This article explains how the Swifteq MCP Server for Zendesk handles your data, how access is secured, and the controls you have. It is written so it can be used in a security review.
In this Article
Data Storage and Retention
AI Models and Training
Hosting and Sub-processors
Certifications and Agreements
Authentication and Request Path
Access Controls
Current Limitations
Data Storage and Retention
- The MCP Server does not store ticket content, conversations, attachments, agent data or customer data. Data is fetched from Zendesk when your AI assistant asks for it, sent to your AI assistant and discarded.
- The only information kept is your account email address used for sign-in and minimal infrastructure logs, retained for up to 120 days for troubleshooting.
- Each Swifteq account is fully isolated, with its own database and its own Zendesk credentials.
AI Models and Training
- Swifteq does not run an AI model in the MCP Server and does not send your data to any AI model provider.
- Swifteq does not train models on your data.
- Your AI assistant (for example Anthropic's Claude or OpenAI's ChatGPT) receives the data it asks for. What happens to data once it reaches your AI assistant is governed by your agreement with that provider.
Hosting and Sub-processors
The MCP Server is hosted on AWS in Ireland (EU).
| Sub-processor | Location | What it processes for the MCP Server |
|---|---|---|
| Amazon Web Services | Dublin, EU | Hosting. Zendesk data passes through while a request is processed. |
| Auth0 | United States | Sign-in only: user names, email addresses and IP addresses. No Zendesk data passes through Auth0. |
Auth0 is the only US sub-processor used by the MCP Server. Transfers are covered by the Standard Contractual Clauses, as set out in our Data Processing Agreement. Other sub-processors listed in the Data Processing Agreement are used by other Swifteq apps, not by the MCP Server.
Certifications and Agreements
- Swifteq is SOC 2 Type 2 certified. Documentation is available in our Trust Center.
- Our standard Data Processing Agreement applies to all Swifteq apps. It is part of the Service Agreement you accept when you use the app, so no separate signature is needed.
- To report a security issue, email support@swifteq.com and mark it as a security report.
Authentication and Request Path
- Signing in to the MCP Server uses OAuth 2.0 with the authorization code flow and PKCE. There is no client secret, and no password or implicit grants are used.
- Access tokens are signed, time-limited and restricted to the MCP Server. Tokens issued for any other service are rejected. Your account is identified only from the verified token, never from request parameters.
- Connecting to Zendesk uses standard Zendesk OAuth with either read, or read and write, access.
- Transport is HTTPS only. Attachments are downloaded only from verified Zendesk URLs.
The request path is: your AI assistant, then mcp.swifteq.com, then the Zendesk API. The MCP Server holds your Zendesk OAuth token and makes the Zendesk API call from Swifteq's infrastructure, then returns the result. agenthelper.swifteq.com is only used for sign-up, Zendesk authorization and settings, and is not in the request path.
If your Zendesk account restricts access by IP address, allow the MCP Server's IP address: 52.215.133.107.
Access Controls
- Your Zendesk permissions apply. The AI assistant can only see what the connected Zendesk user can see, including Private Groups. When team members use their own Zendesk login, their own permissions apply and their changes are shown in Zendesk as made by them. Refer to Inviting Team Members to the MCP Server.
- Read only by default. Write access has to be granted when Zendesk is authorized.
- Central control of changes. The account owner can turn off all changes for everyone, or only public replies and article publishing, and this applies from the next request without anyone reconnecting. Each user can also turn these off for themselves. Refer to Write Permissions for the MCP Server.
- Refusals change nothing. An action that is not allowed is refused, and never carried out in a different form.
- No destructive tools. There are no tools to delete, merge or mark tickets as spam, or to delete articles. Tags are only added or removed individually, never overwritten.
- Removing access. An account owner can turn off a user's MCP access on the Users page. In Zendesk, you can revoke the app's access, or deactivate the Zendesk user who authorized it, and access stops immediately.
Current Limitations
- Zendesk access is either read, or read and write. There is no finer scope, so read access includes attachments and internal notes.
- There is no field-level redaction or PII filtering.
- Individual tools cannot be turned off on the MCP Server. Most AI assistants, including Claude, let you turn individual tools on or off in the connector settings.
- Swifteq accounts do not support SAML SSO, Google SSO or enforced MFA.
- The MCP Server cannot be self-hosted.
If you have more questions for your security review, please contact Swifteq support using the Live Chat or email support@swifteq.com.