MCP v2.0 Clarifications: Our Dos & Don’ts
Feedback Report Part II: What will MCP do and will not do?
In the last article, we shared five key findings on our community feedback. Apart from the praises and compliments we received from the feedback, we also noted that the community has some misconceptions about My Crypto Profile’s privacy and service details.
Those details often involve technical information that is for one thing general users will find difficult to comprehend, for another cannot be fully illustrated via UX/UI. But at the same time, transparency is our first principle; we do not wish what we do and what we do not do are gated to users.
For better community alignment, we’d like to make clarification on our dos and don’ts.
Our dos
🔎 We do audit our services
Digital identity is made of data. To help you take back your identity ownership, preventing any possible data leakage or security loophole is our top priority. Not only do we have experienced blockchain developers reviewing the code, we also conduct internal security checks and code auditing to examine the robustness of our code, so that you can be rest assured with 100% security.
✂️ We do delete your data when you want to
You can unlink your account on MCP at any time, and when you do, your data information will also be removed as well, because we do not store your information.
📤 We do fetch your data in real-time instead of storing it on a centralized server
When linking your accounts on MCP, you will generate a unique identity graph (ID graph). The generation and storage of your ID graph will be executed in a private computation environment (Litentry TEE) and deployed on the Litentry blockchain, so your data will be kept from being seen in a trustless manner.
When you have authorized the requester to access your data, we will fetch the data authorized by you from the blockchain in real time to the requester.
Our don’ts
👁🗨 We don’t track your data
MCP/Litentry does not and will not track your data either actively or passively, and the identity requester (e.g. PhalaWorld) is only able to obtain the data that is authorized by you.
Your ID graph can be used as a credential for account ownership. With MCP’s profile configuration and decentralized data aggregation solution, your ID graph will remain private throughout the process, i.e., your addresses and accounts will be shielded so no one can track your data.
📌 We don’t hold your data hostage
With MCP/Litentry, you’re in full control of your data. The actual usage of your data starts when you have authorized the data to the requester (usually the dApps). When authorizing, you can see what kind of data is being requested from you and choose the ones you’d like to authorize. The requester can only obtain data authorized by you; unauthorized data will be be
🥷 We don’t access your data
Once an ID graph is generated, MCP will submit it to the Litentry blockchain, which in turn will verify the ID graph. After the ID graph is validated by the blockchain, it will be stored in an encrypted on-chain TEE (Trusted Execution Environment), so that all of your data is encrypted and no one can access it without your authorization.
Stay tuned for our next article on the top question picks from the community! OR send us your questions to our socials, so we can review them and answer for you.
About Litentry
Litentry is a Decentralized Identity Aggregator that enables linking user identities across multiple networks. Featuring a DID indexing protocol and a Substrate-built distributed DID validation blockchain, Litentry provides a decentralized, interoperable identity aggregation service that mitigates the difficulty of resolving agnostic DID mechanisms.
As an integral part of Litentry, MyCryptoProfile is an off-chain pilot version for decentralized identity aggregation, aiming to bring Litentry’s value in a more user-friendly way.
Stay in touch with us through
