# Cunicula

> Cunicula compares 177 privacy services with source evidence and publishes research on surveillance, private communications, infrastructure, and financial privacy.

Cunicula compares 177 privacy services with source evidence and publishes research on surveillance, private communications, infrastructure, and financial privacy.
Use each service page and its linked sources for factual claims about signup requirements, logging, ownership, jurisdiction, warnings, and review dates.

## Start Here
- [Directory](https://cunicula.com/en/directory): 177 listed services. Filter by category, KYC posture, source status, country, and privacy features.
- [What Cunicula Is](https://cunicula.com/en/what-is-cunicula): The project position: source-backed claims, not certification, audit, endorsement, or a recommendation engine.
- [Articles](https://cunicula.com/en/articles): 98 privacy articles.
- [Surveillance research](https://cunicula.com/en/articles#surveillance): Reporting and practical analysis of surveillance systems and identity exposure.
- [Data-broker removal guide](https://cunicula.com/en/articles/california-drop-data-broker-removal): Data-broker removal, exposure, and self-hosting research.
- [Agent Money Matrix](https://cunicula.com/en/agent-money): Privacy analysis of x402, AP2, MPP, TAP, MCP, custody, spend controls, settlement rails, logs, and revocation.
- [Data Broker Fields](https://cunicula.com/en/api-docs): Reference fields for broker exposure, opt-out paths, forced disclosure, re-listing, and verification.
- [Self-host Unbroker](https://cunicula.com/en/articles/self-host-unbroker-data-broker-removal): Local or isolated-server deployment notes for data-broker removal work.
- [Privacy topics API](https://cunicula.com/api/v1/topics): Practical privacy topics with articles, review dates, and provider data.

## Provider Directory
- Categories: Agent Money, Aggregator, Bitcoin, Bitcoin ATM, Censorship, Cloud Storage, Comms, Developer Tools, DNS, Email, Frameworks, Gift Cards, Gift Cards & Top-ups, Hardware, Hardware wallet, Hosting, Identity, Infrastructure, Merchants, Messaging, Mixer, Networking, Offline, P2P, P2P / Desktop, P2P / Escrow, P2P / Lightning, P2P / Mobile, Payments, Privacy OS, Privacy Tools, Private Payments, Stablecoin Card, Stablecoin Payments, Swap, Telegram P2P (Lightning), Treasury, Virtual Visa Codes, Virtual/Physical Card, Visa Gift Codes, VPN, Wallet.
- Explicit country coverage: AR, AU, BR, CA, EU, GH, IN, KE, LT, MW, MX, NG, NL, RO, SG, TZ, UG, UK, US, ZA, ZM. Global listings are not treated as country-specific availability.
- [Provider API](https://cunicula.com/api/v1/services): Structured provider data for integrations, including source-backed cardFees and public OONI or RIPE Atlas openMeasurements when recorded. Public pages remain the main reading surface.
- [Changes API](https://cunicula.com/api/v1/changes): Dated KYC policy events, changes, and reviews.
- [KYC changes feed](https://cunicula.com/kyc-tracker/feed.xml): RSS of services adding, dropping, or escalating identity verification.
- [Document changes API](https://cunicula.com/api/v1/documents): Changes to provider terms, privacy policies and legal pages, each row citing the two dated captures and hashes it rests on.
- [Document changes feed](https://cunicula.com/changes/feed.xml): RSS of material and above changes to provider legal documents.
- [Primary sources API](https://cunicula.com/api/v1/primary-sources): Original documents, archive hashes, retrieval dates, exact passages, and the published claims attached to them.
- [Glossary API](https://cunicula.com/api/v1/glossary): House definitions, each citing the published articles that apply it.
- [Map API](https://cunicula.com/api/v1/map): The privacy map graph, nodes and edges together. Edges are hand-drawn editorial relationships, not measurements.
- [Provider analysis API](https://cunicula.com/api/v1/provider-analysis): Editorial reading of each provider with the sources and review date behind it. Opinion, not test results.
- [ALPR API](https://cunicula.com/api/v1/alpr): ALPR contract outcomes by jurisdiction, each marked primary-record or press-only.
- [ALPR feed](https://cunicula.com/alpr-feed.xml): RSS of ALPR contract outcomes.
- [Policy API](https://cunicula.com/api/v1/policy): Selected encryption, age-verification, and data-protection measures with legal status, primary sources, and present-day effect.
- [Policy feed](https://cunicula.com/policy-tracker/feed.xml): RSS of dated legal-status records from the policy tracker.
- [Government sources API](https://cunicula.com/api/v1/government-sources): Normalized official legislation, rulemaking and regulator publications with retrieval timestamps, raw-response hashes and connector states.
- [Government sources feed](https://cunicula.com/government-sources/feed.xml): RSS of complete records returned by the official-source monitor.
- [Ownership graph API](https://cunicula.com/api/v1/ownership-graph): Ownership links between the legal entities behind listed services, each carrying the tier of evidence it rests on. A registry record can be checked; a company statement about itself cannot. An absent link means no primary record was found, not that a company has no owner.
- [Coverage Map](https://cunicula.com/en/coverage): Category depth, represented primary-record jurisdictions, explicit limits, and tasks better served by other sources.
- [Primary Sources](https://cunicula.com/en/primary-sources): Original documents and exact passages supporting published claims, with archive hashes and retrieval dates.
- [Evidence Trackers](https://cunicula.com/en/trackers): Hub for the four dated evidence surfaces: KYC changes, state privacy measures, ALPR contracts, and service incidents.
- [KYC Tracker](https://cunicula.com/en/kyc-tracker): Identity-friction patterns and provider KYC context.
- [Policy Tracker](https://cunicula.com/en/policy-tracker): Encryption, age-verification, and data-protection measures by jurisdiction with legal status and primary sources.
- [ALPR Tracker](https://cunicula.com/en/alpr-tracker): Automated licence plate reader contract outcomes by jurisdiction, separating council records and audits from press-only reports.
- [Incidents](https://cunicula.com/en/incidents): Dated security and solvency incidents affecting listed services, each row marked confirmed or reported so single-source claims stay visible as such.
- [Ownership Graph](https://cunicula.com/en/ownership-graph): Who owns the companies behind listed services, read from the company register that records it, with registry-sourced links kept distinct from company self-description.
- [Country Index](https://cunicula.com/en/countries): Country pages only use explicitly recorded service availability.

