docs: CELA MCP notices, PRIVACY, and data-flow (Matter-0000001599) - #43
Merged
Gregory Joseph (gnjoseph) merged 2 commits intoJul 10, 2026
Merged
Conversation
Close the CELA MCP-release notice gaps for Matter-0000001599: - Replace the pending MCP-disclaimer placeholder in README with an "Important notices" section (preview/no-warranty, autonomous-operation warning + SAFE-002/003/004, cost/billing, data & telemetry, data residency/EUDB, and a Product Terms pointer). - Add PRIVACY.md reconciling the no-telemetry posture with the static product User-Agent and local-only logging. - Add docs/DATA-FLOW.md enumerating outbound endpoints, boundary, and EUDB. - Fix README label that called the User-Agent a "Telemetry" string. - Add a top-of-README preview/cost/agent callout. Exact MCP disclaimer wording pending frontline-CELA confirmation. Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
…/cela-mcp-notices # Conflicts: # README.md
Gregory Joseph (gnjoseph)
marked this pull request as ready for review
July 10, 2026 20:34
Gregory Joseph (gnjoseph)
merged commit Jul 10, 2026
14450df
into
feat/spe-mcp-server
5 checks passed
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
What this does
Closes the CELA MCP-release notice/disclaimer gaps for Matter-0000001599 (the item flagged in Note 3 of OSS Release work item ossmsft #55532: "contact frontline CELA for additional notices or disclaimers required for MCP servers").
Changes
## Important noticessection replacing the pendingMCP-DISCLAIMERplaceholder. Covers:--read-only(SAFE-003),--toolsallowlist (SAFE-004)Microsoft.Syntex, trial vs. standard)PRIVACY.md(new) — reconciles theSendsDataToMicrosoft=Noattestation with the static productUser-Agentand local-only stderr logging; documents that there is no telemetry channel to opt out of.docs/DATA-FLOW.md(new) — enumerates every outbound endpoint (Entra/MSAL, Graph, ARM, Microsoft Learn MCP), what data goes where, local artifacts, and the compliance-boundary / EUDB posture.user-agent.tsa "Telemetry User-Agent string" now reads "Product User-Agent string (no telemetry channel)".Pending / open items (for CELA + owner)
package.jsonis0.2.0-alpha.1whileserver.jsonand the README install pin are0.1.0-alpha.1. Left for the owner to reconcile so a notices PR doesn't change a release version.com.microsoft/...vsio.github.microsoft/...) still to be finalized.No source/behavior changes; docs only. No tests reference the replaced placeholder.