Privacy and safety
Here is exactly what Sakai-MCP does with your login and your data, on claude.ai and on Claude Desktop.
-
It only reads
Every Sakai address it may call is on a fixed read-only list. Anything else is refused before a request is made, including Sakai actions that would change data. It can't submit, post, message or delete.
-
Your password is only used for Sakai
On claude.ai, the Sakai-MCP server keeps your Student ID and password encrypted, so it can sign you back in to Sakai when Sakai's 10-minute session ends. They're only ever sent to sakai.ug.edu.gh, never shown or shared, and there's no analytics or tracking.
-
Each student is kept apart
Your Sakai session, files and history are kept separately from every other student's, and Claude can only reach your own data once you've signed in.
-
It sees only what you can see
It logs in as you, so it reads your own courses, submissions and grades, and nothing else.
-
It won't lock your account
If Sakai rejects your password once, it stops and doesn't try again until you update it.
-
Downloads stay contained
Only course files and assignment attachments from Sakai, with cleaned file names, saved inside ~/SakaiMCP, up to 50 MB each. Download links are signed, unguessable and expire after 24 hours.
-
Protects your account from guessing
After three wrong passwords for a Student ID, sign-in pauses for 15 minutes, so nobody can hammer Sakai with guesses for your account.
-
Want it fully private?
Use the Claude Desktop version: it runs Sakai-MCP on your own computer and your password stays in your system keychain.
-
Sakai text is information, not instructions
Announcements, briefs, feedback and files are marked as written by other people, and Claude is told never to follow instructions inside them.
What is kept, and where
- Your Student ID and password (claude.ai)
- Sakai-MCP server, encrypted
- Your Student ID and password (Claude Desktop)
- Your system keychain
- Lecture files Claude reads
- ~/SakaiMCP/downloads
- What “what's new” has shown you
- ~/SakaiMCP/state.json
- Submission checks, if turned on
- ~/SakaiMCP/logs/submissions.jsonl
- Debug log, if turned on
- ~/SakaiMCP/logs/server.log (passwords masked)
Claude sees the answers the tools return as part of your conversation, under your Claude account's own privacy settings.
Academic integrity
You're responsible for everything you submit, and UG checks submissions with Turnitin.
The study prompts tell Claude to help you understand and produce the work yourself, to explain so you can defend every part, and to tell you first when a brief limits or bans AI. Sakai-MCP can't take quizzes, read quiz questions or submit anything, and the revision prompt won't answer questions from a quiz that's open right now.
Check it yourself
The read-only list, the login code and the download checks are all open source.
Found a security problem? Report it privately, as described in SECURITY.md.