Data handling disclosed
What it reads, what it writes, what it sends and to whom, stated in the listing.
- Applies to
- agents, MCP servers, apps, templates
- Standard references
- none mapped
A finding here is not a failure
Software of any size carries something. A listing that raises findings on this check is still sold, with the findings published and their severity and reachability stated. A badge that only ever said pass would teach people to stop reading it.
Explainer · 2026-09-30
Data handling disclosed: what a listing should say about where your data goes
Every MCP server sends its tool results to a model, and many send data on to services of their own. A listing should say what it reads, what it writes, what it sends and to whom.
What this row checks
That the listing states what the software reads, what it writes, what it sends and to whom. Not a privacy policy in general terms: a statement about this software, specific enough to be wrong.
What good looks like
The best statements read in the hand run were short and specific. A memory server that says everything stays in one local SQLite file with no network access, and adds that the file is not encrypted. A bridge that says your API key is sent to the hosted service as a header and that attachments are read and encoded locally before the call is forwarded. A reader knows, from one paragraph, where their data can end up.
Why a keyword check is not enough
The automated version of this check looks for words such as data, network and privacy in the README. The hand run found it passing a listing on the word network in a list of Docker tools, and failing one whose README said exactly what it sends, in words the check did not look for. This row needs reading, and on this site a statement is judged by what it says.
In the glossary: Data exfiltration.
What this check has found
179 listings in the catalogue raise a finding here. Every one is still sold, with the finding printed on its page.
- Storybook MCP
no statement of what it reads, writes or sends (README.md)
- Pandacss MCP
no statement of what it reads, writes or sends (README.md)
- Server Everything
no statement of what it reads, writes or sends (README.md)
- Azure Devops MCP
no statement of what it reads, writes or sends (README.md)
- MCP Server Supabase
no SKILL.md, README or manifest to read a declaration from (.)
- Server Memory
no statement of what it reads, writes or sends (README.md)
- Hlims MCP
no statement of what it reads, writes or sends (README.md)
- Duckduckgo MCP Server
no statement of what it reads, writes or sends (README.md)
- Eslint MCP
no statement of what it reads, writes or sends (README.md)
- MCP Server Base
no statement of what it reads, writes or sends (README.md)
- Launchdarkly MCP Server
no statement of what it reads, writes or sends (README.md)
- Hono MCP Server Sse Transport
no statement of what it reads, writes or sends (README.md)
- Playwright MCP Server
no statement of what it reads, writes or sends (README.md)
- Paperclipai MCP Server
no statement of what it reads, writes or sends (README.md)
- MCP Server Docs
no statement of what it reads, writes or sends (README.md)
- Openapi MCP Generator
no statement of what it reads, writes or sends (README.md)
- MCP Datetime
no statement of what it reads, writes or sends (README.md)
- MCP Server Alipay
no statement of what it reads, writes or sends (README.md)
- Browsermcp MCP
no statement of what it reads, writes or sends (README.md)
- Kubernetes MCP Server Linux Amd64
no SKILL.md, README or manifest to read a declaration from (.)
- Kubb MCP
no statement of what it reads, writes or sends (README.md)
- Serper Search Scrape MCP Server
no statement of what it reads, writes or sends (README.md)
- Ios Simulator MCP
no statement of what it reads, writes or sends (README.md)
- Vite Plugin MCP
no statement of what it reads, writes or sends (README.md)
- Fe MCP Server
no statement of what it reads, writes or sends (README.md)
- React Webmcp
no statement of what it reads, writes or sends (README.md)
- Esa MCP Server
no statement of what it reads, writes or sends (README.md)
- 12306 MCP
no statement of what it reads, writes or sends (README.md)
- Qase MCP Server
no statement of what it reads, writes or sends (README.md)
- Openai Codex
no statement of what it reads, writes or sends (README.md)
- Am I Vibing
no statement of what it reads, writes or sends (README.md)
- Googleworkspace CLI
no SKILL.md, README or manifest to read a declaration from (.)
