Private context, bounded access.

Last updated November 2026

Identity-scoped vaults

Every Threadkeep account maps to one private relationship-memory vault. Vault identity is attached to each server-side read and write rather than accepted from tool payloads, helping prevent a client from selecting another account.

OAuth grants and developer credentials can be revoked independently. Authentication failures deny access, and credentials are not returned in tool responses.

Clear, limited permissions

Reading relationship information requires vault:read. Adding, changing, or deleting records requires the optional vault:write permission, which users may decline during authorization.

Each action has its own MCP tool and bounded input schema. There is no generic command that executes arbitrary code or selects an unadvertised operation.

User-directed context

Threadkeep does not directly sign in to email or calendar providers. A connected assistant may use sources the user has separately authorized and send selected context to the vault.

Because personal context can involve other people, owners should save only useful, proportionate information and remove it when it is no longer needed. Source excerpts and participant lists are optional wherever possible.

Service safeguards

Threadkeep is delivered over HTTPS through Cloudflare and uses managed network, storage, and authorization services. Account data is partitioned by authenticated identity, authorization state is checked before tool execution, and validation limits the size and shape of stored values.

We monitor errors and maintain recovery controls appropriate to the beta. These measures reduce risk but cannot eliminate every security or availability problem.

Security reports

Email security@threadkeep.me if you notice unexpected access, believe a credential is compromised, or have a clear report of a potential vulnerability.

Include the endpoint, expected and observed behavior, and a safe reproduction using your own account. Do not send active credentials, unnecessary personal data, or another user’s records.