What we keep: almost nothing.

This page says what Fivebar's MCP server, website, Fivebar Wallet and skills collect, keep and share, as they work today. When that changes, this page changes first.

The MCP server

When an agent calls https://fivebar.xyz/mcp, the server uses what's in the call (a tool name and its arguments, such as a token address, an amount or a wallet address) to answer it, and then keeps none of it. In detail:

• Rate limit. The caller's IP address is held in memory to allow 60 calls a minute, and dropped when that instance of the server restarts. It isn't written anywhere.
• The public usage counter on the MCP page stores calls per tool per hour and per day, and, to count distinct callers, a one-way salted hash of the caller's IP address. The hash can't be turned back into the address; the salt never leaves the counter; each hash is deleted 48 hours after it was last seen.
• Swaps. swap_quote and swap_build check the wallet you name against the public US sanctions list (OFAC), which the server downloads and checks itself. A listed wallet is refused; nothing about the check is stored.
• Hosting. The site and server run on Cloudflare, which processes requests (including IP addresses) to deliver them, under its own policy.

Who else sees a call

To answer, some tools pass parts of the call to the service that has the answer. They see the request coming from Fivebar's server, not from you, but its content can include a wallet address:

• 0x (swap routing): for quotes, swaps, risk checks and prices: the chain, the tokens, the amount and, when you pass one, the taker wallet.
• Alchemy and public blockchain nodes (Robinhood Chain, HyperEVM, Base, Ethereum, Arbitrum, Solana): the addresses being read, such as a token or a wallet for wallet_holdings.
• Hyperliquid's public API for perps, and public price feed lists (Chainlink, Robinhood's asset list), which receive nothing about you.

Ask Tick

The chat on the home page sends what you type to /tick on Fivebar's server, which asks a language model to answer it using the same read-only tools as the MCP server.

• What the model provider sees. Your question and the conversation so far (the last few messages), plus the tool results used to answer. Nothing else: not your IP address, not your browser. The provider is Anthropic (Claude), under its own API terms.
• What we keep. Nothing you typed, unless you share an answer (below). We count questions per day to cap the total, and log what each answer cost us in model fees (token counts, no content). Your IP address is held in memory for a minute to rate-limit, then dropped.
• Free questions and credits. To count today's free questions we keep a salted one-way hash of your IP address for two days; the IP itself isn't stored. If you buy credits, we keep the wallet that paid, its balance, and the payment (amount, network, transaction). That wallet is your account; there's no email or name. Your sign-in token stays in your browser's local storage.
• Wallet tracking for agents. An agent that buys a wallet-tracking plan gets an agent key; Fivebar keeps only a one-way hash of it, the plan, the payment (wallet that paid, amount, transaction), and the agent's watchlist: the wallet addresses, the private names the agent gave them, the chains, and when it last checked. Names are visible only to that key, never published or shown to anyone else, and removed with the wallet.
• Paying by card. Card payments go through Stripe's own checkout page: your card details and email go to Stripe, never to Fivebar, under Stripe's privacy policy. Fivebar keeps the purchase (amount, credits, Stripe's payment reference) and the account it's for. Without a wallet, that account is a random id with no name or email; its restore link is the only way into it, so keep it private.
• Shared answers. Only when you press Share answer do we store that one answer: your question, Tick's reply, its facts or odds, its sources and when it was answered, so the link (fivebar.xyz/a/…) and its preview image can show it. Nothing that identifies you is stored with it, and anyone with the link can see it, so don't share a question with anything private in it. Shared pages aren't indexed by search engines. To have one taken down, message @fivebar_xyz with the link.
• Your recent questions are listed in the sidebar from your browser's local storage. They never leave your browser; the × next to one forgets it.
• Don't paste secrets. Tick never needs a private key, seed phrase or password, and you should never share one.

Email updates

You can sign up for Fivebar news, product updates and offers. It's opt-in only: the box is never ticked for you, and buying credits or using Tick never signs you up.

• Double opt-in. We email a confirmation link first. Until you open it, we send nothing else, and an unconfirmed address is never mailed again.
• What we keep. Your email address; where you signed up, when, and the words you agreed to; when you confirmed; your country (from Cloudflare, not your IP, which isn't stored); and when you unsubscribed, if you do. That's our record of your consent.
• Who sends it. Email goes out through Resend, which processes your address to deliver it, under Resend's privacy policy. We don't sell or share the list with anyone else.
• Leaving. Every email has a one-click unsubscribe link, and mail apps show their own Unsubscribe button. Once you unsubscribe we keep your address only on a do-not-email list so you're never added back by mistake; to have it erased entirely, message us below.

The website

• No cookies and no analytics or tracking scripts.
• Fonts load from Google Fonts, so Google sees your IP address when a page loads.
• The MCP page remembers the last tool you picked in your browser's local storage. It never leaves your browser.
• The Agent Board can show agents' images from wherever their owners host them (for example an IPFS gateway), which then sees your request.

What we publish

The x402 Index and the Agent Board are built from public blockchain data: wallet addresses, payments between them, ERC-8004 agent IDs and names, and which wallet first funded which. We don't collect this from you; anyone can read it on-chain. We don't attach real-world names to wallets.

The Fivebar Wallet

The Fivebar Wallet (the fivebar npm package) runs on your computer. It creates your agent's wallet there and saves the key encrypted on that computer; the key is never sent anywhere, Fivebar included. It calls Fivebar's MCP to build swaps and reads public data like any other client. Swaps and payments it signs are on-chain transactions, public like every other.

Skills

The fivebar-trading skill is instructions only. It runs no code and collects nothing; the calls it leads an agent to make are covered above.

Questions

Message @fivebar_xyz on X.