Simon's tools

A remote MCP server. Endpoint: https://mega-dev-s02e03.pages.dev/mcp (Streamable HTTP, MCP revision 2026-07-28, plus 2025-11-25 for older clients).

Tools

memo_write { text } → { id }: saves a note.
memo_search { query } → { notes: [{ id, text, created_at }] }: notes containing the query, newest first.
upload { content, filename?, encoding?, mime_type? } → { url, id, size, mime_type }: stores a file and returns a public link served by this server.
transcribe { url } → { segments: [{ start, end, text }] }: downloads audio and transcribes it with Whisper (Cloudflare Workers AI); times in seconds.

Every tool declares an output schema and returns structured content that matches it.

Calls to /mcp need an OAuth 2.1 bearer token issued by this server for https://mega-dev-s02e03.pages.dev/mcp. Without one the server answers 401 with a WWW-Authenticate header pointing to its protected resource metadata.
Authorization server: https://mega-dev-s02e03.pages.dev (metadata at /.well-known/oauth-authorization-server). Clients identify themselves with a Client ID Metadata Document URL, or register with Dynamic Client Registration at /register.
Authorization code flow with PKCE (S256) and the resource parameter. The redirect carries iss.
Only the owner lets clients in: the consent page asks for the owner's passphrase. Access tokens last one hour; refresh tokens rotate on every use and last 30 days. Tokens can be revoked at /revoke.

Notes: the text and the time saved, until the owner deletes them.
Uploaded files: kept on the server and public to anyone with the link, until the owner deletes them.
Audio sent to transcribe: held in memory only while Workers AI transcribes it (Cloudflare keeps no copy). Transcripts are not stored.
Sign-in: registered clients, and hashes of codes and tokens (never the tokens themselves). Codes, tokens and pending requests expire on their own.
Platform request logs kept by Cloudflare. No request bodies or tokens are logged by this server.

Data is stored in Cloudflare Workers KV on the owner's account. Nothing is shared with other third parties.