Smithery
Smithery · Agent platform · US · www.smithery.ai
services/smithery.yamlVendor data-handling terms
Smithery hosts and proxies MCP servers; tool calls and any credentials configured for hosted servers pass through it. The policy does not address training.
“Customer Content , including any files, documents, audio, videos, images, data, or communications you choose to input, upload, or transmit to our products and services, including any content you submit related to your servers.”
The policy gives no retention period beyond not keeping payment card data.
The policy names no hosting region.
Domains and endpoints
observed means seen in Unseen deployments; vendor-documented means listed by the vendor. Vendors do not publish complete lists.
| Host | Role | Source |
|---|---|---|
| smithery.ai | app | observed |
Assessment
Reasoning: A registry that hosts and proxies MCP servers. Agents connected through it send tool calls, and often API keys for the underlying services, via Smithery's infrastructure. The policy does not cover retention, region or training, and session-replay analytics are in use.
Flags: Tool calls and credentials pass through hosted servers · Retention and region not stated · Keystroke and session-replay analytics · Assessed 2026-09-16. The assessment is Unseen's; the terms above are the vendor's.
Changelog
- 2026-09-16Documented. Collection terms verified against the Smithery privacy policy; retention and region not stated.
- 2026-09-15Listed from the Unseen catalogue with observed domains.
Corrections
Pull request on GitHub, or the form below. Changes are reviewed and recorded in the changelog.