This policy covers the hosted autoyield service: the MCP endpoints at
autoyield-api.fly.dev / mcp.autoyield.org
(/mcp — full edition, and /research —
read-only edition), the web pages on autoyield.org, and the
npm package when you run it yourself.
What we collect
Tool inputs only. The arguments your AI passes to a tool —
a Solana wallet address (a public on-chain identifier), a ticker, an
amount. We do not read or collect your conversation, Claude's memory,
chat history or files; we only receive what a tool call contains.
Read-only research edition (/research). No
login and no account. Besides the tool inputs above, the only data is
your IP address, held in memory for rate limiting (one-minute
window), and standard request logs (see below).
Wallet-linked API key (full edition). When you connect via
OAuth or sign in at autoyield.org/account.html, you sign
a free, off-chain message in your wallet. We store your wallet
address, a SHA-256 hash of the issued API key (never the key itself),
a label (e.g. the name of the app you connected) and timestamps. No
email, name, phone number or password.
OAuth client registrations. The name and redirect URLs an
app (e.g. Claude) registers to connect. Pending authorizations and
one-time authorization codes live in memory for at most 10 and 5
minutes.
Unsigned transactions the full edition prepares are stored
for up to 24 hours so the sign page can show and rebuild them. Your
signed transaction passes through us only to be broadcast to Solana;
we keep its signature (a public on-chain identifier).
Security audit log. An append-only record of security-relevant
events: API keys issued or revoked, failed sign-ins, transactions
prepared and broadcast (wallet address, asset, amount, IP address,
time).
Anonymous usage counters. Per day: how many times each tool
or prompt was used, whether the call succeeded, how long it took, how
many connections were opened, and the name of the connecting client
software (e.g. "claude-ai", "cursor"). No wallet address, IP address,
arguments or results are recorded with them. Kept 90 days.
Request logs and error reports. Our host (Fly.io) logs
request paths, IP addresses and errors. Server errors are reported to
Sentry with cookies, headers, request bodies and query strings
removed.
What we do NOT collect
Private keys or seed phrases — you sign everything in your own
wallet; we never can.
Email addresses, names, phone numbers, passwords or other
personal identifiers.
Your conversations with your AI, or anything outside a tool
call's arguments.
Cookies (we set none) or third-party analytics/advertising
trackers.
How data is used
Only to run the service: answer tool calls, prepare transactions you
asked for, authenticate your connection, rate-limit abuse, and
investigate security incidents. We do not sell data, use it for
advertising, or build profiles.
Third parties
Solana RPC providers (Helius, public Solana endpoints) and
Jupiter receive wallet addresses and transaction data needed
to read balances, quote and build swaps. Broadcast transactions
become public on the Solana blockchain.
DefiLlama, Stooq and Yahoo Finance receive only public
market queries (pools, tickers) — never your wallet address.
ipapi.co — autoyield.org pages ask it for your country from
your browser, to show a notice to US visitors (the tokenized assets
are not offered to US persons). It sees your IP address.
Fly.io (hosting), Sentry (error reports) and
GitHub Pages (the website) process data as our service
providers.
Host request logs: up to 7 days, unless needed for a security
incident.
API key records: until you revoke them (you can revoke all keys
for your wallet at any time by signing a message); at most 10 per
wallet, oldest replaced first.
OAuth client registrations: until the client is removed or
replaced (oldest dropped beyond 5,000).
Security audit log: kept for security review; we delete the
entries for your wallet address on request.
Self-hosting
autoyield is open source under the MIT License. Running the npm
package yourself (npx -y @kaditang/agent-wallet-mcp) sends
nothing to us — only to the RPC and market-data APIs listed above.
Children
The Service is not directed to children under 18. Do not use it
if you are under 18.
Changes
Material changes are reflected in the "Last updated" date.