← All articles in topic

Help center · Automation & AI

How draft privacy works

Server stores drafts as IDs. Real amounts resolve on your device.

Last updated: 2026-05-243 min read

On this page

The Extrack MCP server stores drafts as account/category/person IDs plus the raw amount string the MCP client provided. When you promote a draft, your device resolves the IDs against your local data and posts the real transaction. Claude itself only sees the metadata Extrack exposes via MCP context calls — account names, category names, person names, and recent pending drafts (last 10) — never balances, transactions or totals.

What Claude sees

  • Account names (e.g. "HDFC Savings"). Not balances.
  • Category names (e.g. "Food"). Not totals.
  • Person names (e.g. "Rahul"). Not balances.
  • Recent pending drafts (last 10). Useful for duplicate detection.

What Claude does not see

  • Any transaction history.
  • Any account balance.
  • Per-person balances.
  • Budgets, reports or any aggregated number.

Frequently asked

Can I revoke Claude's access?

Yes — disconnect the MCP integration in Claude. That invalidates the OAuth token and stops further draft creation.

Related articles

Try this in Extrack

Open Extrack to follow the steps in a live workspace. Free for 30 days, no credit card.

Open Extrack