All servers · Bundle · Source
Last updated 8 September 2026. This describes what the software does, checked against the source it is generated from. The code is public, so every claim here can be verified in https://github.com/theluckystrike/mcp-servers.
Nothing leaves it. The stdio servers read and write only under your own data directory,
${XDG_DATA_HOME:-~/.local/share}/mcp-servers/<server>/. They make no network calls in
normal use, send no telemetry, and have no account. A Pro licence key is verified offline with an
Ed25519 signature, so activating one contacts nothing. The two exceptions are a server whose whole
job is to fetch something you asked for, such as exchange rates or a product page, and those fetch
only what the call names.
The hosted endpoints at mcp.zovo.one/mcp/<server> hold data, because they have to.
What is kept, and for how long:
| What | Why | Kept for |
|---|---|---|
An anonymous token, anon_<32 hex> | Separates your data from another caller's. No name, no email, no account. | 30 days, refreshed on each use |
| The documents your calls create, such as invoices or timesheets | They are the point of the server | Deleted 35 days after the last touch |
| A download link for a file a tool produced | To hand you the PDF or CSV | 1 hour |
| Rate-limit counters | To keep one caller from exhausting the endpoint | 2 hours |
Anyone holding your token can read your data, so treat the token as the secret it is. A shared cache of European Central Bank reference rates is read-only and common to everyone; nothing about you is written into it.
Payment is taken by Stripe. The card never touches this site; the checkout page is Stripe's own.
After a successful payment this site stores one record against the Stripe session id: the licence key
it issued, the product, and the email address Stripe collected for the receipt. That email is kept so a
buyer who loses the key can recover it at /recover. Nothing is emailed from here, and the
address is not used for anything else. The licence key itself can carry a twelve character hash prefix
derived from the email; it does not contain the address.
This site runs on Cloudflare, which logs requests as any web host does. This site additionally counts clicks on upgrade links, by source label only, to tell a stalled funnel from an unread message. That count carries no identifier of any kind and cannot be tied to a person.
For a hosted endpoint, stop using the token and everything under it is deleted after 35 days; there is nothing to ask for. For a purchase record, or anything else, open an issue at https://github.com/theluckystrike/mcp-servers/issues and say which Stripe session id it concerns. That is the contact route for this project and it is read. There is no support mailbox, and this page will not pretend otherwise.
It is a description of behaviour written by the person who wrote the code, not legal advice, and not a contract. Where it and the source disagree, the source is right and this page is a bug.