1ms MCP data practices

Who operates the service

One More Shot is operated by KRNL SRL. This technical notice supplements the One More Shot privacy policy, which describes the data controller, legal bases, and your privacy rights. The Terms of Service apply to use of the connection.

Account access

Connecting uses OAuth authorization linked to your 1ms account. We store the connection identity, granted permissions, expiry, and revocation state, and verify them when handling requests. The connection does not require your public API key. Account tools can return profile information, eligibility, credit balance, and generation history to the connected host.

Workspace permission additionally signs the embedded web app into your account. Its session has normal web permissions and is separate from browser tabs. Private sign-in tickets are short-lived and bound to the requesting workspace.

Media and generation data

When you upload or authorize a media URL, 1ms copies the file into service storage for processing. Generation records include your requested settings, prompts or lyrics, referenced audio and photos, job status, outputs, and credit transactions. Connection and operation identifiers distinguish MCP activity from API-key activity.

Hosting and storage services and the AI/media providers used by the selected pipeline process the inputs needed to generate your video. Tools return requested status, results, and media links to the host. The host processes its copy under its own policies. Anyone given a downloadable media link may be able to access that file; share links carefully.

Retention and disconnection

Import references are usable for seven days. Reference expiry does not mean all copies of the media or generated output are deleted at that time. Storage, job history, and transaction records follow the service’s retention practices described in its privacy policy.

Revoking a connection stops new access through that grant. It does not delete existing media, cancel running jobs, or delete copies already returned to the host. Contact support@onemoreshot.ai for a deletion request or questions about your information. Do not include passwords or access tokens.