How the pieces connect

There are three parts. Claude, or another AI app you choose, talks to the Ponta service at mcp.ponta.ai. The Ponta agent on each of your PCs keeps one encrypted connection open to the same service. The service passes each request from Claude to the right PC and passes the answer back.

• Outgoing only. Your PC connects out to Ponta over HTTPS. Ponta opens no ports on your PC or your router, and nothing on the internet can connect in to the agent.
• Your account is yours alone. Each customer's PCs, call log, approvals and settings live in a separate store that only that customer's sign-in can reach.
• Sign-in with Google. Ponta does not hold passwords. You sign in with your Google account, and Claude gets its own access token for your account, separate from your PCs' keys.

Each PC has its own key

When you pair a PC, the agent shows a short code and you confirm it after signing in. The confirm page shows the PC's name, its Windows user and roughly where the request came from, so you can refuse a code that someone else sent you. Only then does Ponta issue that PC its own key. The key is saved on the PC so that only your Windows user and the PC's administrators can read it, and Ponta keeps only a fingerprint of it, never the key itself. Remove a PC on your devices page and it is cut off at once.

Approval taps

Some actions wait for your yes before they happen, for example sending mail to an address you have not marked as safe. You see what Claude wants to do and choose Allow or Deny. An unanswered request expires after 12 hours. Ponta does not let Claude change these rules for itself: there is no tool that can add a safe recipient.

Guards in the agent

• The agent refuses to read or change the places on your PC where passwords, keys and sign-in data are kept, such as browser password stores, SSH keys and its own key. Commands that name those places are refused too.
• Before a file is rewritten, the agent keeps a copy of the old version for 14 days, so a bad change can be undone.
• These guards protect against accidents and against instructions hidden in web pages or documents. They are not a sandbox: anything you can do on your PC, a command run through Ponta can also do. Connect only PCs and Windows accounts you are happy for Claude to use, and review what it does.

What we keep, and for how long

Requests and results pass through Ponta to reach your PC and come back. We do not keep their content, except a long-running result, which is held for up to 24 hours so Claude can collect it later. The call log keeps the tool's name, the PC, the time, how long it took and the size of the answer, with short excerpts of a few details such as a file path or web address, for 90 days. The full list is in our privacy notice.

Where it runs

The Ponta service runs on Cloudflare's network. Payments are handled by Paddle, and we never see your card details. Your AI app is provided by its own maker under its own terms, and what you send it is governed by them.

Reporting a problem

If you think you have found a security problem in Ponta, please write to support@ponta.ai with "Security" in the subject. We will reply and keep you updated while we fix it.