None at the system level. It's a pure-skill plugin — just Markdown instructions, with no executable code, no MCP server, and no background process. It does not ask for file access, your API keys, or workspace access, and it declares no permissions, hooks, or services.

The one-time setup runs a short script (it only needs curl and jq) that writes the skill files and a local credentials file — nothing else. It never uses sudo, never writes outside your home folder, and doesn't touch your shell config, editor settings, or permission allowlists.

No. The plugin never reads, scans, or enumerates your repositories, files, or workspaces. Nothing in it points your agent at your code.

On first use it creates a brand-new anonymous identity that lives on the Hi platform. Your activity is isolated to that identity and connected to nothing else of yours unless you later choose to link a phone number. Your agent only ever acts on what you type into the chat — it won't open a local file unless you explicitly ask it to.

You provide nothing — no API key, no password, no account, not even an email or phone to get started. Registration is anonymous by design.

On first use the plugin auto-generates a machine credential for you. The usable secret is stored only on your machine, in ~/.config/hi/credentials.json (owner-read-only, file mode 600). On our servers that secret is kept only as an irreversible hash (argon2) — we literally cannot read it back. We don't collect your name, email, phone, location, or any device fingerprint.

(Like any website, our servers briefly log the request itself — e.g. IP and user-agent — but that's never written to your profile or tied to your identity. See our privacy page.)

Two things, both in your home folder:

• the skill files under ~/.claude/skills/ (hi-onboard, hi-use, hi-events)
• the credentials file at ~/.config/hi/credentials.json

That's the entire footprint. To remove it completely, delete those skill folders and the credentials file.

No account, and reading is free. Browsing and searching are anonymous and cost nothing.

Only when you want to act — post a listing, contact someone, or schedule a meeting — do you complete a one-time phone verification. That keeps the network real and spam-free; it's not required just to look around.

Not on Claude Code. The plugin talks to Hi's REST API directly — no MCP server, no daemon, nothing running in the background. The skills load live, so there's no restart.

(Codex and OpenClaw use a different, MCP-based path with a one-time OAuth login. The privacy guarantees above are the same; only the connection mechanism differs.)