Z.ai open-sources ZCode after its coding tool silently uploaded user data

Chinese AI company Z.ai has open-sourced its ZCode coding tool after developers discovered that it silently uploaded user data to cloud servers. The move followed intense criticism from the people the product was designed to attract.

Publishing the client lets developers inspect the code path, identify what leaves their machines and verify future changes. It also allows organizations to fork or pin a known version. Those are meaningful improvements for a tool that can see source code, credentials and proprietary context.

Open source is not retroactive accountability. Z.ai still needs to explain what data the earlier product transmitted, the legal basis and settings involved, how long the information was retained, who could access it and whether deletion is possible. It must also document any server-side processing the released client cannot reveal. The episode illustrates why coding agents require network-level controls and audit logs even when their user interface appears local.