schema-first MCP plan

A personal remote MCP server. Endpoint: https://187-126-19-63.sslip.io/mcp (Streamable HTTP, POST only). It speaks MCP 2026-07-28 (stateless, per-request _meta, server/discover) and, for older clients, 2025-11-25 / 2025-06-18 through initialize (no sessions are kept).

What the tools do

Tool	What it does	Input	Structured result
`memo_write`	Saves a short text note on this server and returns its id.	`text`	`id`
`memo_search`	Finds saved notes whose text contains every word of the query (case-insensitive), newest first. An empty query lists the newest notes. Returns at most 50.	`query`	`notes`
`upload`	Stores a file on this server and returns a public link to it, served by this server. Anyone with the link can open it. Send the file as base64 in content_base64 (max 20 MB), or plain text in text.	`filename`, `content_base64` (optional), `text` (optional), `mime_type` (optional)	`url`, `id`, `filename`, `size`, `mime_type`, `sha256`
`transcribe`	Downloads audio (or video) from a public http(s) URL, or a link made by upload, and turns speech into timestamped text with Whisper running on this server. start and end are in seconds.	`url`	`segments`, `language`, `duration`

Every tool declares an outputSchema; successful calls return structuredContent matching it, plus the same JSON as a text block. Bad input or a failed download comes back as a tool result with isError: true.

How sign-in works

Calls to /mcp without a valid token get 401 with WWW-Authenticate: Bearer resource_metadata="https://187-126-19-63.sslip.io/.well-known/oauth-protected-resource/mcp".

That document names this host as the authorization server (https://187-126-19-63.sslip.io/.well-known/oauth-authorization-server).

Clients identify themselves with a Client ID Metadata Document (an https URL as client_id) or, for older clients, Dynamic Client Registration at /register.

Authorization code flow with PKCE S256 (required) and the resource parameter (RFC 8707). Redirect URIs must match exactly (loopback ports may vary). The response carries iss (RFC 9207).

The owner of this server sees a consent page naming the client and where it redirects, and approves with the owner password. Nobody else can approve.

Access tokens are opaque, live 1 hour and are accepted only for https://187-126-19-63.sslip.io/mcp. Refresh tokens live 30 days and rotate on every use; reuse of an old one revokes the whole grant.

What data it keeps

Notes from memo_write: text, id, time, and which client wrote it. Kept until the owner deletes them. Every signed-in client can search all notes.

Uploaded files: the file, its name, type, size, SHA-256, time and client. Each file gets an unguessable link (128-bit id); anyone with the link can download it. Files are kept until the owner deletes them.

Audio for transcribe: downloaded to a temporary file, transcribed on this server (faster-whisper, no third party), and deleted right after. Transcripts are not stored.

Sign-in data: registered clients (name, redirect URIs, hashed secret) and SHA-256 hashes of codes and tokens until they expire. The owner password is stored only as an scrypt hash.

Logs: time, client IP, method, path, status, tool name and client id. No request bodies, no tokens.

Limits and safety

Upload max 20 MB; audio download max 50 MB, 20 minutes. transcribe fetches only public http(s) addresses (private, loopback and link-local ranges are refused, redirects re-checked).

Rate limits per IP and per client. Uploaded files are served with nosniff, a sandboxing CSP, and as downloads unless they are common media, text, JSON or PDF.

The app listens on 127.0.0.1 only; Caddy terminates TLS in front of it.

schema-first MCP server — plan

What the tools do

How sign-in works

What data it keeps

Limits and safety