Privacy policy

Effective 2026-10-28

1. Who we are

MCP Station (mcpstation.net) is operated by Protocol Holdings Co., Ltd.. Contact for anything in this policy: report@mcpstation.net.

2. What we collect

Website. Pages are static. We use no cookies, no analytics and no third-party scripts. Our hosting provider (Google Firebase Hosting) handles requests to deliver the pages.

Machine API and MCP server (/api/, /mcp). For each request we record: a pseudonymous ID made with a secret key from the network address and client name; a pseudonymous ID for the network range; the first word of the user-agent; the client name an MCP client sends when it connects (up to 40 characters); the path or tool called; the registry name of a server that was looked up; the response status and size; technical routing flags (for example whether the request came through our hosting provider); and, for searches, the number of results, the number of search words and which filters were used.

We do not store your IP address, the full user-agent, search words, the server names you send to check_overlap or get_changes, or any other request text. Your network address is held in memory only for rate limiting and is not written to storage. We do not receive or ask for your conversation with an AI assistant; we see only the parameters of each request.

Email. If you email us (for example an owner request or a report), we keep the message to answer it and to keep a record of corrections and removals.

3. How we use it

To count usage, apply rate limits, protect the service, and publish per-server lookup totals for the last 30 days on server pages. We do not sell data, show advertising, or build profiles of users.

4. Sharing

We do not sell or share this data with third parties. It is processed by Google Cloud (hosting, compute, storage and logging) as our service provider. Only totals are published.

5. Retention

• Request records (pseudonymous, as listed above): 30 days.
• Daily per-server lookup records with pseudonymous network-range IDs: 90 days; after that only the daily totals are kept.
• The list of pseudonymous client IDs used to count new and returning clients: an ID not seen for 90 days is deleted.
• Daily usage summaries (counts only, no IDs): kept.
• Emails: as long as needed to answer and keep the record of corrections and removals.

6. Your choices

You can use the website and the API without an account. To ask a question about your data, or for a correction or deletion, email report@mcpstation.net.

7. Changes

We post changes on this page with a new effective date.