Documentation

Trust and help

Privacy and security

The connector reads and adds to your own Recallr, only after you sign in and allow it, and you can disconnect it any time.

What the assistant can and can't do#

It canIt can't
Search and read your savesDelete or change anything you saved
List your recent savesSee your chats, Buddy Mail, connected apps or account settings
Save a link or a note when you askSee anyone else's Recallr

Sign-in#

  • You sign in on Recallr's own page at mcp.recallr-ai.org, never inside the assistant. Your password goes to Recallr only.
  • The connection uses OAuth 2.1 with PKCE (S256), one-time authorization codes that expire after two minutes and are rejected if reused, and exact checks of the app's registered return address. The permission screen names the app and its address before you choose Allow.
  • Access tokens last at most an hour and are renewed with a refresh token that lasts up to 90 days. Deleting your Recallr account ends every connection.
  • Every token is sealed with AES-256-GCM so only Recallr's server can open it. The server keeps no table of connections; it stores only a short-lived marker that each authorization code was used.

Your data#

  • The server passes each request to Recallr's API as you and returns the answer. It does not keep copies of your saves.
  • It does not log tokens, emails, passwords or the addresses that carry authorization codes.
  • Each person has their own rate limits, so one busy connection can't slow down anyone else.
  • What the assistant does with the results is governed by that assistant's own privacy terms.

The community site#

Signing in to the forum or to write a review uses your Recallr account with a separate, encrypted, HttpOnly cookie. The forum stores your chosen display name and what you post, never your email. Reviews are stored by Recallr and show only the name you choose.

Disconnect#

Remove Recallr from your assistant's connector or MCP settings; that assistant then has no way to reach your Recallr. Deleting your Recallr account ends every connection.

Read Recallr's privacy policy and terms. Security questions: support@recallr-ai.org.

Something missing or wrong? Ask in the forum or write to support@recallr-ai.org.