# Private repository Wikis

Forge Wiki works for private repositories without publishing their source or
generated documentation.

Open the **Wiki** tab from a private repository just as you would for a public
one. The same repository permissions apply:

- readers can browse generated pages, search the Wiki, follow exact-commit
  citations, and ask questions;
- writers and administrators can generate, refresh, improve, and configure the
  Wiki;
- everyone else receives the same not-found response as an unknown private
  repository.

Wiki URLs and immutable version links can be shared with collaborators, but the
link itself does not grant access. Each request rechecks the viewer's current
repository permission. Private responses are not stored in shared caches or
browser caches. Public Wiki responses also revalidate through Forge so a later
visibility change cannot leave a shared cached copy available.

## What Forge sends to the model

Generation selects a bounded set of text files from one exact commit. Forge
treats repository source as data and never executes it. The selected source is
sent to the configured model provider to generate the Wiki, so use a provider
and funding mode that meet your repository's privacy requirements.

Generated pages, search data, and citations stay in Forge's private artifact
storage. They do not appear in public repository listings, anonymous Wiki
search, or unauthenticated MCP responses.

MCP clients can read a private Wiki with a signed-in session or a personal
access token carrying `repo:read`. Asking a private Wiki with a personal access
token additionally requires `wiki:ask`; repository-scoped tokens must name the
same repository.

## Access changes

Removing a collaborator's repository access removes their Wiki access
immediately. Changing a repository between public and private does not require
rebuilding the Wiki; Forge applies the new repository access policy to the
existing immutable artifacts. Unlisted repositories remain ineligible for Wiki
access and refresh until they return to a supported visibility.

Deleting or suspending the repository blocks its Wiki immediately. Artifact
retention and deletion then follow Forge's repository cleanup policy.
