# Report

zn-gate report shows what zn-gate did on this computer in the last days, from local files only. Nothing is written or sent.

Source: https://usezn.com/docs/zn-gate/report/

```bash
npx -y zn-gate report
```

(or `zn-gate report` if you installed it with `npm i -g zn-gate`).

## What it shows

A short summary of the last 7 days on this computer:

- **Blocked actions**: how many times zn-gate stopped something, and for which agent.
- **Secrets hidden**: how many secret values were replaced before your agent saw them, and what kind they were (for example `AWS_KEY` or `GITHUB_TOKEN`).
- **New MCP servers**: servers that zn-gate started protecting during the period.
- **Tools changed, waiting for your approval**: tools of a protected MCP server that changed since you last approved them. Review them with `zn-gate pins`.
- **Busiest day**: the day with the most blocked actions.

```
zn-gate report: 2026-10-11 to 2026-10-17 (this computer only; nothing was sent)

  Blocked actions   : 12  (claude-code 9, cursor 3)
  Secrets hidden    : 31  (AWS_KEY 14, DB_PASSWORD 8, GITHUB_TOKEN 6)
  New MCP servers   : 1  (npx @modelcontextprotocol/server-github)
  Tools changed, waiting for your approval: 1  (run: zn-gate pins)

  Busiest day: 2026-10-14 (9 blocked)

This report was built from files on your computer. Nothing left it.
```

If zn-gate has not checked anything yet, it says so and shows no numbers. Counts start once zn-gate checks something (agent hooks, MCP tools or protected MCP servers). If counting is turned off with `ZN_STATS=off`, the report says that too.

## Options

| Option | What it does |
|---|---|
| `--since 30d` | Use another period, from `1d` to `90d`. The default is `7d`. |
| `--json` | Print the same numbers as JSON, for scripts. |
| `--no-team-line` | Leave out the closing line about zn Team. The line also does not appear once this computer has joined a Team. |

## Your data stays here

The report only reads two things that zn-gate already keeps on your computer: the counts in `~/.zn/stats.json` and the list of protected MCP servers. It writes no files, opens no network connection and needs no account. It never prints prompts, file contents, folder names or the names of your secrets; a server is shown only by its name (the program and the package or script file), never by its arguments.

Sharing counts with zn is a separate choice that is off unless you turn it on (`zn-gate stats share status`).