Koskamo

AI Vendor Data-Trust Index MCP

A community-driven MCP server providing a source-cited comparison of how 11 AI vendors handle user data, including training policies, retention, and opt-out options. It offers tools to retrieve vendor trust headlines, compare specific fields across vendors, and access full cited records via a free or paid API.

Endpoint and access

No sign-in to connect and list tools. Individual tools may still need a vendor account, credentials, or permissions; check the documented prerequisites.

AI Vendor Data-Trust Index MCP logo, by Oscar E. LópezCommunity listingStreamable HTTPNo sign-inEndpoint checked 2026-11-06Published by Oscar E. López
MCP endpoint (Streamable HTTP)
https://trust.oscar-lopez.com/mcp
Vendor documentation

What its tools do

3 tools, grouped by the hints the server advertises. Hints are self-declared, not verified behavior.

3 of 3 have a description · 0 of 3 declare behavior hints · 2 of 3 with parameters document them all

Checks and signals

Each line is separate evidence, not a trust score.

  • Passed Endpoint answered the live check ·
  • Availability 1 of 1 checks passed in 30 days

What you can do with it

  • Check if a specific AI vendor trains on user data
  • Compare data retention policies across multiple AI vendors
  • Retrieve verbatim quotes from vendor policies regarding data usage
  • Access bulk export of AI vendor data trust records

Source and maintenance

Community listingRegistry 0.1.0
Maintenance checked

Protocol and capabilities

Server
ai-vendor-data-trust-index 0.0.1
MCP protocol negotiated in check
2024-11-05
Tools
3 advertised
Resources
Not advertised
Resource templates
Not advertised
Prompts
Not advertised
Server-advertised capabilities
{
  "tools": {}
}

Tools

3 advertised

get_ai_vendor_trust_headline
Advertised by the server during the last successful anonymous check.

FREE. Plain-language, source-cited verdict on how an AI vendor handles your data (trains-on-data, zero-retention, opt-out).

get_ai_vendor_trust_headline input schema
{
  "type": "object",
  "required": [
    "vendor"
  ],
  "properties": {
    "vendor": {
      "type": "string",
      "description": "vendor id, e.g. 'openai-api', 'anthropic-api'"
    }
  }
}
get_ai_vendor_trust_compare
Advertised by the server during the last successful anonymous check.

FREE. Compare one data-trust field (default trains_on_your_data) across all tracked vendors, with citations.

get_ai_vendor_trust_compare input schema
{
  "type": "object",
  "properties": {
    "field": {
      "type": "string",
      "description": "field key, e.g. 'trains_on_your_data'"
    }
  }
}
get_ai_vendor_trust
Advertised by the server during the last successful anonymous check.

PAID (x402). Full source-cited data-trust record for one vendor: every field, quote, source URL, confidence, date.

get_ai_vendor_trust input schema
{
  "type": "object",
  "required": [
    "vendor"
  ],
  "properties": {
    "vendor": {
      "type": "string"
    }
  }
}

Prompts

Not advertised

No prompt definitions available.

Resources

Not advertised

No resource definitions available.

30-day availability

Aggregated from read-only remote checks; this is not a tool-execution or security guarantee.

Successful checks
1 of 1 (100%)
Average latency
423 ms
95th percentile latency
423 ms

Maintenance history

Public check and source-refresh events. Editorial and ownership records remain private.

  • · probe · passed · 423 ms · metadata changed · 3 tool(s)

Connect from your client

Each snippet registers the same endpoint; pick the client you use.

This server is operated by the named third party. Listing and endpoint checks are not an endorsement or a security audit. Review the operator's permissions, terms, and data handling before connecting. How listings are checked and corrected.

Claude Code

Run this once in a terminal. It registers the remote server. Use --scope project to write .mcp.json for the repo.
Claude Code configuration
claude mcp add --transport http ai-vendor-data-trust-index-mcp https://trust.oscar-lopez.com/mcp

Codex

Run this once. Codex stores MCP servers in ~/.codex/config.toml (or .codex/config.toml in a trusted project).
Codex configuration
codex mcp add ai-vendor-data-trust-index-mcp --url https://trust.oscar-lopez.com/mcp

Cursor

Merge this server into .cursor/mcp.json in your project, then enable ai-vendor-data-trust-index-mcp in your MCP settings.
Cursor configuration
{
  "mcpServers": {
    "ai-vendor-data-trust-index-mcp": {
      "url": "https://trust.oscar-lopez.com/mcp"
    }
  }
}

Cline

Merge this into cline_mcp_settings.json (Cline → MCP Servers → Configure).
Cline configuration
{
  "mcpServers": {
    "ai-vendor-data-trust-index-mcp": {
      "type": "streamableHttp",
      "url": "https://trust.oscar-lopez.com/mcp",
      "disabled": false
    }
  }
}

VS Code

Merge this server into .vscode/mcp.json. Use MCP: List Servers to start ai-vendor-data-trust-index-mcp and inspect its tools.
VS Code configuration
{
  "servers": {
    "ai-vendor-data-trust-index-mcp": {
      "type": "http",
      "url": "https://trust.oscar-lopez.com/mcp"
    }
  }
}

Gemini CLI

Run this once. It writes .gemini/settings.json in the current project; pass --scope user for ~/.gemini/settings.json.
Gemini CLI configuration
gemini mcp add --transport http ai-vendor-data-trust-index-mcp https://trust.oscar-lopez.com/mcp

Claude Desktop

Open Claude Settings > Connectors > Add custom connector, enter this server URL and enable it for the conversation. This is a manual remote-connector handoff, not a desktop JSON configuration.
Claude Desktop configuration
https://trust.oscar-lopez.com/mcp

Windsurf

Merge this into ~/.codeium/windsurf/mcp_config.json, then refresh MCP in Cascade. Windsurf remote servers use serverUrl, not url.
Windsurf configuration
{
  "mcpServers": {
    "ai-vendor-data-trust-index-mcp": {
      "serverUrl": "https://trust.oscar-lopez.com/mcp"
    }
  }
}

Let your agent find its tools

Find servers like AI Vendor Data-Trust Index MCP from your agent. Add Koskamo once to search the index for endpoints, access requirements, and client setup. Public discovery needs no key.