From 5bada2cf29c15bcd53cf4150cc35368e744471f8 Mon Sep 17 00:00:00 2001
From: Teknium <127238744+teknium1@users.noreply.github.com>
Date: Mon, 2 Nov 2026 13:16:38 -0800
Subject: [PATCH] chore(catalog): review disclosure for muse-harness

---
 plugin-catalog/muse-harness.yaml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/plugin-catalog/muse-harness.yaml b/plugin-catalog/muse-harness.yaml
index 5aa55da197..d4789d9eaa 100644
--- a/plugin-catalog/muse-harness.yaml
+++ b/plugin-catalog/muse-harness.yaml
@@ -1,7 +1,7 @@
 name: muse-harness
 repo: https://github.com/SnoobieJunes/hermes-muse-harness
 sha: 5cc2d060dee651345c75a75e4a52abb2272462be
-description: Drive local Muse Code over MSP so Wonder Full can call MCP tools.
+description: "Drive local Muse Code over MSP so Wonder Full can call MCP tools. Disclosure — runs your locally installed `muse` (Muse Code) binary as a child process with an allowlisted environment and sends the prompt to Meta through it; if the Muse Code subscription allowance is exhausted, the same prompt is retried once on pay-as-you-go billing with the Meta API key stored in Hermes secrets (MODEL_API_KEY, META_API_KEY or META_MODEL_API_KEY) when one is set; with `approval_mode: allowAll` Muse runs its own shell and file tools in the session directory without asking; MCP servers the model passes are limited to loopback HTTP."
 maintainer: SnoobieJunes
 tier: community
 category: tools