diff --git a/PRIVACY.md b/PRIVACY.md
new file mode 100644
index 0000000..af8c58e
--- /dev/null
+++ b/PRIVACY.md
@@ -0,0 +1,10 @@
+# Privacy
+
+go-tokenless (the CLI, the MCP server, the Agent Skill and the Claude and Gemini plugins) collects no personal data and has no telemetry.
+
+- **Local:** it runs entirely on your machine, reads files in the repository you point it at, and writes only to that repository's workflow and `package.json` files when you run `apply`.
+- **Network:** the only requests it makes are read-only `GET` requests to `https://registry.npmjs.org/<package>`, to check that each package exists. Turn them off with `--offline` (MCP: `offline: true`). These requests carry no repository contents or credentials.
+- **Never accessed:** your secrets, tokens, npm account or GitHub account.
+- **Third parties:** npm's own privacy policy covers requests to the npm registry.
+
+Questions: open an issue at https://github.com/Continuous-Actions/go-tokenless/issues.
diff --git a/README.md b/README.md
index e93ebfd..095ba5e 100644
--- a/README.md
+++ b/README.md
@@ -114,6 +114,7 @@ go-tokenless is built to be run by coding agents: `--json` output, clear exit co
 
 | Client | Setup |
 |---|---|
+| Claude directory (claude.ai, Cowork, Claude Code) | Submitted to [Anthropic's plugin directory](https://claude.ai/directory) and awaiting approval. Once listed: open the directory, search **go-tokenless** and select **Add**. It then syncs to Claude Code as `go-tokenless@synced`. Until then, use the marketplace command below |
 | Claude Code (plugin: skill + MCP) | `/plugin marketplace add Continuous-Actions/go-tokenless` then `/plugin install go-tokenless@continuous-actions` |
 | Claude Code (MCP only) | `claude mcp add go-tokenless -- npx -y go-tokenless mcp` |
 | Gemini CLI | `gemini extensions install https://github.com/Continuous-Actions/go-tokenless` |
diff --git a/claude-plugin/.claude-plugin/plugin.json b/claude-plugin/.claude-plugin/plugin.json
index 9a45c31..00e803a 100644
--- a/claude-plugin/.claude-plugin/plugin.json
+++ b/claude-plugin/.claude-plugin/plugin.json
@@ -10,6 +10,9 @@
   },
   "homepage": "https://github.com/Continuous-Actions/go-tokenless",
   "repository": "https://github.com/Continuous-Actions/go-tokenless",
+  "documentationUrl": "https://github.com/Continuous-Actions/go-tokenless#readme",
+  "supportUrl": "https://github.com/Continuous-Actions/go-tokenless/issues",
+  "privacyPolicyUrl": "https://github.com/Continuous-Actions/go-tokenless/blob/main/PRIVACY.md",
   "license": "MIT",
   "keywords": [
     "npm",