Server plan

This is a personal MCP server. Its MCP endpoint is https://schema-first-14a046.swedencentral.cloudapp.azure.com/mcp. It speaks MCP 2026-07-28 and 2025-11-25 over Streamable HTTP.

What the tools do

memo_write	Saves a note and returns its id. Limit: 64 KB per note, 10000 notes.
memo_search	Finds notes that contain every word of the query, newest first, at most 50.
upload	Stores a file and returns a public link served by this server. Limit: 25 MB per file, 2 GB in total.
transcribe	Turns audio or video at a public URL into timestamped text. Limit: 30 minutes per call, 120 minutes per day, 100 MB per download.

How sign-in works

Only clients the owner lets in can use the tools. The server is its own OAuth 2.1 authorization server. A client finds it through the protected resource metadata, identifies itself with a client ID metadata document or dynamic registration, and uses the authorization code flow with PKCE (S256).

The owner sees an approval page that names the client and types a passphrase to approve it. There are no accounts for anyone else. To get access, ask the owner.

Access tokens last 1 hour and work only on this server's MCP endpoint. Refresh tokens last 30 days and change on every use. The owner can revoke a client at any time.

What data it keeps

Notes: the text, the time, and the client that wrote it, until the owner deletes them. Every approved client can read every note.
Uploaded files: kept until the owner deletes them. Anyone with the link can open a file.
Sign-in records: client names and redirect addresses until removed, and hashes of tokens until they expire or are revoked. Tokens themselves are not stored.
Audio: kept only during the call, then deleted. The server keeps no transcript.
Logs: request method, path, tool, client, status and duration. Logs hold no note text, file contents or tokens.

Who else gets data

Audio sent to transcribe goes to OpenAI (whisper-1) for transcription, under OpenAI's API terms. No other service receives your data. The server runs on a virtual machine in Microsoft Azure, in Sweden.

Limits on outside addresses

transcribe fetches only public http and https addresses on the default ports. It refuses private, loopback, link-local and cloud metadata addresses, including after a redirect.

Run by the owner of this server as coursework for MEGA.dev, not as a public service. No uptime is promised.