Privacy — UNPKG MCP
Last updated: November 7, 2026
This page describes what the UNPKG MCP server (https://mcp.unpkg.com) collects when you or your AI agent use it.
What we receive
Tool calls. When an MCP client calls one of our tools, we record the tool name, whether it succeeded, how long it took, the inputs sent to the tool, and the result returned. Depending on the tool, inputs can include:
- npm package names, version specifiers, and file paths
- Search queries
- UNPKG URLs and import maps you ask us to check
- The dependency list from a
package.jsonyou ask us to audit - Monthly page-view and bandwidth figures you provide for a migration estimate
- Domain names, for the Shield domain tools
Your MCP server only ever sees the tool calls your agent makes. We do not receive your conversations, prompts, or files except where you (or your agent) include them in a tool call.
Account identifiers (sign-in only). If you connect a Shield account, we also record your Shield user ID, organization ID, and the MCP client ID from your OAuth grant, so usage can be attributed to your account. Sign-in is handled by Shield; your password never passes through the MCP server.
Technical data. Like any web service, our infrastructure (Cloudflare) processes your IP address, user agent, and request timestamps to deliver the service and keep it reliable.
Website analytics. The landing page at mcp.unpkg.com uses Google Analytics, which may set cookies to measure page traffic. The MCP endpoint itself does not set cookies.
What we never collect
- Passwords
- OAuth access tokens, refresh tokens, authorization codes, or API keys — these are verified, never logged or stored by the MCP server
How we use this data
- Operate, debug, and secure the service
- Understand which tools and packages people use, so we can improve them
- Provide Shield account features, scoped to your own organization
Your choices
- Use the server anonymously: most tools work with no account, and anonymous calls are not tied to a Shield identity.
- Disconnect at any time from your MCP client or by revoking the grant in your Shield account.
Changes
We may update this page as the service evolves. Material changes will be noted by the date above.
Contact
UNPKG — support@unpkg.com