What leaves your machine

Last reviewed: 16 Sep 2026

Before you install anything, you should know what it sends and to whom. This page is the whole list. Everything here goes to your own Naetive account, over an authenticated connection, and nothing else.

A chat agent (ChatGPT, Claude on the web, Claude Desktop)

Nothing is installed. The agent calls Naetive when it uses a tool, and what it writes (a job, an update, an entry) is stored. Naetive never sees the rest of your chat; the agent's provider handles that as it always did. Not connecting the agent is the opt-out.

Claude Code, installed from Connect

The installer puts five hooks into Claude Code. Each one sends exactly this:

Activity. After Claude Code runs a tool, the hook sends the tool's name, the file path or the command, and up to the first two kilobytes of the result, tagged with the window it came from. This is what shows a window as live now on Work with the files it touched. It reads only what Claude Code already handed it; it does not scan your disk.
Folder refresh. When the understanding changes, the hook writes the .naetive folder in repositories that have one. It sends nothing; it fetches.
Session start. When a window opens, the hook tells Naetive which window this is, so its activity and its updates land under one name. It sends the window's identifier and nothing else.
Prompt grounding. When you send a prompt of more than a few words, the hook sends its text to Naetive through the local console, to fetch the recorded work that matches it (jobs, decisions, specs) and put it in front of the agent. Very short prompts are skipped. If you do not want your prompts to leave the machine, remove this hook (below) and the agent still works; it just orients by itself.
Key guard. Runs before a command and blocks any that would print your key. It sends nothing.

On Windows the hooks are not installed yet; only the connection is. Claude Code connects and works, and nothing on your machine reports anything.

The tunnel

The tunnel is a program you start yourself, inside a project folder. While it runs, agents that live elsewhere (ChatGPT, Claude on the web) can read and change that folder only, through Naetive, acting as you. It refuses a request for any other project. Stop it and the access ends. It sends file contents and command output only when an agent asks for them, and only for that folder.

The Chats page and the console

The console is a small program on your machine (port 4000) that runs the real agent process when you start one from the Chats page, and streams it to your browser. It binds to your own machine only and answers only to the Naetive that installed it. What the agent does in that session is reported the same way as any Claude Code window.

The `naetive` command

naetive export fetches the understanding and writes it into the repo. It sends nothing except your key to authenticate.

Your key

One credential does all of this. The installer writes it to a file under ~/.claude, readable only by you. Nothing puts it on a command line, the key guard stops an agent from printing it, and it is never shown on Connect unmasked. For a chat agent it travels inside the connector URL you paste, so treat that URL like a password. If it may have leaked, Regenerate on Connect: the old key stops working immediately, so re-run the installer or re-paste the URL. One thing it does not do is cut off a tunnel that is already running: that keeps its own session for up to half an hour, so stop the tunnel too.

Switching things off

One folder: mkdir -p .claude && touch .claude/naetive-disabled in that folder. The hooks stay silent there; not even file paths are sent.
One hook: remove its line from Claude Code's settings (~/.claude/settings.json). Claude Code stays connected.
Everything: the uninstaller from Connect removes all of it, including the connection.

What Naetive does with it

It shows it to you, and to the agents you connect, on your project. Naetive makes no model calls of its own over it; the understanding is assembled from what agents recorded, not generated. It is your account's data and nobody else's.