Does Athena send my code anywhere?

Analysis, documentation, the web UI and the MCP server run fully offline. Two optional commands use the network, and only when you run them: athena security runs your ecosystem's audit tools (such as npm audit), which query their own advisory databases, and athena ai enrich sends redacted documents to the AI provider you configured.

The web UI listens on 127.0.0.1, port 7432 by default (or the next free port if 7432 is busy), and opens http://127.0.0.1:7432/#token=…. The token is in the URL fragment (after #), so browsers never send it in requests or Referer headers.