Trust
What RedditMCP does not do.
The product manages user-authorized Reddit access and tells you the state plainly. It is not a permission slip for abusive automation—here is exactly where the line sits.
Consent-bound actions
- DoesRuns only the operations your tenant requests, against accounts your users connected.
- NeverScrapes or acts outside the actions a user consented to.
OAuth grants stay sealed
- DoesEncrypts Reddit refresh grants and opens them only for an account-scoped dispatch.
- NeverCollects, stores, or transmits a user's Reddit password.
Observable account state
- DoesExposes OAuth recovery, provider limits, held jobs, and webhook delivery explicitly.
- NeverHides a provider failure behind an indefinite agent timeout.
Rate-limit respect
- DoesSerializes account work and preserves Reddit's retry timing as product state.
- NeverTurns a provider 429 into a retry storm or silently bypasses configured egress.