Privacy Policy

• Website analytics. Page views are counted with Farwatch, a cookieless analytics service. For each page view it receives the page path, the referring page, your screen and window size, your browser language and how long the page stayed open, along with the IP address and user agent that every web request carries. It sets no cookies and does not run on the API or MCP server.
• Requests to the MCP server and API. To answer a request, the server processes what you send: for example, a 402 response to decode, requirements to match, or a URL to probe. That input is used only to produce the response and is not saved.
• Request logs. The hosting provider, Cloudflare, logs request details such as IP address, time, requested URL (including query parameters, so a URL passed to the probe endpoint appears there) and user agent. These logs are used for operation, debugging and abuse prevention.
• Rate limiting. The probe endpoint uses your IP address to apply a per-client request limit.
• Email. If you email support@402mcp.org, your address and message are received and used only to reply.

When you ask the hosted server to probe a URL, it makes one request to that URL from Cloudflare’s network. The site you name sees that request, not your IP address. The server never follows redirects, never pays, and refuses private and internal addresses.

The @402mcp/mcp package runs on your own computer. Decoding happens locally and is not sent anywhere. At startup it downloads the public registry from 402mcp.org, an ordinary request that is logged like any other; set MCP_402_OFFLINE=1 to skip it. Probes made through the package come from your machine.

Only to run, secure and improve the service: answering requests, counting page views, and investigating errors and abuse. Your inputs are not used to build profiles, to advertise, or to train AI models.

Data is shared only with the service providers that run the site: Cloudflare, for hosting and request logs, and Farwatch, for page-view analytics. Each processes data under its own privacy policy. Information may also be disclosed when required by law. It is not sold or shared for advertising.

There is no database of personal data. Request logs are kept by Cloudflare for a short period, at most seven days for the Worker’s own logs. Emails are kept only as long as needed to handle the request.

• The website works fully with analytics blocked.
• The npm package can run entirely offline.
• To ask about, correct or delete information relating to you, email support@402mcp.org.

The service is a developer reference and is not directed to children under 13.

Changes to this policy are published on this page with a new date. See also the Terms of Service.

support@402mcp.org