Inquiry About Data Privacy Controls for Remote MCP Server

[klakshmikantha]

Hi,

Could you please confirm the data privacy controls in place when using the remote version of the MCP server? Specifically, if a Personal Access Token (PAT) is used, how do you ensure it is handled properly and discarded after use?

I appreciate your assistance with this.

Thanks,
Kiran

[tonytrg]

https://github.com/github/github-mcp-server/blob/main/docs/policies-and-governance.md
https://github.com/github/github-mcp-server/blob/main/docs/host-integration.md

We generally recommend OAuth where possible and we do not store any tokens. They are passed for single requests.