Skip to main content
Privacy mode is a single cross-cutting switch that controls how much detail leaves your machine. When it’s on, the IronBee DevTools MCP servers stop shipping potentially sensitive payloads tool, input/output detail, screenshots, and recordings to the Collector, across every verification cycle at once. It’s opt-in and off by default: a fresh install ships full detail so your Console sessions are as rich as possible. Turn it on when your code or browser sessions touch data you’d rather keep local.

​
Enable or disable

By default these write to the project config (committed, so the whole team inherits it). Use -g/--global to apply it across all your projects, or --local for a gitignored personal override that nobody else sees.
Both commands re-render your installed client artifacts so the change lands in the DevTools MCP env. Narrow that re-render to one client with --client <name> (or --client all); by default it applies to the clients detected in the project.
Restart your editor or agent session after toggling privacy mode. The DevTools MCP servers read their config at session start, so the change takes effect on the next Claude Code / Cursor / Codex session — not the running one.

​
What gets redacted

Enabling privacy mode injects two flags into every DevTools MCP server’s environment: You still get the structural signal which tools ran, verdicts, timing, and the session lifecycle all keep flowing but the heavy, potentially-sensitive payloads stay on your machine. Disabling privacy mode removes both flags, so the DevTools resume their default reporting.
This is a DevTools-side switch. The CLI’s own event pipeline already whitelists tool input and strips tool responses before sending — shell commands, for example, are reduced to coarse binary/subcommand labels, and a command that can’t be parsed confidently is dropped rather than guessed — so privacy mode is specifically about the extra detail and artifacts the DevTools MCP servers contribute.

​
How it relates to telemetry and the collector

These three are independent knobs, privacy mode doesn’t touch the other two: To stop sending your session data entirely, suspend the Collector (collector.enable: false) rather than reaching for privacy mode, privacy mode trims what is sent, not whether anything is sent.
VCS linkage sends repository and branch names through the CLI’s own pipeline, which privacy mode doesn’t touch (it gates the DevTools payloads). If branch names in your repos can carry sensitive text, opt out of the linkage itself with ironbee config set vcs.enable false.

​
Config equivalent

The command is a convenience wrapper around one config key:
Both paths write the same privacy.enable value and re-render artifacts. The key is read from disk when the DevTools env is built, so the layer that wins (local > project > global) is the one that takes effect.

​
Gate only one channel

Privacy mode flips both flags together. If you want, say, recordings off but tool detail on, set the DevTools env override your ironbeeDevTools.env values are applied after the privacy flags, so they win:
Here screenshots and recordings stay redacted (privacy mode), but tool detail is allowed back through.

​
What’s next?

Telemetry & Statusline

The other data toggle — anonymous CLI telemetry.

Configuration

The privacy.enable key and the DevTools env overrides in full.