Privacy policy

Last updated: 2026-10-22

AzParking MCP (azparking.dev) is an independent service that lets you manage your AzParking account from Claude, Codex, Cursor and other MCP clients. This page explains what is stored, where and for how long. The short version: the server keeps no record of your account.

How sign-in works

When you connect, you enter your phone number and the SMS code sent by AzParking in the browser. The server forwards these only to AzParking's official API and receives an AzParking sign-in token in return.

That token is encrypted with the server's key and returned inside the token issued to your MCP client. The client (for example Claude Code) keeps it in its own secure storage on your device. The server never writes a copy anywhere.

What the server stores

• Account data, the AzParking token, your phone number, name, vehicles and cards: not stored. On every request the token sent by the client is decrypted, the request goes to AzParking, the response is returned to you and forgotten.
• MCP client registration: the client's name (for example "Claude Code") and its redirect address, for 90 days. Not personal data.
• A temporary record during sign-in: the number and the SMS code identifier issued by AzParking, encrypted so that only a one-time key held by your browser can open it, for at most 10 minutes; deleted as soon as sign-in completes.
• A hash of each used sign-in code (6 minutes) and irreversible hashes of the number and IP address for SMS rate limiting (10 minutes). The number and the IP themselves are not stored.
• SMS codes, card numbers, CVV, AzParking API responses: never stored and never logged.

Infrastructure

The service runs on Cloudflare Workers. Cloudflare may keep request metadata (address, time, status, IP address) in its infrastructure logs for a limited time under its own privacy policy. We do not log request bodies, tokens or codes.

Requests go to AzParking's API (userapi.azparking.az). What AzParking stores on its side is governed by its own policy.

Revoking access and deleting data

• Remove the server in your client (for example "claude mcp remove azparking"): the only copy of the token is deleted.
• Call the "azparking_logout" tool: the AzParking token is invalidated on AzParking's side, after which your token is useless.
• There is no account record on the server to delete. Temporary records delete themselves within 10 minutes.

Responsibility and contact

AzParking MCP is not affiliated with or endorsed by AzParking. The service acts on your behalf and only on your explicit request; starting a session or making a payment is always initiated by you.

Questions: info@chz.dev