--- title: "Query privacy - Trooth" description: "What Trooth keeps when you or an agent ask about a company through the MCP server, the public API and /ask, read from the code that runs each one." canonical_url: "https://trooth.co/docs/query-privacy" markdown_url: "https://trooth.co/docs/query-privacy.md" generated_from: "the rendered page, converted to Markdown when this was requested" agent_index: "https://trooth.co/llms.txt" --- # Query privacy What Trooth keeps when you, or an agent acting for you, ask about a company through the public MCP (Model Context Protocol) server, the public API (application programming interface) under /api/network, or /ask. Each line below is read from the code that runs that surface. ## MCP server Every call sends its arguments to Trooth: the company or domain, the token, the search words or the question. - **A daily count.** One row per day, tool, company or domain looked up, outcome and client label (a short name taken from the User-Agent header), with the number of calls and their total duration. For `trooth_verify` the token's id is counted only when a token matched. The count holds no IP address, no question text, no search words and no unmatched token. The same count is also written to Cloudflare Workers Analytics Engine. The code that writes the count sets no expiry for it. - **A policy decision, kept 30 days.** For each call: the tool, whether it was allowed and why, the policy version, the client's declared name and version when it sends one, the argument names, types and lengths (never their values), the answer's status and a SHA-256 digest of its text. No IP address and no user identifier are in it. Records older than 30 days are deleted. - **Your IP address** is used to rate-limit calls, held in memory for a one-minute window, and is written to no table and no count. ## Public API - **The lookup.** A read names the company in its URL, for example `/api/network/profile?q=acme.com`. The read endpoints write nothing about the lookup to Trooth's database. - **Your IP address** (for IPv6, its /64 prefix) is stored with a per-minute and a per-hour counter in Trooth's database to enforce the rate limit. A counter more than four windows old is deleted when the next request starts a new window for that route. - **Request logs.** The hosting platform's request logs carry the URL, and so the company looked up, and the IP address. The [Privacy Policy](https://trooth.co/privacy) sets application and error logs at 90 days. - **Trust Profile views.** A browser that opens a company's Trust Profile sends one view beacon, which stores a hash of the address, for de-duplication, and the referring page the browser reported. An API read sends no beacon. ## /ask /ask reads the record through the same code as the public API, so the same rate-limit counter (in a bucket of its own) and the same request logs apply. It writes the question nowhere, and it generates no text. ## Where this is set out The [Privacy Policy](https://trooth.co/privacy) and the [Retention Schedule](https://trooth.co/retention) are the documents that bind Trooth. The MCP server repeats its part in the resource `trooth://what-a-call-sends`. ## Structured data ```json { "@context": "https://schema.org", "@graph": [ { "@type": "Organization", "@id": "https://trooth.co/#org", "name": "Trooth", "legalName": "Trooth, LLC", "alternateName": [ "Trooth, LLC", "Trooth Network", "trooth.co" ], "url": "https://trooth.co", "logo": { "@type": "ImageObject", "@id": "https://trooth.co/#logo", "url": "https://trooth.co/brand/trooth-mark_black-on-white_1024.png", "contentUrl": "https://trooth.co/brand/trooth-mark_black-on-white_1024.png", "width": 1024, "height": 1024, "caption": "Trooth" }, "image": { "@id": "https://trooth.co/#logo" }, "description": "Trooth is an infrastructure and cybersecurity company providing Machine-Readable Trust. The Trooth Network keeps one current Machine-Readable Trust Profile per company, each fact sourced. Trooth signs what it witnessed; company declarations are unsigned.", "foundingDate": "2025-12-16", "address": { "@type": "PostalAddress", "streetAddress": "777 Brickell Ave, Suite 500, PMB 1174", "addressLocality": "Miami", "addressRegion": "FL", "postalCode": "33131", "addressCountry": "US" }, "contactPoint": { "@type": "ContactPoint", "contactType": "customer support", "email": "hello@trooth.co", "url": "https://trooth.co/contact" }, "sameAs": [ "https://x.com/Troothllc", "https://github.com/troothllc", "https://www.crunchbase.com/organization/trooth", "https://www.wikidata.org/wiki/Q141292994", "https://www.youtube.com/@Troothllc", "https://www.trustpilot.com/review/trooth.co" ] }, { "@type": "WebSite", "@id": "https://trooth.co/#website", "url": "https://trooth.co", "name": "Trooth", "alternateName": "Trooth Network", "inLanguage": "en", "publisher": { "@id": "https://trooth.co/#org" }, "potentialAction": { "@type": "SearchAction", "target": { "@type": "EntryPoint", "urlTemplate": "https://trooth.co/network?q={search_term_string}" }, "query-input": "required name=search_term_string" } }, { "@type": "ItemList", "@id": "https://trooth.co/#sitelinks", "name": "Trooth sitelinks", "itemListElement": [ { "@type": "SiteNavigationElement", "position": 1, "name": "Join Trooth for free", "url": "https://trooth.co/signup" }, { "@type": "SiteNavigationElement", "position": 2, "name": "Company, Trooth", "url": "https://trooth.co/network/company/trooth" }, { "@type": "SiteNavigationElement", "position": 3, "name": "Trooth Network", "url": "https://trooth.co/network" } ] } ] } ```