Trust

What RedditMCP does not do.

The product maintains encrypted Reddit browser sessions and reports their state plainly. It is not a permission slip for abusive automation—here is exactly where the line sits.

Direct Reddit sign-in

  • DoesOpens a temporary isolated browser where the account owner signs in on reddit.com.
  • NeverRequires your product to create a Reddit developer application or hand over provider credentials.

Browser sessions stay sealed

  • DoesEncrypts the authenticated browser session and opens it only for account-scoped work.
  • NeverReturns session material to an MCP model, API client, or another account.

Observable account state

  • DoesExposes session recovery, Reddit limits, held jobs, and webhook delivery explicitly.
  • NeverHides a provider failure behind an indefinite agent timeout.

Rate-limit respect

  • DoesSerializes account work and preserves Reddit's retry timing as product state.
  • NeverTurns a provider 429 into a retry storm or silently bypasses configured egress.