Network behavior

Explicit network surfaces and defaults.

AgentInspect is local-first. Core tracing writes local files and does not upload to AgentInspect. Some optional surfaces can use the network when explicitly enabled.

Summary

SurfaceDefaultNetwork?Notes
Core CLI / writersOnNoLocal JSONL only
Framework adaptersOpt-in installNo AgentInspect uploadProvider SDKs may still call their own APIs
explainLocal factsNo provider calls in default mode
ViewerLocalhostLoopback onlyRead-only
Studio CLILocalhost bindLoopback by defaultCustomer-owned
Studio file-drop ingestOff / explicitNoLocal files
Studio GitHub artifact importOff / explicitYes → GitHubUser credentials; customer-owned
Studio HTTP ingestDisabled by defaultYes if enabledToken + binding required
MCP client (@agent-inspect/mcp)Opt-inTo your MCP serversTracing only; not a gateway
MCP serverOpt-inExposes local evidence to connected clientPreview; share-profile boundary
Standards export / collectorOpt-inOnly if you configure exportKnown losses documented
Website / docsN/APublic siteNo trace upload

Rules of thumb

  1. No default upload of traces to AgentInspect maintainers.
  2. No hidden telemetry from the library.
  3. Customer-owned destinations only (your disk, your Studio, your collector).
  4. Prefer redact / verify-safe before any share or ingest path.
  5. Redaction is best-effort, not certification.

Transport evidence (HTTP / fetch / MCP)

Capture HTTP status, server-advertised retry delay, selected delay, and their sources at the transport or fetch boundary that observes them.

An MCP client wrapper or SDK error string cannot recover facts already collapsed into a message such as "fetch failed" or "429 Too Many Requests". If the application needs TraceFacts or contracts over status/retry behavior, instrument the fetch/transport layer (or an observer that reads response headers before they are discarded).

AgentInspect does not invent transport facts from error message text.

Enabling Studio ingest

See SELF-HOSTING.md and @agent-inspect/studio. HTTP ingest remains off until you configure token and binding.

Full reference remains in GitHub docs during the docs migration.