Security & Transparency
At MCPHub, we believe transparency is the most important factor for security. Instead of hiding behind compliance badges, we give you complete visibility into how your data is being used.
Transparency-First Security
🔍 Complete Request Transparency
The cornerstone of our security approach is giving you complete visibility into every interaction with MCPHub services.
Request History Logging
📊 MCP Request Monitoring
- • Every MCP server interaction logged
- • Complete request parameters visible
- • Full response data accessible
- • Response times and status tracking
- • Server-level usage analytics
🤖 LLM Request Tracking
- • All AI model interactions logged
- • Token usage and cost transparency
- • Model selection and parameters
- • Session and conversation tracking
- • Performance metrics available
✅ Access Your Request History
View detailed logs of all your interactions with MCPHub services. See exactly what data was sent, what responses were received, and how your credits were used.
View Request History🔐 Authentication & Access Control
Secure Authentication
- OAuth 2.0 Integration - Secure authentication via Google and GitHub
- No password storage - We never store or handle your passwords
- JWT tokens - Secure, stateless authentication for API access
- Session management - Automatic session expiration and renewal
API Key Security
🔑 Key Types Available
- • Permanent Keys - For production LLM applications
- • Transient Keys - 12-hour expiry for testing
- • Scoped Permissions - Limited to specific functions
- • Usage Tracking - Monitor every API call
🛡️ Key Management
- • Instant Revocation - Delete compromised keys immediately
- • Usage Analytics - Detect unusual activity patterns
- • Copy Protection - Secure key display and copying
- • Audit Trail - Complete history of key usage
🌐 Data Protection & Privacy
Encryption Standards
🔒 Data in Transit
- • TLS 1.3 encryption for all connections
- • HTTPS-only communication
- • Certificate pinning for API endpoints
- • End-to-end encryption for sensitive data
💾 Data at Rest
- • AES-256 encryption for stored data
- • Encrypted database storage
- • Secure API key storage
- • Regular security audits
Privacy Principles
- Minimal data collection - We only collect what's necessary for service operation
- User-controlled data - You own your data and can delete it anytime
- No conversation mining - We don't analyze or store your MCP interactions for training
- Transparent logging - All data usage is visible in your request history
📈 Our Transparency Approach
Why We Choose Transparency Over Compliance Badges
Traditional approach: Companies display SOC 2, GDPR, ISO 27001 badges to signal trustworthiness, but these certifications often obscure what actually happens with your data.
Our approach: Instead of hiding behind compliance frameworks, we give you direct visibility into every interaction with our services through comprehensive request logging and monitoring.
What this means for you: You can see exactly what data is sent to which services, what responses you receive, and how your credits are being used - complete transparency.
🔍 What You Can Monitor
- • Request Parameters - See exactly what data is sent
- • Response Data - View complete responses received
- • Credit Usage - Track how credits are consumed
- • Performance Metrics - Response times and success rates
- • Server Interactions - Which MCP servers were accessed
- • Error Details - Complete error information when issues occur
🛠️ Tools for Transparency
- • Real-time Logging - Immediate visibility into all requests
- • Exportable Data - Copy request/response data to clipboard
- • Filterable History - Search and filter by date, server, status
- • Detailed Analytics - Usage patterns and trends
- • API Access - Programmatic access to your own logs
- • No Hidden Processes - Every interaction is logged and visible
🏗️ Infrastructure Security
Secure by Design
🌐 Network Security
- • WAF (Web Application Firewall) protection
- • DDoS mitigation and rate limiting
- • VPC isolation for sensitive operations
- • Regular security monitoring and alerting
☁️ Cloud Infrastructure
- • Enterprise-grade cloud hosting
- • Multi-region deployment for reliability
- • Automated backup and disaster recovery
- • High availability architecture
MCP Server Isolation
Sandboxed Environment
All MCP servers run in isolated containers with limited permissions. They cannot access your personal data or other servers' information without explicit authorization. Every interaction is logged and visible to you.
📊 How Our Transparency Works
Every Request is Logged
When you interact with MCP servers or use LLM services, every request is automatically logged with complete details including parameters, responses, timing, and credit usage.
Real-Time Visibility
Access your request history in real-time through the Settings → Request History page. See what's happening with your data as it happens.
Exportable Data
Copy any request or response data to your clipboard for analysis, debugging, or record-keeping. Your data is always accessible to you.
No Hidden Processes
Unlike services that hide behind compliance frameworks, we show you exactly what happens with your data. No black boxes, no hidden processes.
🔒 Data Protection Practices
What We Protect
- API Keys - Encrypted storage with secure access controls
- Authentication Tokens - Short-lived, automatically rotating tokens
- Request Logs - Encrypted storage with user-controlled access
- Personal Information - Minimal collection, maximum protection
What We Don't Do
❌ We Never:
- • Store your MCP server responses for training or analysis
- • Share your data with third parties without explicit consent
- • Use your conversations to improve AI models
- • Hide what data we collect or how we use it
- • Require you to trust us blindly - everything is transparent
🚨 Security Incident Response
In the unlikely event of a security incident, our transparency-first approach extends to our response:
- Immediate notification - Users are notified promptly of any security events
- Complete disclosure - Full details about what happened and what data was affected
- Transparent timeline - Clear timeline of events and our response actions
- Preventive measures - Public disclosure of steps taken to prevent future incidents
🤝 Your Security Controls
🎛️ What You Control
- • API Key Creation - Choose permanent or transient keys
- • Server Selection - Choose which MCP servers to trust
- • Data Retention - Request deletion of your data anytime
- • Access Monitoring - View all access to your account
- • Service Usage - Enable/disable specific features
📋 Security Tools Available
- • Request History - Complete interaction logs
- • API Key Management - Create and manage access keys
- • Usage Monitoring - Track credit consumption
- • Account Settings - Control your profile and preferences
- • Data Export - Download your complete data
💬 Questions About Security?
We're Here to Help
Have questions about our security practices? Want to understand how your data is handled? We believe in complete transparency and are happy to answer any security-related questions.