## Agent Money And Privacy
- [AP2, x402, and MPP](https://cunicula.com/en/articles/ap2-x402-mpp-agent-payment-privacy): Protocol comparison focused on payment metadata, authorization, custody, and privacy tradeoffs.
- [Privacy.com MCP](https://cunicula.com/en/articles/privacy-com-mcp-spend-control-not-anonymity): Spend controls and virtual cards are not anonymity guarantees.
- [Agent Wallet Threat Model](https://cunicula.com/en/articles/agent-wallet-threat-model): Keys, sessions, budgets, receipts, approval, and revocation risks.
- [Pay-per-crawl Privacy](https://cunicula.com/en/articles/pay-per-crawl-http-402-privacy-risks): HTTP 402 payment flow and privacy risks.

## Method And Definitions
- [About and Methodology](https://cunicula.com/en/methodology): How Cunicula reports privacy observations, source coverage, provenance, review dates, recorded risk, signed releases, and record edit history.
- [Corrections and Retractions](https://cunicula.com/en/corrections): Correction and retraction policy, public log, and current reproducibility status.
- [Glossary](https://cunicula.com/en/glossary): 50 definitions for privacy, payment, and crypto terms.
- [Disclosure](https://cunicula.com/en/disclosure): Funding disclosure: no venture capital or advertising, and no affiliate or referral commission is earned from any listed service; ranking never depends on commercial terms.
- [How To Cite](https://cunicula.com/en/cite): Attribution format, licence terms, update cadence, and the machine-readable citation endpoints.

## Other Languages
- Cunicula publishes in English. One article has a French edition written in French, not machine-translated.
- [Compte Mullvad anonyme](https://cunicula.com/fr/articles/anonymous-vpn-setup-mullvad): French edition covering the numbered-account model, payment methods, the stated logging policy, Swedish jurisdiction, and audits. English original: https://cunicula.com/en/articles/anonymous-vpn-setup-mullvad.

