Remove Trusted Codes from a computer

Removing the app does not delete your account. Your connections, your codes on the phone and your other devices stay as they are. To delete the account itself, run tcc account delete before you remove the app. That is a separate step and it cannot be undone.

While the App Is Still Installed

Run:

tcc uninstall

Or open the menu of the Trusted Codes icon and choose Uninstall Trusted Codes….

Both first list everything that Trusted Codes keeps on this computer, then ask you to confirm. They then:

remove this computer’s device on the server, for every account that is signed in on it;
stop the app from starting at login, and remove it from Claude Desktop, Claude Code and Cursor;
stop every Trusted Codes process;
delete the tcc command, the saved keys and sign-ins, and the data folders;
move every copy of the app to the Trash, so that no copy opens a Trusted Codes link.

If this computer is the only place that holds the key of an account, and that account has no recovery words, you get a warning first. Set up recovery words, or sign in on your phone, before you continue. If you do not, you lose the codes of that account.

On macOS a keychain dialog can appear during the removal. Answer it.

At the end you get a list of what was removed and what was not. A device that could not be removed on the server is named in that list. Remove it from your phone, as described at the end of this page.

When the App Is Already Deleted

Deleting the app leaves the rest on the computer. A copy in the Trash can still open Trusted Codes links. Do these steps by hand.

macOS

Quit Trusted Codes. If its icon is in the menu bar, choose Quit Trusted Codes there. If there is no icon, open Activity Monitor, search for tcc, and quit every process whose name starts with tcc.
Delete every copy of Trusted Codes.app. Look in /Applications, in ~/Applications and in the Trash. Then empty the Trash.
Delete the folder ~/Library/Application Support/com.trustedcodes.companion and, if it exists, ~/Library/Application Support/trusted-codes.
Delete the file ~/Library/LaunchAgents/Trusted Codes.plist, if it exists. It starts the app at login.
Open Keychain Access, search for Trusted Codes, and delete every item with that name. In Terminal, this command deletes one item each time; run it until it reports that no item was found:
```
security delete-generic-password -s "Trusted Codes"
```
Delete the tcc command: ~/.local/bin/tcc, or /usr/local/bin/tcc.
In the folder ~/.trusted-codes, delete only these four files: mcp-audit.jsonl, mcp-tools.json, codeword-policy.json and cloudflared.log. Do not delete the folder. Other tools can keep their own files in it. Delete it only if it is empty after this step.
If you added Trusted Codes to Claude Desktop, Claude Code or Cursor, remove the trusted-codes entry from that application’s MCP settings.

Windows

Quit Trusted Codes: right-click its icon in the notification area and choose Quit Trusted Codes. If there is no icon, end every tcc process in Task Manager.
Open Settings → Apps → Installed apps, find Trusted Codes and choose Uninstall.
Delete the folders %APPDATA%\com.trustedcodes.companion and %APPDATA%\trusted-codes.
Delete the tcc command: the folder %LOCALAPPDATA%\Programs\Trusted Codes\bin. Then remove that folder from the Path of your user account (Edit environment variables for your account).
Open Credential Manager, then Windows Credentials, and remove every generic credential whose name ends in .Trusted Codes.
Open Settings → Apps → Startup and check that Trusted Codes is not listed. If it is, turn it off.
In the folder %USERPROFILE%\.trusted-codes, delete only mcp-audit.jsonl, mcp-tools.json, codeword-policy.json and cloudflared.log. Delete the folder only if it is empty after this step.
Remove the trusted-codes entry from the MCP settings of Claude Desktop, Claude Code or Cursor, if you added it.

Linux

Quit Trusted Codes from its tray icon, or end every tcc process.

If you set up the background service, stop it and delete it:

systemctl --user disable --now trusted-codes.service
rm ~/.config/systemd/user/trusted-codes.service
systemctl --user daemon-reload

Remove the app. For a .deb or .rpm package, use your package manager (sudo apt remove … or sudo dnf remove …). For an AppImage, delete the file.
Delete the folders ~/.local/share/com.trustedcodes.companion and ~/.local/share/trusted-codes.
Delete ~/.config/autostart/Trusted Codes.desktop, if it exists.
Delete the saved keys and sign-ins. With secret-tool:
```
secret-tool clear service "Trusted Codes"
```
Delete the tcc command: ~/.local/bin/tcc, or /usr/local/bin/tcc.
In ~/.trusted-codes, delete only mcp-audit.jsonl, mcp-tools.json, codeword-policy.json and cloudflared.log. Delete the folder only if it is empty after this step.
Remove the trusted-codes entry from the MCP settings of Claude Desktop, Claude Code or Cursor, if you added it.

Servers and Containers

A server install can keep its data in other places. Check each of these:

The settings file of tcc. It is the first of these that exists: the file given with --env-file, the file in TCC_ENV_FILE, ~/.config/tcc/tcc.env, /etc/tcc/tcc.env. Read it before you delete anything; it names the paths below. Delete it when you are done, if nothing else uses it.
TCC_CREDENTIAL_FILE: the file that holds the keys and sign-ins in place of a keychain. Delete it.
TCC_DATA_DIR: the folder that holds the account databases. Delete only the accounts folder in it and the files companion.db, companion.db-wal and companion.db-shm. Do not delete the folder itself unless it is then empty; it can be a folder that other software uses too.
The remote-mode settings config.toml: $XDG_CONFIG_HOME/tcc/config.toml or ~/.config/tcc/config.toml. It holds an access token. Delete it.

The data folders of the Linux steps above are still used with TCC_DATA_DIR set, so delete them too.

Remove the Computer from Your Account

If the app was deleted before it could remove the computer, the computer is still listed as a device of your account. Remove it in your account portal: on your phone open Settings → Manage account → Devices and sessions, and remove the computer. Every plan includes this.

If more than one account was signed in on the computer, do this for each account.