ZCode
 | This article appears to have been generated by a large language model (such as ChatGPT) without having been rigorously scrutinized for verifiability, neutrality, original research, and copyright compliance. It may include misleading or inaccurate claims and fake references that sound plausible. (October 2026) (Learn how and when to remove this template message) |
| Developer(s) | Z.ai |
|---|---|
| Initial release | July 2, 2026 |
| Engine | |
| Operating system | macOS, Windows, Linux |
| License | Client, backend and agent code under the Apache-2.0 |
| Website | zcode |
Search ZCode on Amazon.
ZCode is an artificial intelligence programming tool developed by the Chinese company Z.ai (Zhipu AI). Released in July 2026 and positioned by its developer as the official development environment for its GLM-5.2 large language model, it is described as an "agentic development environment" in which an AI agent plans, edits and reviews code to complete long-horizon tasks.[1][2] The tool surpassed one million users in August 2026.[3] In September 2026 it became the subject of a data-privacy controversy after developers found that it uploaded local project data, including full Git histories, to cloud storage without consent.[4]
History
ZCode was released in early July 2026; a report by VentureBeat on 2 July described it as a desktop coding agent competing with Cursor, Claude Code, GitHub Copilot and Google Antigravity, with Z.ai presenting it as the official development environment for GLM-5.2.[1] The tool is free to download, with paid subscriptions ranging from a Lite plan at US$16.20 per month to a Max plan at US$144 per month.[1]
On 11 August 2026, Z.ai announced a major update adding goal-directed tasks, subagents, remote control and idle-time task execution, and said that ZCode had surpassed one million users. The company's internal benchmark, Z.ai Code Bench, indicated that GLM-5.2 paired with ZCode achieved a task pass rate 2.39 percentage points higher than the same model paired with Claude Code, with the advantage concentrated in complex tasks spanning multiple files and stages.[3]
Features
ZCode differs from conventional IDE-based assistants that add a chat sidebar and code completion: the user states a goal, and the agent handles planning, file editing, review and iterative correction.[1] According to the developer's documentation, it is a "full-featured agentic development environment" designed for long-horizon tasks, combining a self-developed agent with multi-framework compatibility, bot integration and remote control from mobile devices.[2] Running agents can also be controlled through messaging services such as WeChat, Lark and Telegram, and the tool can connect to third-party model providers.[1]
Privacy controversy
User reports
On 18 September 2026, several users reported that ZCode had "silently uploaded" development data to third-party cloud servers without permission, including the entire history of their development work, which could contain keys and internal business information. Users said the upload could not be disabled in the client and that the uploaded data, while encrypted, could not be unpacked locally.[4]
According to The Next Web, the developer who first documented the behaviour, writing under the name "ferstar", found a 313-megabyte encrypted snapshot of a commercial project in a local ZCode checkpoints directory, whose status log recorded 564 failed upload attempts. The snapshot contained 42,411 files, of which 86.6% were Git directories, including 196.1 MB of large-file cache and 102.2 MB of Git objects carrying the full commit history. File contents were encrypted with AES-256-CTR and the key wrapped with RSA-OAEP-SHA256 using a public key from Z.ai's server; two client settings that appeared to block uploads in fact only governed downstream handling of the data.[5]
Company response and remediation
Z.ai responded on the evening of 18 September that the issue originated in a ZCode feature called "code repository indexing", which had been enabled by default, and said that uploaded data was used only to generate Repo Wiki pages in the cloud and was then destroyed. The company apologized to affected users, pledged to release ZCode's source code, invited third-party review, and offered all users an additional weekly quota reset as compensation.[4][6]
On the evening of 20 September, the company's MaaS platform introduced a "no data retention" option under which inputs and outputs of model calls are not statically stored, with exceptions for APIs requiring persistent storage and for legal or abuse-investigation requirements.[6] On 21 September, Z.ai announced that ZCode had completed a security rectification and that its client, backend and agent CLI code had been published on GitHub under the Apache-2.0 license.[7] According to the company, the China Academy of Information and Communications Technology verified that the product's Alibaba Cloud object-storage bucket contained no data, and the security firm NSFOCUS reported that the bucket and all objects in it had been deleted and that version 3.14.0 of the client contained no code path capable of triggering local repository snapshots or file uploads.[6]
On 24 September, The Next Web reported, citing Reuters, that a Chinese company, Chengming Technology, had alleged that six of its coding workspaces were uploaded without consent, and that it withdrew the statement days later, saying it had relied on wrong evidence.[5]
Open sourcing and transparency
The Next Web observed that the published repository had been created on the day of the open-sourcing announcement and initially carried only two commits, so the tool's development history, including the code that had performed the uploads, was not included; the publication wrote that the tool could now be inspected, "what it used to do" could not. The repository's issue tracker was disabled.[5] Shares of Z.ai, listed in Hong Kong, closed nearly 2% higher on 21 September after opening lower.[7] Analysts at CSC Financial said the open-sourcing turned previously unverifiable security promises into verifiable ones, allowing developers to check data calls, network requests and local processing logic directly.[7]
See also
References
- ↑ 1.0 1.1 1.2 1.3 1.4 Z.ai、GLM-5.2向けコーディングエージェント「Zコード」投入 [Z.ai launches coding agent "ZCode" for GLM-5.2 to rival Cursor and Claude Code]. DigitalToday (in 日本語). 2 July 2026. Retrieved 7 October 2026.
- ↑ 2.0 2.1 "ZCode". Zhipu AI Open Platform Docs (in 中文). Retrieved 7 October 2026.
- ↑ 3.0 3.1 智谱ZCode用户突破100万，四项新功能上线 [Zhipu's ZCode tops one million users; four new features launched]. QQ News (in 中文). The Beijing News. 11 August 2026. Retrieved 7 October 2026.
- ↑ 4.0 4.1 4.2 智谱AI道歉 [Zhipu AI apologizes]. Sina Finance (in 中文). 19 September 2026. Retrieved 7 October 2026.
- ↑ 5.0 5.1 5.2 "Z.ai apologised, open-sourced ZCode, and wiped the commit history". The Next Web. Retrieved 7 October 2026.
- ↑ 6.0 6.1 6.2 独家｜智谱回应数据隐私争议：ZCode即将正式开源，并开展安全审计 [Exclusive: Zhipu responds to data privacy controversy — ZCode to be open-sourced and undergo security audit]. The Paper (in 中文). 21 September 2026. Retrieved 7 October 2026.
- ↑ 7.0 7.1 7.2 智谱宣布ZCode完成安全整改，股价拉升翻红 [Zhipu announces ZCode has completed security rectification; shares turn positive]. Securities Times (in 中文). 21 September 2026. Retrieved 7 October 2026.
This article "ZCode" is from Wikipedia. The list of its authors can be seen in its historical and/or the page Edithistory:ZCode. Articles copied from Draft Namespace on Wikipedia could be seen on the Draft Namespace of Wikipedia and not main one.
