Privacy Policy

Last updated: April 7, 2026

1. Introduction

Agent Shelf (“we”, “us”, “our”) operates the website at agentshelf.dev and related services including the MCP server and publish skill. This Privacy Policy explains how we collect, use, and protect your information when you use our services.

2. Information We Collect

Account Information

When you sign in via GitHub, we receive and store your GitHub username, display name, and avatar URL. We do not access your GitHub repositories, private data, or email address beyond what GitHub provides in your public profile.

Agent Definitions

When you publish an agent, we store the markdown content and YAML frontmatter you provide. This includes the agent name, description, category, tags, version, and the full markdown body. Published agents are publicly visible by default.

Usage Data

We track aggregate metrics such as agent download counts and like counts. We do not track individual user browsing behavior or use third-party analytics trackers.

3. How We Use Your Information

  • To authenticate you and associate agents with your account
  • To display your published agents on the registry
  • To provide search, discovery, and download features
  • To enforce access control for private and shared agents
  • To display download and like counts on agent pages

4. Data Storage & Security

Your data is stored in MongoDB. API tokens are stored as SHA-256 hashes, not in plain text. Session tokens are secured via NextAuth with signed JWTs. We use HTTPS for all communications.

5. Data Sharing

We do not sell, rent, or share your personal information with third parties. Published agents are publicly accessible by design. Your GitHub username is displayed as the author of agents you publish.

6. Your Rights

  • Delete your agents: You can delete any agent you own at any time from your profile page.
  • Unpublish agents: You can make any agent private, removing it from public search and discovery.
  • Revoke access: You can log out and delete your cached API token at any time using /agentshelf-logout.

7. Cookies

We use a session cookie for authentication purposes only. We do not use advertising or tracking cookies.

8. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated “Last updated” date. Continued use of the service after changes constitutes acceptance of the updated policy.

9. Contact

If you have questions about this Privacy Policy, please open an issue on our repository or contact us through the website.