- Accio AI CLI
no statement of what it reads, writes or sends (README.md)
- Agent Eval
no SKILL.md, README or manifest to read a declaration from (.)
- Pi Mnemopi
no statement of what it reads, writes or sends (README.md)
- Pi Acp
no statement of what it reads, writes or sends (README.md)
- Kilocode CLI
no statement of what it reads, writes or sends (README.md)
- Collector
no statement of what it reads, writes or sends (README.md)
- Kimi Code
no statement of what it reads, writes or sends (README.md)
- AI Gateway
no statement of what it reads, writes or sends (README.md)
- Tokenx
no statement of what it reads, writes or sends (README.md)
- Node Llama Cpp
no statement of what it reads, writes or sends (README.md)
- Langfuse CLI
no statement of what it reads, writes or sends (README.md)
- Stably
no statement of what it reads, writes or sends (README.md)
- Vectra
no statement of what it reads, writes or sends (README.md)
- Tokscale
no SKILL.md, README or manifest to read a declaration from (.)
- Tokscale CLI
no SKILL.md, README or manifest to read a declaration from (.)
- Get Llms Txt
no statement of what it reads, writes or sends (README.md)
- Connector Claude Code
no SKILL.md, README or manifest to read a declaration from (.)
- Create Mastra
no statement of what it reads, writes or sends (README.md)
- MCP Echo Server
no statement of what it reads, writes or sends (README.md)
- Pulumi MCP Server
no statement of what it reads, writes or sends (README.md)
- Brains MCP
no statement of what it reads, writes or sends (README.md)
- MCP Server Sqlite Npx
no statement of what it reads, writes or sends (README.md)
- Excalidraw MCP
no statement of what it reads, writes or sends (README.md)
- MCP Server Linear
no statement of what it reads, writes or sends (README.md)
- Planu CLI
no statement of what it reads, writes or sends (README.md)
- Devtools MCP
no statement of what it reads, writes or sends (README.md)
- Cds MCP Server
no statement of what it reads, writes or sends (README.md)
- Search MCP Server
no statement of what it reads, writes or sends (README.md)
- Markdy MCP Server
no statement of what it reads, writes or sends (README.md)
- Daemon
no statement of what it reads, writes or sends (README.md)
- MCP Google Docs
no statement of what it reads, writes or sends (README.md)
- Mysql MCP
no statement of what it reads, writes or sends (README.md)
- MCP Server Mysql
no statement of what it reads, writes or sends (README.md)
- Donmai MCP Server
no statement of what it reads, writes or sends (README.md)
- Cloud Server
no statement of what it reads, writes or sends (README.md)
- Ggui AI MCP Server Core
no statement of what it reads, writes or sends (README.md)
- Target MCP
no statement of what it reads, writes or sends (README.md)
- Postgres MCP Hardened
no statement of what it reads, writes or sends (README.md)
- Sura AI MCP Server
no SKILL.md, README or manifest to read a declaration from (.)
- MCP Server Filesystem
no statement of what it reads, writes or sends (README.md)
- Integration MCP Proxy
no statement of what it reads, writes or sends (README.md)
- Creatrip MCP Server
no statement of what it reads, writes or sends (README.md)
- Redis MCP Server
no statement of what it reads, writes or sends (README.md)
- Jira MCP
Read by hand on 2026-09-30: Says API tokens are stored locally. Does not say that at every start it asks npm for a newer version and, if there is one, reinstalls itself globally without asking.
- Odyssey365 MCP Server
no statement of what it reads, writes or sends (README.md)
- Dsh Reef
no statement of what it reads, writes or sends (README.md)
- Notion MCP Server
no statement of what it reads, writes or sends (README.md)
- Gitlab MCP Server
no statement of what it reads, writes or sends (README.md)
- Astralkit MCP
no statement of what it reads, writes or sends (README.md)
- Slack MCP Server
no statement of what it reads, writes or sends (README.md)
- Rust MCP Filesystem
no statement of what it reads, writes or sends (README.md)
- O2n MCP Server
no statement of what it reads, writes or sends (README.md)
- MCP Server Aws
no SKILL.md, README or manifest to read a declaration from (.)
