How data flows
Your AI talks to our hosted relay, and the relay talks to your site. Your prompts never pass through us; only the actions your AI decides to take, and the results your site returns.
Here is one request, start to finish. You ask Claude, ChatGPT or Cursor a question. Your AI decides it needs, say, the list of failed payments, and sends that one action to the Membership MCP relay. The relay checks that your account is signed in and connected to that site, counts it as one action against your daily allowance, signs it, and forwards it to the Membership MCP plugin on your site. The plugin checks the signature, runs the action through MemberPress as the administrator who connected the site, writes it to your site's activity log, and sends the result back the same way. Your AI turns that result into the answer you read.
The relay passes results through. It does not keep a copy of your members, payments or content.
What we hold and what we do not
We hold: your account email, your plan, records of the sites you connected, and an encrypted credential for each connected site.
We also log each action that passes through the relay: which tool ran, whether it worked, how long it took, and which AI app sent it. We never log the arguments or the results, so names, emails and amounts stay out of our logs.
We never hold: your WordPress password, your AI provider's keys, or card numbers (payments run through Stripe).
How the connection is authorized
You start the connection from the Membership MCP plugin on your own site, as an administrator, and confirm it with your Membership MCP account. Your AI app then signs in to that same account with Google, or with your email and password. Your password is never shared with your AI. You can disconnect from the plugin at any time and the connection ends immediately.
Safety defaults
- Previews first. Every tool that changes a member, plan, subscription, rule or coupon returns a preview by default. The change runs only when your AI explicitly says to go ahead, so it can show you what will change and check with you in the chat first. There is no separate approval queue to manage.
- Read-only if you want it. Connect a site read-only and your AI can look things up and report, but cannot change anything.
- Reads are immediate, writes wait. Reports and lookups come back right away and never change anything.
- The risky ones wait for your approval in your AI app. The plugin never asks you itself: the yes happens in your AI app's own approval card, in the apps that show one. Refunds, cancelling, suspending or resuming a subscription, deleting a member, publishing a post and overwriting a page always stop at a preview. They run only when your AI sends back a one-time code tied to that exact change. The code expires in one to five minutes and works once, so an old code can't be reused.
- New posts and pages are drafts. They are saved as drafts unless you ask to publish, and publishing waits for your approval in your AI app.
- Logged on your site. Every action, whether it worked, what it touched and whether it was confirmed, under MemberPress › MCP › Activity log.
- A pause switch. One setting in the plugin stops every change from every AI until you turn it back on.
- Rate limits. Membership MCP caps how many actions an AI can take each minute, and your plan sets a daily allowance, so a runaway conversation cannot run away with your site.
Training and models
We do not train anything on your data. Membership MCP runs no AI model of its own; it supplies tools to the AI you bring. Your AI vendor's terms govern your chats with Claude, ChatGPT or Cursor.
Sub-processors
These companies process data for us to run the service. We update this list before a new one starts handling customer data.
| Provider | Purpose | Location |
|---|---|---|
| Google Cloud | Hosting for the relay and the account app, database and logs | United States |
| Cloudflare | Hosting for this website and the app, network protection | Global network |
| Stripe | Billing and checkout. Stripe collects your card details; we never see them. | United States |
| Resend | Password resets, receipts and account email | United States |
Breach notification
If we learn that data we hold about you has been accessed without authorization, we will tell you by email at your account address without undue delay, say what happened and what was affected, and explain what we are doing about it. Where the law sets a deadline or requires us to tell a regulator, we meet it.
Your controls
- Disconnect a site from your account at app.membershipmcp.ai.
- Revoke the connection on the site itself, in the plugin. Deactivating or deleting the plugin ends it too.
- Pause all changes from the plugin with one switch. Your AI can still read while changes are paused.
- Delete your account by emailing [email protected] from your account address. We remove your account and connected-site records, and keep only what we must for billing and legal reasons.