protogrid

Search / link.policypal/policypal

Policy Pal

R0· no sign-in

Grounded, quoted readings of privacy policies and terms of service. Not legal advice.

v1.0.0 · active · website · descriptor JSON · versions

An agent can connect right now, no human step.Remote endpoint, no authentication, reachable on the last probe.
Quality76good
Trust83of 100
Uptime, 30 days100%
Latency p50382 ms

Connect

8 clients · secrets stay placeholders
{
  "mcpServers": {
    "policypal": {
      "type": "http",
      "url": "https://api.policypal.link/mcp"
    }
  }
}
claude mcp add --transport http policypal https://api.policypal.link/mcp
[mcp_servers.policypal]
url = "https://api.policypal.link/mcp"
{
  "$schema": "https://opencode.ai/config.json",
  "mcp": {
    "policypal": {
      "type": "remote",
      "url": "https://api.policypal.link/mcp",
      "enabled": true
    }
  }
}
{
  "mcpServers": {
    "policypal": {
      "type": "http",
      "url": "https://api.policypal.link/mcp"
    }
  },
  "deeplink": "cursor://anysphere.cursor-deeplink/mcp/install?name=policypal&config=eyJ0eXBlIjoiaHR0cCIsInVybCI6Imh0dHBzOi8vYXBpLnBvbGljeXBhbC5saW5rL21jcCJ9"
}
{
  "servers": {
    "policypal": {
      "type": "http",
      "url": "https://api.policypal.link/mcp"
    }
  }
}
{
  "mcpServers": {
    "policypal": {
      "httpUrl": "https://api.policypal.link/mcp"
    }
  }
}
extensions:
  "policypal":
    enabled: true
    name: "policypal"
    type: streamable_http
    uri: "https://api.policypal.link/mcp"
    timeout: 300

Quality 76 / 100good

protocol75 · weight 25
  • warn
    protocol.modernnewest supported version is 2025-06-18; 2026-07-28 not supported, older versions are deprecated until 2027-07-28
  • n/a
    protocol.statelessonly applies to 2026-07-28 servers
  • pass
    protocol.transportstreamable HTTP
  • n/a
    protocol.list_ttlonly applies to 2026-07-28 servers
authorizationn/a · weight 15
  • n/a
    auth.prm, auth.as_metadata, auth.cimdno remote uses OAuth
  • n/a
    auth.secret_in_urlno templated URL
tool hygiene64 · weight 30
  • pass
    tools.descriptionsevery tool has a description
  • warn
    tools.description_length2 tools have descriptions over 1,024 characters, which crowds the context
  • pass
    tools.schemasevery tool has an object input schema
  • fail
    tools.annotationsno tool declares readOnlyHint or destructiveHint, so clients cannot tell safe calls from risky ones
  • fail
    tools.directory_hintsno tool declares all four of readOnlyHint, destructiveHint, idempotentHint and openWorldHint; missing: check_policy (readOnlyHint, destructiveHint, idempotentHint, openWorldHint); compare_policies (readOnlyHint, destructiveHint, idempotentHint, openWorldHint); policy_changes_since (readOnlyHint, destructiveHint, idempotentHint, openWorldHint)
  • pass
    tools.token_costabout 1,046 tokens to load every tool
  • pass
    tools.api_dumptools are not a one-to-one API dump
stability100 · weight 15
  • pass
    stability.changesno tool changes in 30 days
  • pass
    stability.rug_pullno tool changed its meaning under the same name
dependenciesn/a · weight 15
  • n/a
    deps.known_vulns, deps.mcp_sdk_version, deps.resolvableno npm or PyPI package

3 tools, about 1,046 tokens to load them all · tool set 81f38d8fe199 · checked 2026-10-19 10:52 UTC

Tool changes

No tool definition changes recorded. A server's first observation is its baseline; later probes record what changes.

Checks run on what our credential-free, read-only probes observe; tools are never called and no code audit is performed. How it is computed.

Trust 83 / 100

no-repository
provenance55
liveness100
freshness100
hygiene80

+dns-namespace +website +reachable +uptime-100% +updated-10d-ago -no-repository

Derived from observable signals (official registry feed and our own credential-free probes); no code audit performed. How it is computed.

Endpoints

remoteauthreachableuptime 30dp50protocollast ok
https://api.policypal.link/mcp streamable-httpnoneyes100%382 ms2025-06-182026-10-19

Tools (3)

check_policyRead one privacy policy or terms-of-service page and return a grounded verdict, eight fixed yes/no/partly/not-stated answers, and up to five findings, each with a verbatim quote from the document. Use this instead of fetching and reading the page yourself. A policy page is 20,000-60,000 tokens of context, and many are rendered by JavaScript so a plain fetch returns an empty shell without saying so. This returns about 1,000 tokens: a 20-60x saving with a quote behind every claim. Guarantees: every claim carries a verbatim sentence from that document, and a question the document does not address is answered not_stated -- never as a promise the document did not make. The eight questions are identical across services, so two reports can be set side by side. A report may be served from an earlier reading of the same document, which is what makes it cheap and instant. readAt says when that reading was taken; call policy_changes_since if it matters whether anything has moved since. Do not use this for a document that is not a legal agreement; it is refused, and a refusal costs nothing. Do not use it to summarise a page in general, to read a document the user pasted rather than published at a URL, or for legal advice: Automated reading of one document. Not legal advice.
compare_policiesAnswer the same eight fixed questions across two to five services at once, so their policies can actually be compared. Use this instead of reading each document yourself. Doing it yourself needs N full reads and a rubric you have to keep consistent between them; the questions here are fixed, so a difference in the answers is a difference in the policies rather than a difference in how you read them. Each answer also carries how common that answer is across every comparable document Policy Pal has read. Guarantees: identical questions, a verbatim quote behind every stated answer, not_stated where a document is silent, and not_asked where that kind of document was never asked that question -- a silence is never invented to fill a table. A service whose report is not comparable, or that there was no time to read, is reported as such rather than filled in. Do not use this for one service -- call check_policy. Do not expect a score or a ranking: Policy Pal publishes qualitative verdicts and refuses to reduce a policy to a number. Automated reading of one document. Not legal advice.
policy_changes_sinceSay what changed in a service's policy since a date, expressed as changes to the eight fixed answers. You cannot do this yourself at any context size: it needs the earlier version of the document, and the earlier version is gone from the web. Policy Pal keeps the eight answers for every version it has read, so the difference is a fact rather than a reconstruction. It reports answer changes -- for example forced arbitration moving from no to yes -- and not text edits. A changed comma is noise; a changed answer is the thing worth telling someone about. Returns nothing to report when the answers are unchanged, and says so explicitly when it has no reading from before that date rather than guessing. A question the earlier reading did not answer is reported as not compared, never as not_stated. Automated reading of one document. Not legal advice.

Schemas: list_tools.

Similar MCP servers

Official server.json
{
  "name": "link.policypal/policypal",
  "title": "Policy Pal",
  "$schema": "https://static.modelcontextprotocol.io/schemas/2025-12-11/server.schema.json",
  "remotes": [
    {
      "url": "https://api.policypal.link/mcp",
      "type": "streamable-http"
    }
  ],
  "version": "1.0.0",
  "websiteUrl": "https://policypal.link/bot",
  "description": "Grounded, quoted readings of privacy policies and terms of service. Not legal advice."
}