Gist privacy and data handling

Public discovery

The public website, REST directory and public MCP tools can be used without signing in. They return public app descriptions, connection metadata and setup links. Requests reach Gist's hosting infrastructure; operational request records can include a request identifier, route, timing, status and network information. Do not put credentials or private business information in public search queries.

Workspace information

GitHub sign-in identifies invited workspace operators. Private workspace services handle membership and authorization records, saved bookmarks, uploaded artifacts and private connection metadata according to the caller's workspace permissions. Bookmark ordering is personal to the signed-in account and is not added to public directory responses.

A private connection entry describes setup. It is not a place to store passwords or provider access tokens. Gist does not connect to a provider on your behalf when you browse, search or export a public directory descriptor. Zati or another client manages its own provider credentials and execution.

Your choices

You can browse public content anonymously, sign out, remove bookmarks and remove private connection entries through the applicable interfaces. Ask your workspace operator about access and stored workspace content. Removing an entry from the visible interface is not a promise of immediate deletion from operational backups. This notice does not specify a retention duration or create a service-level commitment.

Email Sire Run

Use this public contact address for support or privacy questions. Include only the information needed to identify your request; never email passwords or access tokens.