Privacy

This instance is operated by the operator. MissingMCP is fully open source — the entire gateway is on GitHub, so you can audit exactly what it does, or self-host your own instance instead of trusting this one.

• Your sign-in identifier for the connected service (the account email).
• Encrypted credentials for the connected service — AES-256-GCM at rest. For WHOOP: read-only OAuth tokens issued by WHOOP (your WHOOP password is never entered here). For Garmin: session tokens (your password is used once to sign in and never stored).
• SHA-256 hashes of the gateway’s own access tokens — never the tokens themselves.
• Per-account tool-usage counters: tool name, call count, and last-used timestamp — never tool arguments or results.
• If you opt in on the home page: your email address (so we can tell you when a new connector launches) and any connector suggestion you send. Only if you choose to — and never used for anything else.

Your health, fitness or activity data. It passes through on demand between the connected service and your Claude client and is not written to disk. No ads, no third-party trackers, no cookies.

Data flows only between your Claude client and the connected service, and only when you ask Claude a question — connecting an account is your explicit consent for that flow. Nothing is sold or shared with any other party. Operational logs (hosted on Railway) record account email, tool names, and timings for monitoring — never token values, never your data.