How it works / Local token capture
Local token capture
The local-first guarantee: what leaves your machine, and what never does.
Centrail is local-first. The CLI does all reading and matching on your machine.
What leaves your machine
Only derived numbers: per-event token counts, model names, timestamps, and — if you enable attribution — commit shas with line counts. That's it.
What never leaves
- Source code
- Prompts or completions
- Git diffs or commit messages
- File contents
- Copilot's
encryptedContentandreasoningOpaqueblobs - Any prompt or completion text from any agent
You can revoke any machine's token from your Profile, which immediately stops that machine from syncing.