- MCP Server Clawhub
no statement of what it reads, writes or sends (README.md)
- Fvhub MCP
no statement of what it reads, writes or sends (README.md)
- MCP Server Notion
no statement of what it reads, writes or sends (README.md)
- Slog MCP
no statement of what it reads, writes or sends (README.md)
- Selenide MCP
no SKILL.md, README or manifest to read a declaration from (.)
- MCP Server Mysql
no statement of what it reads, writes or sends (README.md)
- Fugle MCP Server
no statement of what it reads, writes or sends (README.md)
- MCP Server Docker Npx
Read by hand on 2026-09-30: No statement of what the server reads or sends. The automated check passed on the words network and permissions, which here mean Docker networks and container permissions.
- Agentic Tasks
no statement of what it reads, writes or sends (README.md)
- Example MCP Server Sqlite
no statement of what it reads, writes or sends (README.md)
- Stele MCP
no statement of what it reads, writes or sends (README.md)
- Mykeepai MCP
no statement of what it reads, writes or sends (README.md)
- Memory
no statement of what it reads, writes or sends (README.md)
- Nousdb
no statement of what it reads, writes or sends (README.md)
- MCP Server Git
no statement of what it reads, writes or sends (README.md)
- MCP Server Time
no statement of what it reads, writes or sends (README.md)
- MCP Simple Pubmed
no statement of what it reads, writes or sends (README.md)
- MCP Proxy
no statement of what it reads, writes or sends (README.md)
- Baidu MCP Server
no statement of what it reads, writes or sends (README.md)
- Computer Control MCP
no statement of what it reads, writes or sends (README.md)
- Vectara MCP
no SKILL.md, README or manifest to read a declaration from (.)
- Awslabs Aws Location MCP Server
no statement of what it reads, writes or sends (README.md)
- Omni Fs MCP
no statement of what it reads, writes or sends (README.md)
- Aceflow MCP Server
no statement of what it reads, writes or sends (README.md)
- Mysql MCP Zag
no statement of what it reads, writes or sends (README.md)
- Time MCP Pypi
no statement of what it reads, writes or sends (README.md)
- Slack MCP
no statement of what it reads, writes or sends (README.md)
- MCP Server Trending
no statement of what it reads, writes or sends (README.md)
- Smart Webfetch MCP
no statement of what it reads, writes or sends (README.md)
- Keevor Mysql MCP Server
no statement of what it reads, writes or sends (README.md)
- Fetchv2 MCP Server
no statement of what it reads, writes or sends (README.md)
- Larkin MCP
no statement of what it reads, writes or sends (README.md)
- Skillport MCP
no SKILL.md, README or manifest to read a declaration from (.)
- Anam MCP
no statement of what it reads, writes or sends (README.md)
- Azure Updates MCP
no statement of what it reads, writes or sends (README.md)
- Db MCP Server
no statement of what it reads, writes or sends (README.md)
- Zenlink MCP
Read by hand on 2026-09-30: No statement of what it reads or sends. The automated check passed on a heading, "Network, cookies, state", which names a group of tools.
