⚡ Local Proxy · Telemetry Evidence Layer · Linux / WSL2

See what your
AI CLI sends.

Frank Infinity sits between supported AI CLIs and their upstream APIs. It separates real model traffic from telemetry, blocks or stubs known tracking, strips fingerprinting headers, and captures an evidence log of what actually left your machine.

Traffic classification

Separates AI request traffic from telemetry and other side-channel traffic. You see what's model-related and what isn't.

🧟

Telemetry blocking

Blocks or stubs known telemetry endpoints by domain, route shape, body shape, and tracking query parameters. Default preset is shield.

🧪

Evidence capture

Logs what was sent, what was blocked, and what still passed through. Surfaces it in a Textual TUI and CLI reports.

⚗️

Header stripping

Strips common tracking and fingerprinting headers from allowed AI requests. Reduces passive identifier leakage.

Real session. Ghost preset active. Two CLIs intercepted, 42 telemetry events blocked.

Frank routes each CLI through its own provider adapter. Coverage and preset reliability vary by target.

Claude OpenCode Gemini Codex Kimi KiloCode aider Hermes
🛡

shield recommended

The default and most reliable preset. Blocks or stubs matched telemetry, strips tracking headers, aims to preserve normal CLI use.

👻

ghost experimental

More aggressive blocking mode. Still experimental on some provider paths. Use only if you're comfortable debugging broken requests.

📡

static experimental

Most aggressive stubbing mode. Not universally safe. For advanced users running controlled tests.

# Quick install
python3 -m venv .venv
source .venv/bin/activate
pip install -U pip
pip install -e .

# Launch the dashboard
frank-tui

# Start a proxy
frank start --cli opencode --preset shield
Linux — recommended, primary target
~ Windows via WSL2 — works, Linux-first docs apply
Native Windows — not ready yet
? macOS — not documented or tested; may work but not supported
Coverage is signature-based. Frank blocks what it knows about — it does not guarantee exhaustive telemetry elimination.
Frank is not an anonymity tool. It reduces telemetry and strips identifiers. It does not make you anonymous.
Provider support is uneven. Some CLIs and presets work better than others. shield is the reliable baseline.
This is source code, not an installer. Setup requires Python 3, a venv, and basic CLI comfort.
Telemetry mutation (ghost, static) is less mature than blocking and stubbing. Start with shield.
TLS inspection requires certificate trust installation. Some tools with cert pinning can't be fully inspected.
$5

Launch price. One-time purchase, no subscription. You're buying the stable, cleaned, operator-facing release and the research work that went into making it actually usable. Not a polished SaaS product — a serious technical tool at an honest price.

Buy on Gumroad → $5

Non-commercial source-available license. You can use, study, and modify it. You cannot resell it.