toolhome

A remote MCP server with four tools: notes, file upload and audio transcription. This page is its plan: what the tools do, how sign-in works and what data it keeps.

Endpoint

MCP endpoint: https://megadevs02e03.cloud-tek.io/mcp (Streamable HTTP, POST only).

Protocol revisions: 2026-07-28 (stateless, per-request _meta, server/discover) and, for older clients, 2025-11-25, 2025-06-18, 2025-03-26 through initialize. No sessions are minted.

Tools

`memo_write`	Saves a note on this server and returns its id. Notes are shared by every client the owner has let in. Input: `text` · Result: `id, created_at`
`memo_search`	Finds saved notes whose text contains the query (case-insensitive; every word must match, else notes matching most words come first). Newest first. An empty query returns the newest notes. Input: `query, limit` · Result: `notes`
`upload`	Stores a file on this server and returns a public link to it, served by this server; anyone with the link can open it. Give the file as content_base64 (bytes), text (UTF-8 text) or url (this server fetches it). Up to 25 MB. Input: `filename, content_base64, text, url, mime_type` · Result: `url, id, filename, mime_type, size`
`transcribe`	Turns speech in an audio file at a URL into timestamped text (Whisper on Cloudflare Workers AI). Works with links from upload. Returns segments with start and end in seconds from the start of the audio. Up to 25 MB. Input: `url, language` · Result: `segments, text, language, duration`

Every successful result is returned as structuredContent that matches the tool's outputSchema, plus the same JSON as text. Errors come back with isError: true and a short reason.

Sign-in

A call to /mcp without a token returns 401 with WWW-Authenticate: Bearer resource_metadata="https://megadevs02e03.cloud-tek.io/.well-known/oauth-protected-resource/mcp".
The protected resource metadata names this host as the authorization server. Its metadata is at https://megadevs02e03.cloud-tek.io/.well-known/oauth-authorization-server.
Clients identify with a Client ID Metadata Document (an https client_id URL) or register at https://megadevs02e03.cloud-tek.io/register (Dynamic Client Registration).
OAuth 2.1 authorization code flow with PKCE (S256 only) and the resource parameter https://megadevs02e03.cloud-tek.io/mcp. The authorization response carries iss.
The owner of this server approves each client on the consent page with the owner password. Nobody else can let a client in.
Access tokens last 1 hour and are bound to https://megadevs02e03.cloud-tek.io/mcp. Refresh tokens last 30 days and rotate on each use. Scope: mcp.

Data kept

Notes: text, time written and the name of the client that wrote it. Kept until the owner deletes them. Every signed-in client can search every note.
Uploaded files: the bytes, file name, media type and size, up to 25 MB each. Anyone with a file's link can open it. Kept until the owner deletes them.
Transcriptions: audio is fetched, sent to Whisper on Cloudflare Workers AI, and the transcript is returned. Neither the audio nor the transcript is stored, unless the audio was uploaded.
Sign-in: registered client names and redirect URIs, and hashes of codes and tokens (never the tokens themselves). Expired rows are deleted.
Logs: method, path, status, tool name and client name, kept by Cloudflare for a few days. No tokens, passwords or note text are logged.

Hosted on Cloudflare Workers with a Durable Object (SQLite). Contact: the owner of megadevs02e03.cloud-tek.io.