mega-mcp

A personal remote MCP server. Its endpoint is /mcp. Only clients the owner lets in can use it.

What the tools do

• memo_write saves a text note and returns its id.
• memo_search finds saved notes by words or phrase, and returns them best match first.
• upload stores a file of at most 25 MB and returns a public link that this server serves.
• transcribe downloads audio from a public url and returns text with start and end times in seconds.

Every tool result is structured content that matches the tool's declared output schema.

How sign-in works

The server uses OAuth 2.1 with PKCE (S256). Clients register by Client ID Metadata Document or Dynamic Client Registration, then send the owner to /authorize. The owner reads the client's name and redirect address, enters the owner password, and approves or denies.

Access tokens last one hour and work only on this server's /mcp endpoint. Refresh tokens last 30 days and can be used once each. Rotating the server's signing secret ends every grant.

What data it keeps

• Notes: the text and creation time, kept until the owner deletes them. Every client the owner lets in can read all notes.
• Uploaded files: the bytes, name and media type, kept until the owner deletes them. Anyone with a file's link can open it. Links are unguessable.
• Sign-in records: one-time markers for used codes and refresh tokens. They hold only a hash.
• Audio for transcription: not stored here. It is sent to OpenRouter to be transcribed, and the transcript is returned, not saved.
• Server logs: errors only. The server does not log tool arguments.