,A,Capture at local proxy (hold mode),github.com sheeki03/tirith releases (binary + checksums),First launch when the tirith scanner is missing,GET download of a third-party security-scanner binary,No,yes,security.tirith_enabled: false,yes,yes,
Hermes Agent,0.21.1,2026-09-21,A,Capture at local proxy (hold mode),opencode.ai /zen/v1/models,First launch,"GET, no body; User-Agent HermesAgent/<version>",No,yes,None found,n/a,no switch,
Codex CLI,0.155.1,2026-09-22,A,Default exporter observed (TLS refused at proxy) plus the same pipeline redirected to a local OTLP collector,ab.chatgpt.com /otlp/v1/metrics (Statsig),"During use, batched; also at idle","52 usage metric series: API/tool/turn counts and durations, token counts by type, model name (even local), sandbox policy, is_git, terminal, feature flags, OS and exact OS version, app version",No,yes,"otel.metrics_exporter = ""none""",yes,yes,
Codex CLI,0.155.1,2026-09-22,A,Capture at local proxy (hold mode),api.github.com /repos/openai/codex/releases/latest,Launch,"GET, no body; User-Agent with exact macOS version, arch and terminal",No,yes,check_for_update_on_startup = false,yes,yes,
Codex CLI,0.155.1,2026-09-22,A,Capture at local proxy (hold mode),chatgpt.com /backend-api/plugins/featured and /plugins/export/curated; api.github.com /repos/openai/plugins; github.com,Launch,"GET, no body; User-Agent with OS version",No,yes,features.plugins = false and features.remote_plugin = false,yes (described for managed users),yes,
Codex CLI,0.155.1,2026-09-22,A,Capture at local proxy (hold mode),raw.githubusercontent.com /openai/codex/main/announcement_tip.toml,Launch,"GET, no body",No,yes,None found,n/a,no switch,
Aider,0.86.2,2026-09-22,A,"Opted in, PostHog host redirected to a local collector",us.i.posthog.com (PostHog),"Only if the user accepts the opt-in prompt, which is shown to about 10% of installs","Events launched, repo (file count), auto_commits, cli session, message_send (token counts, cost); OS and version, Python version, arch, Aider version, random UUID; local model names redacted",No,no,--analytics-disable,yes,yes,
Aider,0.86.2,2026-09-22,A,Capture at local proxy (hold mode),pypi.org /pypi/aider-chat/json,Launch,"GET, no body; User-Agent python-requests",No,yes,--no-check-update,yes,yes,
Aider,0.86.2,2026-09-22,A,Capture at local proxy (hold mode),raw.githubusercontent.com /BerriAI/litellm/main/model_prices_and_context_window.json,"Launch, cached 24 hours","GET, no body",No,yes,None found,n/a,no switch,
OpenClaw,2026.9.5,2026-09-22,B,Socket sampling (direct connections bypassing the proxy) plus the downloaded file on disk,api.github.com and github.com (fd release download),First launch of a new home,Release lookup and download of the fd 10.5.0 arm64 binary into the agent folder; ignores HTTPS_PROXY and NODE_USE_ENV_PROXY,No,yes,None found,n/a,no switch,
OpenClaw,2026.9.5,2026-09-22,A,"Socket sampling plus capture at local proxy (hold mode) during onboarding, idle and task",None (LM Studio only),"Onboarding, launch, task",Nothing observed,No,n/a,n/a,n/a,n/a,
Goose,1.51.0,2026-09-22,B,Connection attempt seen at local proxy (TLS refused) plus binary strings; consent flow observed,us.i.posthog.com /capture/ (PostHog),"During sessions, after the user accepts the first-run consent prompt (Yes is pre-selected)","Per disclosure and binary: OS, arch, version, install method, provider and model, extension and tool names with counts, session number and metrics, token totals, error types",No (per disclosure; payload not readable),asks; default answer Yes,Answer No at the prompt; GOOSE_TELEMETRY_ENABLED false; GOOSE_TELEMETRY_OFF,yes,yes,
smolagents,1.26.0,2026-09-22,A,Socket sampling plus capture at local proxy (hold mode),None (LM Studio only),Task run,Nothing observed,No,n/a,n/a,n/a,n/a,
