Agents Panel for Command Palette — Last updated August 2026
Agents Panel for Command Palette (the "extension") is an open-source PowerToys Command Palette extension that shows the usage of AI coding agents — Claude, Codex, GitHub Copilot, and opencode. This policy explains what the extension reads, what it stores, what leaves your device, and what it deliberately does not do.
To fetch your usage numbers, the extension reads access tokens that other applications on your machine have already stored as part of their own sign-in:
%USERPROFILE%\.claude\.credentials.json.auth.json in your Codex home directory.hosts.yml, or the editor Copilot apps' local files — or a fine-grained personal access token you paste into the extension's settings yourself.auth.json contains a sign-in entry, to show a signed-in or signed-out row. It never reads, uses, or transmits the key itself — the opencode row involves no network requests at all (opencode currently exposes no usage endpoint).Tokens are read at request time only. The extension never copies them elsewhere, never logs them, never refreshes or modifies them, and never transmits them to anyone except the matching provider's own API (see below). One exception on storage: if you paste a GitHub personal access token into the extension's settings, that token is saved in plain text in the extension's local settings file (agentspanel.settings.json under Command Palette's settings folder) — use a fine-grained token limited to Copilot Requests: Read, and remove it from settings to delete it.
Some agents keep records of your sessions on your machine. To show your recent token counts (and, for opencode, spend), the extension reads:
%USERPROFILE%\.claude\projects.These files can contain the content of your conversations with the agents. The extension extracts only numeric usage figures — token counts, timestamps, and per-message cost — and sums them into the totals it displays. It never reads your conversation content into the display, never stores copies of these files, and never transmits anything from them; the resulting totals exist only on your device. The token-count rows can be hidden in the extension's settings.
The extension keeps a small local settings file (refresh interval, display options, and the optional GitHub token described above). It stays on your machine and is never transmitted to the author. You can clear it by removing the settings file or uninstalling the extension.
To show your quotas, the extension makes periodic requests over the internet, each carrying the relevant token, straight from your machine to the provider that issued that token:
api.anthropic.com) — your Claude usage and limits.chatgpt.com) — your Codex/ChatGPT usage and limits.api.github.com) — your Copilot quotas and plan.The opencode row is the exception: it is computed entirely from local files, and the extension makes no network requests to opencode at all.
These requests do not pass through any server operated by the author, and the author never sees your tokens, your account details, or your usage numbers. Each provider handles the requests it receives under its own privacy policy and terms of service; your use of those services remains subject to their terms.
The extension contains no telemetry channel of any kind. It does not:
Release builds emit nothing off your machine beyond the direct provider requests above.
The extension is a general-purpose developer tool and is not directed at children. It does not knowingly collect any information from children.
This policy may be updated from time to time. The "Last updated" date above reflects the latest revision; continued use of the extension after a change constitutes acceptance of the revised policy.
Questions? Open an issue on GitHub.