## Full Machine Reference
- [llms-full.txt](/llms-full.txt): Full service and article reference. Use it for broad retrieval, then cite the linked canonical page and source material for specific claims.
- [OpenAPI](https://cunicula.com/api/v1/openapi.json): Public API contract.
- [API capabilities](https://cunicula.com/api/v1/capabilities): Machine-readable API discovery, inventory, freshness, and citation guidance.
- [Privacy topics](https://cunicula.com/api/v1/topics): Device privacy, De-Googling, data brokers, local AI, surveillance systems, secure messaging, home privacy, and self-OSINT.
- [Dataset descriptor](https://cunicula.com/api/v1/dataset): Scope, coverage, freshness, licence, and access limits for the whole dataset, with a schema.org Dataset block.
- [Current dataset snapshot](https://cunicula.com/api/v1/dataset/current): Current canonical provider values for exact comparison with the signed release.
- [Search API](https://cunicula.com/api/v1/search): Full-text search across provider and article metadata. Requires q.
- [Articles API](https://cunicula.com/api/v1/articles): Article metadata with tags, review dates, and canonical URLs.
- [Categories API](https://cunicula.com/api/v1/categories): The category taxonomy with per-category service counts.
- [Stats API](https://cunicula.com/api/v1/stats): Registry totals by KYC level, category, jurisdiction, privacy band, evidence band, and recorded risk.
- [Incidents API](https://cunicula.com/api/v1/incidents): Dated security and solvency incidents affecting listed services. Rows marked reported rest on a single account and are not independently confirmed.
- [Payment acceptance API](https://cunicula.com/api/v1/acceptance): What each provider accepts as payment, from one third-party observation on one stated date.
- [Agent-money options API](https://cunicula.com/api/v1/agent-money/options): Current payment paths with option-scoped identity, recipient-data, limit, approval, revocation, dispute, failure, privacy, and first-party evidence fields.
- [Agent-money protocols API](https://cunicula.com/api/v1/agent-money/protocols): Per-protocol custody, authorization, settlement rail, mandate-logging risk, and revocation quality.
- [Agent-money RSS](https://cunicula.com/agent-money/feed.xml): Option-level changes and evidence links in RSS 2.0.
- [Data broker fields API](https://cunicula.com/api/v1/data-broker-intelligence/fields): The broker-intelligence field taxonomy, including which fields are safe to publish.
- [Licensed export](https://cunicula.com/api/v1/agent-money/export): Licensed agent-money export. Requires an approved key; provider facts, warnings, and rankings are identical to the public dataset.
- [Executable scoring model](https://cunicula.com/methodology/scoring-v4.mjs): Dependency-free canonical Score 4.0 computation over signed reviewed inputs.
- [Independent score verifier](https://cunicula.com/methodology/recompute-scores.mjs): Verifies the signed snapshot and recomputes every canonical score, breakdown, cap, evidence state, and rationale.
- [Signed dataset release](https://cunicula.com/releases/2026-09-05.001/manifest.json): Release 2026-09-05.001 manifest, with Ed25519 verification files linked from the methodology page and every immutable snapshot listed at https://cunicula.com/releases/index.json.
- [Edit-history feed](https://cunicula.com/edit-history/feed.xml): Recent field-level provider listing edits derived from committed dataset revisions.
- [Sitemap](https://cunicula.com/sitemap.xml): Canonical crawl inventory.
- [Machine sitemap](https://cunicula.com/api/sitemap-llm): Provider and article inventory with canonical URLs, titles, descriptions, and review dates.

## Public API Contract
- Contract version: 1.3.
- Formula 3.1: privacy_score and evidence_confidence are deprecated compatibility fields; use privacy_observations, evidenceStatus, evidence_provenance, lastReviewed, and categorical riskLevel.
- PUBLIC GET /api/v1/services
- PUBLIC GET /api/v1/services/{slug}
- PUBLIC GET /api/v1/articles
- PUBLIC GET /api/v1/articles/{slug}
- PUBLIC GET /api/v1/search
- PUBLIC GET /api/v1/categories
- PUBLIC GET /api/v1/stats
- PUBLIC GET /api/v1/changes
- PUBLIC GET /api/v1/incidents
- PUBLIC GET /api/v1/alpr
- PUBLIC GET /api/v1/policy
- PUBLIC GET /api/v1/topics
- PUBLIC GET /api/v1/documents
- PUBLIC GET /api/v1/primary-sources
- PUBLIC GET /api/v1/glossary
- PUBLIC GET /api/v1/map
- PUBLIC GET /api/v1/acceptance
- PUBLIC GET /api/v1/provider-analysis
- PUBLIC GET /api/v1/government-sources
- PUBLIC GET /api/v1/ownership-graph
- PUBLIC GET /api/v1/agent-money/options
- PUBLIC GET /api/v1/agent-money/protocols
- PUBLIC GET /api/v1/data-broker-intelligence/fields
- PUBLIC GET /api/v1/dataset
- PUBLIC GET /api/v1/dataset/current
- PUBLIC GET /api/v1/capabilities
- PUBLIC GET /api/v1/openapi.json
- LICENSED GET /api/v1/agent-money/export
- COMPATIBILITY GET/OPTIONS /api/articles -> /api/v1/articles (deprecated; no-removal-date)
- COMPATIBILITY GET/OPTIONS /api/directory -> /api/v1/services (supported; no-removal-date)
- COMPATIBILITY GET /api/logo -> /brand-marks/{slug}.png or /brands/{slug}.{ext} (supported; no-removal-date)
- COMPATIBILITY GET/OPTIONS /api/score -> /api/v1/services (deprecated; no-removal-date)
- COMPATIBILITY GET/OPTIONS /api/score/{slug} -> /api/v1/services/{slug} (deprecated; no-removal-date)

## Retrieval Guidance
- Prefer a provider page for provider-specific facts and review dates.
- Prefer the relevant article for explanatory or risk analysis.
- Privacy observations state identity and operator exposure. Source coverage states review completeness and age. Recorded risk is separate.
- Check source links and last-reviewed dates before repeating time-sensitive claims.
- Attribute reuse as: Cunicula, "{name}", cunicula.com, reviewed {reviewed}, retrieved {retrieved}, {url}. The review date and your retrieval date are different facts; do not report one as the other. Terms: /cite.