Security

Email hello@thecompound.tech. Include the URL, what you did, and what you saw. There is no bounty and no NDA to sign. We will confirm receipt, and we will tell you what we changed.

The same address, with a machine-readable expiry, is published at /.well-known/security.txt under RFC 9116.

Agentwire has no user accounts. There is nothing to sign in to, no password to reset and no session to steal, and a build gate fails the deploy if an authentication route ever appears in this repository while this page still says otherwise.

• Anonymous usage analytics — page views and clicks. Form inputs are masked in session recordings and no profile is created for a visitor who never identifies themselves

• Supabase — the database the index itself is stored in — the entries, not anything about a reader
• PostHog — anonymous product analytics, proxied through this domain
• Vercel — serves this site and holds its access logs

• There is nothing to sign in to and nothing to buy on this site, so there is no account, no card and no session anywhere in it.
• Everything indexed here is public — a repository, a package, a documentation page — gathered and credited rather than reproduced. Nothing about a reader is part of the index.
• If an entry is wrong or you want yours removed, email hello@thecompound.tech and it goes.

Agentwire is built and run by Compound Labs. The declarations on this page are part of this product's own configuration and are re-checked at every deploy against the repository they describe: a product that claims to have no accounts and ships an authentication route fails the build, and so does one that takes payment without naming its payment processor here.