Security

How we keep your key and your data safe.

You give us the key to your invoices or your servers. This page says what we do with it, what we keep and for how long, and who else is involved.

  • Your key is encrypted

    We encrypt your key with AES-256 before we save it. Your AI never sees it, and Disconnect deletes it straight away.

  • Your data is never stored

    Each answer is fetched live from your tool and passed straight on to your assistant. We keep no copy, never share it, and no AI model trains on it.

  • Or run it yourself

    Run the server on your own machine, and your API key and your data never pass through our servers.

Your API key

  • Encrypted with AES-256 (CBC, signed with HMAC-SHA256) before it is saved.
  • The key that unlocks it lives in the environment of our server, never in the database. A copy of the database alone cannot reveal it.
  • Decrypted only to call your tool, and sent only to its API, over HTTPS.
  • Your AI assistant never sees it. It signs in to MCP Hosted with its own access, which you approve yourself.
  • No screen shows it once it is saved, not yours and not ours.
  • A key your tool rejects is not saved.

Your data

  • Fetched live from your tool when your AI asks for it, and passed straight on. We keep no copy.
  • We never pass it to anyone else, and run no AI model that could train on it.
  • Each AI assistant signs in as you and only reaches your own connections.
  • Once the answer reaches your assistant, its own privacy settings apply.

Logs

  • Our application log records errors, not requests: what went wrong and where in the code.
  • It holds no request bodies, no tool arguments, no answers and no API keys. Errors are logged without the arguments of the code that failed, so a key cannot slip in that way either.
  • Error reports go to Sentry without request bodies and without those arguments.
  • Like every web service, our network and server see the address, the time and the IP address of each request. The address of an MCP request only holds the name of the tool and the number of the connection, never what you asked.

Network

  • Every page and every MCP request runs over HTTPS.
  • Cloudflare sits in front of our server. The connection from your browser or AI assistant to Cloudflare is encrypted, and so is the one from Cloudflare to our server, with a verified certificate.
  • Our server and database run in a data centre in the EU.

Self-hosting

  • Some tools also run on your own computer, started with one npx command. Your API key and your data then never pass through our servers.
  • The server checks your license key with Polar once, when it starts.

Taking back access

  • Every AI assistant gets its own login, which you approve once, like when you sign in to an app with Google.
  • Switch one off under Settings, AI clients, and we delete its login right away. The others keep working.
  • Click Disconnect and we delete the key right away, so every AI assistant loses access to that tool.
  • You can also revoke the key in the tool itself.
  • Our admin screens show your name, your email address and your support tickets. None of them shows an API key or data from your tools.

How long we keep what

Your API key
Until you click Disconnect or delete your account. Then we delete it right away.
Data from your tools
Not kept. It passes straight through to your AI assistant.
The login of an AI assistant
Valid for up to a year at a time. It ends right away when you switch the assistant off or delete your account.
Which assistant used which connection
Until you switch the assistant off or disconnect the connection.
Sign-in codes and links
15 minutes, and each one works once.
Payment notifications from Polar
30 days.
Your account
Until you delete it. That deletes your connections, your keys, the logins of your AI assistants and your support tickets right away.
After you delete your account
Your invoices stay with Polar, the emails you sent us stay in our support mailbox, and error reports stay with Sentry until it deletes them.

Who else is involved

These companies help us run MCP Hosted. Some of them are based in the United States. Your AI assistant and the tools you connect are not on this list: you choose them, and their own terms apply.

Cloudflare
The network in front of our server: DNS, HTTPS and protection against attacks. Every request passes through it.
DigitalOcean
Hosts our server and database, in a data centre in the EU.
Polar
Handles payments and licenses. It gets your name and email address, and the IP address and browser you check out with.
Resend
Sends your sign-in emails and passes support tickets on to our mailbox.
Namecheap Private Email
Hosts our support mailbox.
Sentry
Receives error reports, stored in its EU region in Germany.
Eyes
Website statistics: page views, clicks and completed payments.
Bunny Fonts
Serves the fonts of this website.
Google, GitHub
Only when you choose to sign in with them.

Found a security problem?

Tell us by email. We read every report.

[email protected]