Visibility & privacy

Every construct is either public or private. You choose when you publish, and you can make new constructs default to private in Settings.

Public constructs are listed in the catalog, are forkable by anyone (subject to their license), and expose a .md URL (and a /raw alias) that any agent can fetch without a key.

Private constructs are visible only to you. They are never listed or forkable, and they have no public URL. To load a private construct into an agent, create an API key in Settings and fetch constructs.sh/api/v1/constructs/username/construct-name/raw with the key as a bearer token. A private construct you don't own is reported as not found, never revealed.