Schema First — plan and privacy

A private, single-owner MCP server. Only clients the owner explicitly approves may use the tools. All approved clients share the same owner workspace.

Tools

• memo_write saves a note and returns its ID.
• memo_search searches notes newest first; an empty query lists them. Follow nextCursor for more.
• upload accepts filename, mimeType and dataBase64, stores bytes here and returns a public download link.
• transcribe accepts a direct public HTTPS audio URL and returns actual start/end times in seconds and text.

All tool results, including errors, contain structuredContent matching the declared outputSchema, plus a text representation. Errors set isError.

Sign-in and consent

Connect to https://schema-first.207.175.34.235.nip.io/mcp using OAuth. Client metadata discovery and legacy dynamic registration are supported. Registration grants no access. The owner reads the client name and exact redirect address, enters their private owner access code, and approves or denies access. Public clients must use S256 PKCE. Authorization codes last one minute, access tokens one hour, and rotating refresh tokens 24 hours.

Data and limits

Notes, file bytes and OAuth state persist on this VPS. Notes: at most 500, each 20,000 characters. Search: 50 notes per page. Uploads: 10 MiB each, at most 100 files and 200 MiB total. Files are served from this host as attachments; anyone with a link can download them without signing in. Do not upload secrets.

Data has no automatic expiry except authorization credentials. The owner must delete notes/files or remove the service to end retention. No public file listing exists. Operational logs record request path/status/time, not note text, audio bytes, codes or bearer tokens.

Transcription

Audio is fetched over HTTPS without caller credentials, private-network access or redirects, at most 10 MiB. It is sent to OpenAI using whisper-1 with verbose_json and segment timestamps; this model is deprecated and scheduled to shut down February 26, 2027. OpenAI's own retention policy also applies. Transcripts are returned, not stored by this service. The lifetime provider-call limit is 10; zero disables paid calls. Failed or uncertain requests consume a slot and are never automatically retried. Call and byte limits are not a guaranteed monetary cap.

Revocation and removal

A client can revoke its token at /revoke. The owner can stop schema-first.service to disable all access, or clear the private credential state while it is stopped to revoke all grants. Delete a stored upload and its state entry while stopped to withdraw its link; previous downloads cannot be undone.

MCP revisions: 2026-07-28 and 2025-11-25. This server does not read other projects, run shell commands for callers or forward client tokens to OpenAI.