mega-mcp

A remote MCP server with one owner. It keeps notes, hosts files behind public links and transcribes audio. The MCP endpoint is https://mega-mcp-uejj.4crp.app/mcp (Streamable HTTP, protocol revision 2026-07-28, and 2025-11-25 for older clients).

Tools

Tool	Input	Result
`memo_write`	`{ text }`	`{ id }`. Saves a text note.
`memo_search`	`{ query, limit? }`	`{ notes: [{ id, text, createdAt }] }`. Notes that contain every word of the query, newest first. An empty query lists the newest notes.
`upload`	`{ filename, content? \| text? \| url?, mimeType? }`	`{ url, id, filename, size, mimeType }`. Stores a file (base64 `content`, plain `text`, or a public `url` to copy) and returns a link anyone can open, served from `https://mega-mcp-uejj.4crp.app/files/`. Up to 25 MB.
`transcribe`	`{ url }`	`{ segments: [{ start, end, text }], text, language, duration }`, times in seconds. Runs Whisper (small model) on this server. Audio up to 100 MB; one transcription runs at a time.

Every result is structured content that matches the output schema the tool declares in tools/list, with the same JSON as text.

Sign-in

The server is an OAuth 2.1 protected resource. A request without a valid token gets 401 with a WWW-Authenticate header that points to https://mega-mcp-uejj.4crp.app/.well-known/oauth-protected-resource/mcp.
The authorization server is this host (https://mega-mcp-uejj.4crp.app/.well-known/oauth-authorization-server). Clients identify themselves with a Client ID Metadata Document (an https client_id) or register with Dynamic Client Registration at https://mega-mcp-uejj.4crp.app/register.
The authorization code flow needs PKCE with S256 and the resource parameter https://mega-mcp-uejj.4crp.app/mcp. The authorization response carries iss.
The owner approves every client on a consent page with a passcode only the owner knows. Nobody else can let a client in.
The one scope is mcp. Access tokens last one hour; refresh tokens last 30 days and change on each use. Tokens work only for this server.

Data it keeps

Notes: the text, an id, the time it was saved and the client that saved it. Kept until the owner deletes them.
Uploaded files and their name, type and size. Anyone with a file's link can open it, so do not upload secrets.
Audio sent to transcribe is downloaded to a temporary folder and deleted when the transcription ends. Only the result is returned; nothing is stored.
OAuth: registered clients (id, name, redirect URIs) and hashes of codes and tokens, removed when they expire.
A request log on the host: time, method, path, status and duration. No request bodies and no tokens.

Everything runs on the owner's own machine. Nothing is sent to a third party, apart from fetching the public URLs a caller asks for.