A2CR Privacy

Current status: A2CR's hosted app, dashboard API, and HTTP MCP endpoint are retired. Normal public A2CR use is the local-only MCP package. Saved WorkBaton, WorkStash, and WorkThreads data stays on the user's machine.

Local Package Data

The public A2CR package stores workspace records in a local SQLite database on the user's computer. The normal setup does not require an A2CR account, API key, hosted base URL, hosted dashboard, remote MCP connector, or cloud sync path.

python -m pip install --upgrade a2cr-mcp

This Website

The a2cr.app website now serves documentation for the local-only package and retired-service guard responses. Basic request metadata may be processed by the hosting platform to serve pages, keep the site secure, and troubleshoot availability. Do not send WorkBaton or WorkStash content to the retired hosted HTTP MCP endpoint at https://a2cr.app/mcp.

What Not To Store

A2CR is not a secret manager. Do not store API keys, passwords, Authorization headers, cookies, private database URLs, local client keys, recovery codes, unnecessary personal data, raw full transcripts, long logs, or large source-code bodies in A2CR records.

Canonical Sources

Public repository: https://github.com/a2cr/a2cr
PyPI package: https://pypi.org/project/a2cr-mcp/
MCP Registry: io.github.a2cr/a2cr-mcp
Security policy: https://github.com/a2cr/a2cr/blob/main/SECURITY.md