Zietek tools

A personal MCP server: one home for my tools. Endpoint: https://mcp.zietech.uk/mcp (Streamable HTTP, MCP 2026-07-28; 2025-11-25 still answered for older clients).

What the tools do

• memo_write { text } → { id, created_at }. Saves a text note.
• memo_search { query, limit? } → { notes: [{ id, text, created_at, client }] }. Notes containing every word of the query, newest first. An empty query lists the newest.
• upload { filename, content_base64 | text, mime_type? } → { url, id, size, mime_type }. Stores a file (up to 25 MB) and returns a link under https://mcp.zietech.uk/files/ that anyone can open.
• transcribe { url, language? } → { segments: [{ start, end, text }], language?, duration?, truncated? }, times in seconds. Errors name the URL and say what is wrong with it. Runs Whisper large-v3-turbo on Cloudflare Workers AI.

Every result is returned as structuredContent matching the tool's declared outputSchema. A whole result stays within 1 KB: the same JSON is mirrored as text when it fits, otherwise the text points to structuredContent, and lists (notes, segments) drop their tail with truncated: true.

How sign-in works

• OAuth 2.1 with PKCE (S256). This server is both the resource server and the authorization server (issuer https://mcp.zietech.uk).
• Discovery: protected resource metadata at https://mcp.zietech.uk/.well-known/oauth-protected-resource/mcp, authorization server metadata at https://mcp.zietech.uk/.well-known/oauth-authorization-server. Unauthenticated calls get 401 with a WWW-Authenticate header pointing there.
• Clients identify with a Client ID Metadata Document (preferred) or Dynamic Client Registration at https://mcp.zietech.uk/oauth/register.
• Only the owner can let a client in: the consent page at /authorize shows the client and where access goes, and needs the owner password. There are no other accounts.
• One scope, mcp, covers all four tools. Access tokens are bound to the resource https://mcp.zietech.uk/mcp; tokens for anything else are refused.

What data it keeps

• Memos: the text, the name of the app that saved it and the time, in Cloudflare D1, until the owner deletes them.
• Uploads: the file bytes, name, type, size, the app that uploaded it and the time, in D1. Anyone with the link can open the file.
• Transcriptions: the audio is fetched, sent to Workers AI and not stored; the transcript is returned and not stored.
• Sign-in: client registrations, grants and hashed tokens in Cloudflare KV, until they expire or are revoked.
• Cloudflare request logs. Nothing is shared with anyone else.

Questions or removal requests: the owner of mcp.zietech.uk.