- Ui Ticket MCP
no statement of what it reads, writes or sends (README.md)
- Notion Full MCP
no statement of what it reads, writes or sends (README.md)
- Kontrol Freek MCP
no statement of what it reads, writes or sends (README.md)
- MCP Billing Gateway
no statement of what it reads, writes or sends (README.md)
- N0s1 MCP
no statement of what it reads, writes or sends (README.md)
- AI Vault MCP
no statement of what it reads, writes or sends (README.md)
- Addon MCP
no statement of what it reads, writes or sends (README.md)
- Snyk
no statement of what it reads, writes or sends (README.md)
- Sveltejs MCP
no statement of what it reads, writes or sends (README.md)
- Gk
no statement of what it reads, writes or sends (README.md)
- Auto Mobile
no statement of what it reads, writes or sends (README.md)
- Getbourdon MCP Server
no statement of what it reads, writes or sends (README.md)
- Yaver CLI
no statement of what it reads, writes or sends (hermesc/README.md)
- Fluttersdk MCP
no statement of what it reads, writes or sends (README.md)
- Trusty Squire MCP
no statement of what it reads, writes or sends (README.md)
- Tauri MCP Server
no statement of what it reads, writes or sends (README.md)
- Neat Is MCP
no statement of what it reads, writes or sends (README.md)
- Shipstatic MCP
no statement of what it reads, writes or sends (README.md)
- Kin MCP
no statement of what it reads, writes or sends (README.md)
- Sapiens MCP
no statement of what it reads, writes or sends (README.md)
- Time MCP
no statement of what it reads, writes or sends (README.md)
- Code Index MCP
no statement of what it reads, writes or sends (README.md)
- Chirpie MCP
no statement of what it reads, writes or sends (README.md)
- Nichedb
no statement of what it reads, writes or sends (README.md)
- Clipform MCP Server
no statement of what it reads, writes or sends (README.md)
- Codehealth MCP
no SKILL.md, README or manifest to read a declaration from (.)
- Ateam AI MCP
no statement of what it reads, writes or sends (README.md)
- Godot MCP Runtime
no statement of what it reads, writes or sends (README.md)
- Layers CLI
no statement of what it reads, writes or sends (README.md)
- Monacloud MCP
no statement of what it reads, writes or sends (README.md)
- Controlkeel
no statement of what it reads, writes or sends (README.md)
- MCP Server Code Runner
no statement of what it reads, writes or sends (README.md)
- Remem
no statement of what it reads, writes or sends (README.md)
- Obsidian Tc
no statement of what it reads, writes or sends (README.md)
- Mneme AI
no statement of what it reads, writes or sends (README.md)
- Provardx CLI
no statement of what it reads, writes or sends (README.md)
- Hypelens Agent Rail
no statement of what it reads, writes or sends (README.md)
- Cssprobe CLI
no statement of what it reads, writes or sends (AGENTS.md)
- Adeu MCP Server
no statement of what it reads, writes or sends (README.md)
- Houki Egov MCP
no statement of what it reads, writes or sends (README.md)
- Octofs
no statement of what it reads, writes or sends (README.md)
- Dryrun
no statement of what it reads, writes or sends (README.md)
- Archstone CLI
no statement of what it reads, writes or sends (README.md)
- Monnet MCP
no statement of what it reads, writes or sends (README.md)
- MPT BA: Certidão Negativa de Feitos
no statement of what it reads, writes or sends (README.md)
- AutoBrowser Approval Cloud
no statement of what it reads, writes or sends (README.md)
- CNIA (Improbidade Administrativa)
no statement of what it reads, writes or sends (README.md)
- Prefeitura SP Jundiaí: Certidão Tributária de IPTU
no statement of what it reads, writes or sends (README.md)
- AI School by Lilly Tech Systems
no statement of what it reads, writes or sends (README.md)
- Antigravityrunledger MCP
no statement of what it reads, writes or sends (README.md)
- Captchaflow
no statement of what it reads, writes or sends (README.md)
- Deliverability Doctor
no statement of what it reads, writes or sends (README.md)
- LinkedNav
no statement of what it reads, writes or sends (README.md)
- Silent Directive Tools
no statement of what it reads, writes or sends (README.md)
- Motecloud Memory
no statement of what it reads, writes or sends (README.md)
- Hiring
no statement of what it reads, writes or sends (README.md)
- Ignav Flights
no statement of what it reads, writes or sends (README.md)
Every listing in the catalogue shows its result on this check, with the findings summarised in public and the full report to whoever bought it. Open the catalogue.