How the FirstSourceTeam MCP server protects participants' privacy
The MCP server returns aggregates only - no names, contact details or individual statuses. Groups and counts under 5 people are combined or hidden so no number identifies anyone, every request is limited to your own organization, and every request is logged.
The FirstSourceTeam MCP server sends your AI assistant aggregate numbers only: participant names, contact details and individual statuses stay in FirstSourceTeam. Counts small enough to point to a person are combined or hidden before anything leaves our servers, and every request is limited to your own organization and logged.
Available once your administrator connects it. See Connect FirstSourceTeam to Claude, ChatGPT or Copilot.
What is never sent
No tool returns a participant's name, email, phone number, job title, level, employee ID, department, location, notes, decline reason, or which status any one person is in. There is no tool for the participant list, the activity history, the audit log or exports; those stay in the employer portal.
What is sent: counts, rates, medians, money totals, dates, plan names, launch group names your HR team typed, and links to the portal.
Small groups are combined or hidden
The server never shows a count of 1, 2, 3 or 4 people.
| Rule | What happens |
|---|---|
| Small counts | A count of 1 to 4 is returned as hidden (null, suppressed: true). Zero is shown as 0. |
| Small groups | A launch group or plan with fewer than 5 people is combined into "Other (combined)", which lists the groups it contains. If that is still under 5, the next-smallest group joins it. |
| No working backwards | If a hidden count could be worked out by subtracting shown counts from a shown total, another count is hidden too. |
| Rates and medians | Shown only when at least 5 people are behind them and every count they're built from is shown. |
| Small programs | With fewer than 5 participants in all, only the total is shown. |
| Trends | A month with 1 to 4 people is combined into its quarter; a quarter still under 5 is hidden. |
| Money that reveals people | Refund totals are hidden while there are fewer than 5 refunds; seats used and remaining per plan are hidden when fewer than 5 seats of that plan are in use. |
| Fixed filters | Filters are a launch group, a plan or a number of months. There are no free date ranges or searches, which could be overlapped to single someone out. |
Ask for a single launch group that has fewer than 5 people and the server answers that it is included in "Other (combined)" instead.
Only your organization
You sign in with your employer portal account. The server checks the sign-in token's signature, that it was issued by FirstSourceTeam's sign-in service for this server, and that it hasn't expired, then looks up your portal account. Your organization comes from that account; no tool accepts an organization ID. If your portal access is removed, the next request is refused.
Logged and rate-limited
Every request is recorded by FirstSourceTeam: who made it, which AI assistant, which tool, its
filters, whether it succeeded, how long it took and how many figures were hidden. The answers
themselves aren't stored. The first request each day from each assistant also appears in your
organization's portal audit log as Report generated, with channel mcp. Requests are limited to
30 a minute per person and 300 an hour per organization.
Your AI assistant's own data handling
What you ask and what the assistant receives is processed by your assistant's provider (Anthropic, OpenAI or Microsoft) under your organization's agreement with them. Because the server sends only aggregates, no participant's personal information is part of that.
Last updated on