Google ADK (via LiteLLM),2.9.2 / litellm 1.102.0,2026-09-22,A,Capture at local proxy (hold mode),raw.githubusercontent.com /BerriAI/litellm/main/model_prices_and_context_window.json,When LiteLLM is imported,"GET, no body",No,yes,LITELLM_LOCAL_MODEL_COST_MAP=True,yes (LiteLLM docs),yes,
Kilo Code CLI,7.7.7,2026-09-22,A,Capture at local proxy (hold mode),"us.i.posthog.com /batch/ (PostHog, GeoIP on)",Launch (CLI Start); further session events are defined for logged-in use,"CLI Start: app name and version, platform, OS and exact OS version, arch, random distinct_id from ~/.local/share/kilo/telemetry-id; IP address (GeoIP enabled)",No,yes,KILO_TELEMETRY_LEVEL set to anything other than all,partly (VS Code setting mirrors it),yes,
Kilo Code CLI,7.7.7,2026-09-22,A,Process list plus capture at local proxy (hold mode),formulae.brew.sh and analytics.brew.sh via Homebrew; registry.npmjs.org via npm list,Launch (install-method and update check),"Kilo spawns npm list and Homebrew; Homebrew's own requests, including its analytics endpoint",No,yes,autoupdate false in kilo.json,yes,yes,
Kilo Code CLI,7.7.7,2026-09-22,A,Capture at local proxy (hold mode),api.kilo.ai /api/openrouter/models and /api/defaults,Launch,"GET, no body",No,yes,None found,n/a,no switch,
ZeroClaw,0.8.5,2026-09-22,A,Socket sampling plus capture at local proxy (hold mode),None (LM Studio only),"Quickstart, launch, task",Nothing observed,No,n/a,n/a,n/a,n/a,
Grok Build,1.0.40,2026-09-22,A,Capture at local proxy (hold mode),x.ai /cli/stable (fallback storage.googleapis.com/grok-build-public-artifacts/cli/stable),Launch,"GET, no body",No,yes,GROK_DISABLE_AUTOUPDATER=1,yes,yes,
Grok Build,1.0.40,2026-09-22,A,Capture at local proxy (hold mode),x.ai /cli/changelogs/<version>.external.md and .json,Launch,"GET, no body",No,yes,None found,n/a,no switch,
Grok Build,1.0.40,2026-09-22,A,"Capture at local proxy (hold mode), local model, no xAI login",Mixpanel and SpaceXAI events or trace upload (in binary; not observed),n/a with a local model and no login,Nothing observed,No,not observed,[features] telemetry false; GROK_TELEMETRY_ENABLED; trace_upload false; mixpanel_enabled false,yes,n/a,
OpenHands CLI,1.16.0 (SDK 1.21.0),2026-09-22,B,Connection attempts at local proxy (TLS refused by git) plus source reading,"github.com OpenHands/extensions (git clone, then pull)","Every launch (clone on first run, pull after)",Git clone or fetch of the public skills registry,No,yes,None found (load_public_skills=True is hard-coded in the CLI),n/a,no switch,
OpenHands CLI,1.16.0 (SDK 1.21.0),2026-09-22,A,Capture at local proxy (hold mode),pypi.org /pypi/openhands/json,Launch (splash screen),"GET, no body",No,yes,None found,n/a,no switch,
OpenHands CLI,1.16.0 (SDK 1.21.0),2026-09-22,A,Capture at local proxy (hold mode),raw.githubusercontent.com /BerriAI/litellm/main/model_prices_and_context_window.json,Launch (LiteLLM import),"GET, no body",No,yes,LITELLM_LOCAL_MODEL_COST_MAP=True,yes (LiteLLM docs),yes (with ADK),
Cline CLI,3.0.64,2026-09-22,A,Capture at local proxy (hold mode),otel.cline.bot /v1/logs (OTLP JSON),Launch and throughout every task,"37 lifecycle, task and agent events (24 kinds) in one short task: provider, model name, token counts, tool names, mode, has_git, OS and exact OS version, runtime, session and conversation IDs, device_id = SHA-256 of the Mac hardware UUID",No,yes,None found for the CLI (DO_NOT_TRACK ignored); extension: Cline Telemetry toggle or VS Code telemetry setting,extension only,DO_NOT_TRACK tested: not honoured,
Cline CLI,3.0.64,2026-09-22,A,Capture at local proxy (hold mode),data.cline.bot /flags/ (PostHog feature flags),Launch,"POST with PostHog key, distinct_id = the hardware-derived device ID, flag keys; geoip_disable true",No,yes,None found,n/a,no switch,