Privacy

OpsCrew is an open-source project by Mihailo Popović. This page covers the opscrew CLI, its MCP server, the Claude Code (opens in a new tab) plugin, and the websites opscrew.dev and docs.opscrew.dev.

Last updated: 2026-11-11.

The short version

OpsCrew runs on your computer. There is no OpsCrew service, no OpsCrew account and no telemetry: nothing is sent to OpsCrew. What OpsCrew writes stays in your repository (opscrew/) and in its local state folder (.opscrew/). It talks only to the services you use it with, with the tokens you give it, for the steps you run.

What OpsCrew handles

• Your repository: OpsCrew reads how your app is built (frameworks, services, the names of environment variables) and writes its plans, infrastructure code, workflows and reports there.
• Secrets: tokens and your app's secret values stay in your environment, in GitHub (opens in a new tab)'s encrypted secret store and in the encrypted recovery copy. They never go into a prompt, a log, a report, a pull request or a plan.
• Personal data: the interview can ask for a contact email for certificates and alerts. It is stored in opscrew/requirements.yaml in your repository and given to your server's certificate setup. Domain registrars use your own account's contact details; OpsCrew never collects registrant details.

The services OpsCrew talks to

Each has its own privacy policy, which applies to what you send it.

• GitHub: your repository, pull requests, Actions secrets and workflows.
• Hetzner Cloud (opens in a new tab) and DigitalOcean (opens in a new tab): servers, firewalls, volumes, object storage and prices.
• Cloudflare (opens in a new tab): DNS records, TLS settings, rules and Workers, and DNS lookups when OpsCrew checks a site.
• Porkbun (opens in a new tab), Namecheap (opens in a new tab) and GoDaddy (opens in a new tab): only when you search for, buy or connect a domain.
• Your own servers (over SSH) and your Portainer (opens in a new tab) (through its API), when you deploy there.
• OSV (opens in a new tab) (api.osv.dev): opscrew scan sends your dependencies' names and versions to look up known vulnerabilities.
• npm (opens in a new tab) and container registries: read anonymously for the package and image versions OpsCrew pins.
• Anthropic (opens in a new tab): only for the CLI's AI steps (for example opscrew analyze without --no-ai), with your own Claude (opens in a new tab) subscription or API key. They send parts of your repository to the model, never a secret. The MCP server and every --no-ai step never call a model.

In the Claude Code plugin, your Claude Code session sends the tools' results to Claude as part of the conversation. They never contain a secret, and they say "your server" or "your Portainer" instead of the address of a server you already own or of your Portainer.

These websites

opscrew.dev and docs.opscrew.dev are static sites hosted on Cloudflare, which handles each request, your IP address included, under its own privacy policy.

They use Google Analytics, loaded through Google Tag Manager, to count visits and see which pages are read. It sets cookies in your browser and sends Google the pages you visit, the page you came from, your browser and device type and your approximate location, under Google's privacy policy. Google's opt-out add-on or a content blocker stops it.

The blog's articles and its front page show Google's button for adding opscrew.dev to your preferred sources on Google. To draw it, your browser loads Google's script from news.google.com, a frame from news.google.com and Google's logo from www.gstatic.com. Those requests send Google your IP address and your browser's details, and the script runs on the page you are reading, under Google's privacy policy. A content blocker stops it; a plain link to the same Google page is shown instead.

An article with a YouTube video shows the video's poster, an image loaded from YouTube's i.ytimg.com. The video and YouTube's player load from youtube-nocookie.com only after you click the poster. Both requests send YouTube, part of Google, your IP address and your browser's details, under the same privacy policy.

Questions

Open an issue on GitHub.