Default Privacy
Sourced privacy answers: how private an app is, tool picks, app swaps, de-Googling, breaches.
Hosted MCP Server
npx add-mcp 'https://mcp.defaultprivacy.com'Installs into Claude Code, Codex, Cursor and more
Documentation
File DP · AIMCP 1.10.5No accountNo key
Use Default Privacy in your AI
Ask your assistant about privacy tools and it answers from this directory: DP picks first, then A to Z, with a link back to each listing. Free, no account, no key. How we choose picks is on How we pick.
CONNECT YOUR AI
https://mcp.defaultprivacy.com
No account, no key. The install links only add this web address, with no program to run on your computer. What we log.
Add it to your app
- Claude Customize → Connectors → + Add → Add custom connector, then paste the address. Free, Pro and Max plans; on Team and Enterprise an owner or admin adds it first. The free plan allows one custom connector. Source
- ChatGPT Turn on developer mode in Settings → Apps → Advanced settings, then go to chatgpt.com/plugins, choose + and Add custom MCP server. On the web, in developer mode, on Pro, Business, Enterprise and Edu. On Business only admins can use it. Source 1 Source 2
- Gemini On gemini.google.com: Settings → Connected Apps → Add a custom app. US only, 18 or over, a personal Google account, and Keep Activity must be on, which saves your Gemini chats to your account (18 months by default) and lets Google use them to train its AI, with human reviewers. Source 1 Source 2
- Grok Go to grok.com/connectors, choose New Connector, then Custom. On Grok Business and Enterprise, a team admin sets up connectors first. Source
- Perplexity Account settings → Connectors → + Custom connector → Remote. In an Enterprise organization, members can add one only if an admin turns it on. Source
- Mistral Connectors → + Add Connector → Custom MCP Connector. The name can't have spaces, so use DefaultPrivacy. On Free, Pro and Student plans you are the admin, so you can add it yourself. Source
Microsoft's Copilot app connects only to the services Microsoft lists (OneDrive, Outlook.com, Google Drive and Gmail), and its help page shows no way to add your own server, so it can't connect to us yet (Microsoft).
Editors and tools
Anything that accepts a remote MCP server address works the same way:
Cursor (~/.cursor/mcp.json)
{ "mcpServers": { "default-privacy": { "url": "https://mcp.defaultprivacy.com" } } }
VS Code (.vscode/mcp.json)
{ "servers": { "default-privacy": { "type": "http", "url": "https://mcp.defaultprivacy.com" } } }
Browsers with WebMCP switched on, in Chrome or Edge for now, can use the same tools straight from this site.
What to ask
- I'm new to privacy. Where do I start?
- What should I replace WhatsApp with, and what changes when I switch?
- A VPN with a no-logs policy that has a clear jurisdiction?
- Compare Signal and SimpleX.
- Does example.com have SPF, DKIM and DMARC set up?
What we see
Your assistant decides what to send us. Our tools ask only for what they need, like a product name, a domain, or a situation picked from a fixed list, and we don't store it. We keep daily counts of each tool and request type, of which guide, stack or glossary entry is opened, of which kind of app connects (Claude, Cursor and the like; any other name counts as "other"), of which version of the MCP protocol each request uses, of which response formats a request says it accepts, and of which broad kind of software sends a request (browser-like, script, self-declared bot, an AI company's app such as Claude or ChatGPT, or other, never the raw text), and of how many connections and tool calls each of those kinds makes. We also keep a daily total per endpoint of requests, errors and average speed, with no lookup and no IP. Your IP is held in memory for up to a day to enforce rate limits, and our host, Vercel, keeps its own request logs. The domain tools look the domain up in public DNS, its registry's records, and Have I Been Pwned's public breach list (we download the whole list, so the domain isn't sent to them). If you ask us to check an MCP server we don't list, we look its name up in the official MCP registry, which sees that name and our server's address, not yours. When you ask how private a product is, the terms grade comes from ToS;DR (CC BY-SA 3.0): we copy their reviews by hand (latest copy: 2026-10-21), so they never see what anyone asks.
If you add us through Smithery, your requests pass through Smithery's gateway, so Smithery sees them too. That gateway shuts down on October 31, 2026 and the connection stops working then. Connect to https://mcp.defaultprivacy.com directly instead.
You don't have to take our word for it: the server's code is open source on GitHub.
Never type a password into a chat. To check one, use the password checker, which checks it in your browser.