Privacy API - NeuralCleave

Every outbound HTTP call NeuralCleave’s providers make (method, URL, destination host, timestamp) is recorded to a privacy audit log — metadata only, never request/response bodies. The audit log now persists across gateway restarts, stored at ~/.neuralcleave/privacy_audit.db (override via the NEURALCLEAVE_AUDIT_DB_PATH env var), with entries older than 90 days pruned automatically — durable enough for compliance review, bounded so it isn’t an indefinite log.

GET /privacy/report

Get the audit report — every outbound HTTP call recorded, optionally filtered to one session.

curl http://localhost:7432/api/v1/privacy/report
curl "http://localhost:7432/api/v1/privacy/report?session_id=default"

{
  "session_id": "default",
  "total": 2,
  "unique_destinations": ["api.anthropic.com"],
  "entries": [
    {
      "session_id": "default",
      "method": "POST",
      "url": "https://api.anthropic.com/v1/messages",
      "destination": "api.anthropic.com",
      "timestamp": 1723123200.0
    }
  ]
}

Omit session_id to get every recorded session.

DELETE /privacy/report

Clear recorded audit entries — omit session_id to clear everything.

curl -X DELETE http://localhost:7432/api/v1/privacy/report
curl -X DELETE "http://localhost:7432/api/v1/privacy/report?session_id=default"

{ "cleared": 2, "session_id": null }

Privacy mode (zero external calls)

With privacy_mode = true, every request routes to local Ollama — the report will show zero entries for any session started after enabling it:

{ "session_id": "default", "total": 0, "unique_destinations": [], "entries": [] }

See Privacy Mode for how to enable it.

​GET /privacy/report

​DELETE /privacy/report

​Privacy mode (zero external calls)

GET /privacy/report

DELETE /privacy/report

Privacy mode (zero external calls)