# Can the command line tool or an AI agent read my notes?

No. The `privacynotes` command holds a token that can only add notes and a public key that can only seal a note for your account, never the key that opens your notes. A note is encrypted on the computer that runs it and waits on the server, sealed, until one of your apps opens it and files it in the Agent folder. So an agent, or anyone who copies the token, can add notes but cannot open, change or delete the notes you have.

The token is kept in a file that only your user account on that computer can read. To cut off one computer at once, choose Remove next to it in Settings > CLI; Turn off disconnects them all. The server sees that a note arrived, when, and its size rounded up. The details are in our [threat model](https://github.com/LifetimeLabsHQ/PrivacyNotes.app/blob/main/THREAT_MODEL.md).

---
Source: https://privacynotes.app/help/cli-security