Telemetry & Metrics Engine

agentsecrets-server includes an automated telemetry and platform analytics engine. It ingests 24-hour anonymous client execution metrics, calculates integration adoption indices, and tracks platform reliability without capturing secret keys or values.

Privacy & Forensic Sanitization

The telemetry engine enforces strict data sanitization rules before persisting records to PostgreSQL:

Privacy Guarantee	Implementation
Zero Secret Data	The telemetry schema contains zero columns or fields for secret names or values.
Path & Username Stripping	Regex sanitizers identify and remove Windows drive letters, user directories (`C:\Users\...`), POSIX paths, and binary names from typo logs.
Command Normalization	Maps 50+ verb-noun shortcuts (`list-secrets`, `set-secrets`, `list-workspaces`) into canonical domains (`secrets`, `workspaces`, `projects`, `env`, `proxy`, `exec`). Shell completion signals (`__complete`) are dropped.
Anonymous Deduplication	Anonymous CLI syncs are deduplicated per 24-hour window by `(date, os, arch, cli_version, active_environment)`.

API Endpoints

1Ingest Daily Snapshots ()

Authentication: Optional (supports anonymous client instances or authenticated JWT users).
Rate Limiting: Maximum 5 requests per 24 hours per anonymous client IP.

Request Payload:

{
  "daily": {
    "2026-08-21": {
      "client_timestamp": "2026-08-21T05:00:00Z",
      "os": "darwin",
      "arch": "arm64",
      "cli_version": "v3.1.0",
      "active_environment": "development",
      "command_executions": {
        "secrets": 12,
        "list-secrets": 4,
        "env": 85,
        "proxy": 3
      },
      "agent_metrics": {
        "daemon_runs": 5,
        "allowlist_violations": 0
      }
    }
  }
}

2Platform Metrics ()

Authentication: None (Public).
Caching: Cached in memory for 1 hour; recalculates on cache miss.

Response Structure:

{
  "platform": {
    "total_users": 110,
    "total_projects": 115,
    "total_secrets": 853,
    "total_workspaces": 115,
    "total_agents": 18
  },
  "engagement": {
    "active_users_daily": 4,
    "active_users_weekly": 8,
    "active_users_monthly": 17
  },
  "analytics": {
    "stickiness_ratio_dau_mau": "23.53%",
    "user_collaboration_rate": "5.45%",
    "integration_adoption": {
      "env": "10.91%",
      "mcp": "6.36%",
      "proxy": "10.00%"
    },
    "command_market_share": {
      "exec": "85.61%",
      "env": "14.03%",
      "secrets": "0.12%"
    }
  }
}

3Metric Calculation Trigger ()

Authentication: Bearer token via CRON_SECRET.
Behavior: Triggers temporal aggregation across all historical days, pinning DAU/WAU/MAU and unique user adoption rates to PostgreSQL DailyMetricsAggregate records.