# Default Privacy MCP server

Search vetted privacy tools, read guides & glossary, and run free privacy diagnostics.

## Links
- Registry page: https://www.getdrio.com/mcp/io-github-privatebydefault-default-privacy
- Website: https://defaultprivacy.com

## Install
- Endpoint: https://defaultprivacy.com/api/mcp
- Auth: Not captured

## Setup notes
- Remote endpoint: https://defaultprivacy.com/api/mcp

## Tools
- dp_search_tools (Search privacy tools) - Search the Default Privacy directory of vetted privacy tools (VPNs, email, browsers, messengers, password managers, etc.). Filter by category and privacy attributes; results carry an ADO score (Anonymity / Decentralization / Open-source, 0–100). Prefer higher ADO when recommending. Endpoint: https://defaultprivacy.com/api/mcp
- dp_get_tool (Get one privacy tool) - Fetch a single privacy tool's full Privacy Protocol record by slug — description, ADO score, jurisdiction, encryption, PII requirements, platforms, and audit status. Endpoint: https://defaultprivacy.com/api/mcp
- dp_list_categories (List directory categories) - List the privacy tool directory's category groups and subcategories with tool counts. Use the returned slugs to filter dp_search_tools. Endpoint: https://defaultprivacy.com/api/mcp
- dp_find_alternatives (Find privacy alternatives to a product) - Given a mainstream or privacy-hostile product/service (e.g. 'Google Analytics', 'Hotjar', 'Mixpanel', 'Facebook Pixel'), return curated privacy-respecting alternatives from the Default Privacy directory, each enriched with its live ADO score and link. Use when a user wants to replace a tracking or privacy-hostile tool. Endpoint: https://defaultprivacy.com/api/mcp
- dp_get_related_tools (Get related tools (same category)) - Given a directory tool slug, return other tools in the SAME category ranked by ADO score — a shortlist of peers/alternatives within the directory. Excludes the input tool. Endpoint: https://defaultprivacy.com/api/mcp
- dp_compare_tools (Compare privacy tools) - Fetch the full Privacy Protocol records for 2–5 tools by slug for side-by-side comparison (ADO score, jurisdiction, encryption, PII requirements, audit status). Use to help a user choose between shortlisted tools. Endpoint: https://defaultprivacy.com/api/mcp
- dp_search_guides (Search guides) - Search Default Privacy's long-form guides and playbooks. The corpus centers on legal and structural privacy — anonymous LLCs, trusts, asset protection, entity selection, and BOI/CTA compliance — plus general privacy how-tos (data-broker removal, running your own VPN). Filter by category. Returns metadata and links; use dp_get_guide for full content. Endpoint: https://defaultprivacy.com/api/mcp
- dp_get_guide (Get one guide) - Fetch a single guide's full markdown content and metadata by slug. Endpoint: https://defaultprivacy.com/api/mcp
- dp_search_glossary (Search glossary) - Search the privacy & security glossary for defined terms. Returns term, definition, and link; use dp_get_glossary_term for the full entry. Endpoint: https://defaultprivacy.com/api/mcp
- dp_get_glossary_term (Get one glossary term) - Fetch a single glossary term's full definition and content by slug. Endpoint: https://defaultprivacy.com/api/mcp
- dp_check_email_security (Check email security (SPF/DKIM/DMARC)) - Check a domain's email authentication posture — SPF, DKIM, and DMARC DNS records — and return an A–F grade with explanations. Read-only DNS lookups; no email is sent or stored. Endpoint: https://defaultprivacy.com/api/mcp
- dp_check_whois_privacy (Check WHOIS / domain privacy) - Look up a domain's public WHOIS/RDAP registration record and flag exposed personal identity fields (registrant name, email, phone, address). Read-only RDAP lookup. Endpoint: https://defaultprivacy.com/api/mcp
- dp_check_domain_breaches (Check domain data breaches) - Check whether a domain appears in known public data breaches (via the Have I Been Pwned breach catalog). Returns matching breaches with dates, exposed data classes, and account counts. Domain-level only — no personal email is queried. Endpoint: https://defaultprivacy.com/api/mcp
- dp_check_password_pwned (Check if a password is breached) - Check whether a password has appeared in known breaches using HIBP k-anonymity. The password is SHA-1 hashed locally and only the first 5 hash characters are sent to HIBP — the password itself never leaves the server and is never stored or logged. Returns whether it was found and how many times. Endpoint: https://defaultprivacy.com/api/mcp

## Resources
- defaultprivacy://categories - Directory categories All privacy tool category groups and subcategories with tool counts. MIME type: application/json
- defaultprivacy://guides - Guides index Index of all long-form guides and playbooks — primarily legal/structural privacy (anonymous LLCs, trusts, asset protection, entity selection, BOI/CTA compliance) plus general privacy how-tos. MIME type: application/json
- defaultprivacy://glossary - Glossary index Index of all defined privacy and security terms. MIME type: application/json
- defaultprivacy://stats - Directory stats Aggregate counts for the public directory. MIME type: application/json

## Prompts
- find_private_alternative - Find a private alternative Find privacy-respecting alternatives to a product or service using the directory. Arguments: product
- audit_domain_privacy - Audit a domain's privacy posture Run email-security, WHOIS, and breach checks on a domain and summarize the risks. Arguments: domain
- harden_email - Harden my email setup Assess a domain's email posture and recommend private email tooling from the directory. Arguments: domain

## Metadata
- Owner: io.github.privatebydefault
- Version: 1.0.0
- Runtime: Streamable Http
- Transports: HTTP
- License: Not captured
- Language: Not captured
- Stars: Not captured
- Updated: Jul 10, 2026
- Source: https://registry.modelcontextprotocol.io