TinyCloud MCP Server: Setup for Claude, ChatGPT and Cursor

• Reads your personal records (hosted only)

  Reads records such as logged weight or notes from your default TinyCloud space and returns each record with its ETag, which you need before editing it.

  Try: “What did I log for my weight this week?”

  Network · tinycloud_apps_read

• Creates, edits, moves or deletes personal records (hosted only)

  Changes personal records in batches of up to ten operations. Put without an ETag creates a new record, edits need the current ETag, and delete removes a record. The README says to check each operation, because a batch can partly fail.

  Try: “Log my weight: 80.5 kg today.”

  Delete · tinycloud_apps_write

• Loads the rules and catalog for personal records (hosted only)

  Supplies the record kinds and rules the assistant follows, and can save your timezone. It asks for an IANA timezone once, not your city.

  Try: “Set my timezone to Europe/Berlin for my records.”

  Write · tinycloud_apps_context

• Searches a fast copy of your records (hosted only)

  Queries an optional searchable copy of your records. It can refresh or rebuild that copy first, which is why the tool is marked as changing data.

  Try: “How many workouts did I log last month?”

  Delete · tinycloud_apps_query

• Starts the sign-in for the hosted server (hosted only)

  Returns a short-lived browser link to approve the connection with your OpenKey account the first time, and reports whether the account is connected. Approval links last 15 minutes.

  Try: “Connect to my TinyCloud account.”

  Network · tinycloud_connect

• Checks that the TinyCloud server is working

  Reports the status of the MCP server and its connection to the TinyCloud node.

  Try: “Is TinyCloud connected?”

  Read · tinycloud_status

• Shows whether you are signed in

  Reports your current sign-in state without asking you to sign in.

  Try: “Am I signed in to TinyCloud?”

  Read · tinycloud_auth_status

• Lists what the assistant is allowed to do

  Shows the permissions you have already approved, so the assistant knows what it can do before it asks for more.

  Try: “What can the assistant access in my TinyCloud?”

  Read · tinycloud_auth_capabilities

• Asks for permission to do one exact thing

  Creates a request for the exact space and key, prefix or database the assistant needs. It returns an approval step instead of widening access, and the request is saved so you can approve it later.

  Try: “Ask for permission to read my notes folder.”

  Write · tinycloud_auth_request

• Imports an approved permission (local only)

  Stores a permission you approved, bound to the request it answers, in your local TinyCloud profile. The server refuses a permission broader than its request.

  Try: “Import the permission I just approved.”

  Write · tinycloud_auth_import

• Lists your TinyCloud spaces

  Lists the storage spaces on your TinyCloud account. The output is marked sensitive.

  Try: “List my TinyCloud spaces.”

  Network · tinycloud_account_spaces_list

• Lists apps connected to your account

  Lists the applications on your account. The output is marked sensitive.

  Try: “Which apps are connected to my TinyCloud?”

  Network · tinycloud_account_applications_list

• Lists the knowledge bundles apps keep for assistants

  Lists installed apps that ship a knowledge bundle and the concept files in each. These are separate from the personal-record tools.

  Try: “Which of my apps have knowledge files?”

  Network · tinycloud_knowledge_list

• Reads an app's knowledge index or one concept

  Reads an app's index, or one concept file with its header parsed. The README says to read the index first and open only the concepts the task needs.

  Try: “Read the index of my budgeting app's knowledge.”

  Network · tinycloud_knowledge_read

• Lists keys in your key-value storage

  Lists keys under a space and prefix you name, within the permission you approved.

  Try: “List the keys under notes/ in my default space.”

  Network · tinycloud_kv_list

• Reads a stored value

  Reads one value by key. It returns text, JSON or base64 content.

  Try: “Get the value stored at notes/todo.”

  Network · tinycloud_kv_get

• Checks a value's details without reading it

  Returns a key's metadata, including the ETag you need for a guarded replace or delete.

  Try: “Check whether notes/todo changed.”

  Network · tinycloud_kv_head

• Saves or replaces a value

  Writes a text, JSON or base64 value to a key. It can be guarded by an ETag so it only replaces the version you read.

  Try: “Save this list to notes/todo.”

  Write · tinycloud_kv_put

• Deletes a stored value

  Deletes the value at a key, optionally guarded by an ETag. This is marked destructive.

  Try: “Delete notes/old-draft.”

  Delete · tinycloud_kv_delete

• Shows the tables in a database

  Reads the schema of a SQLite database you have approved, so the assistant knows the tables and columns before it queries.

  Try: “What tables are in my app database?”

  Network · tinycloud_sql_schema_inspect

• Runs a read-only SQL query

  Runs a bounded, read-only SQLite query. Results over 100,000 characters return a size error with advice to narrow the query.

  Try: “Show the last 10 rows of my expenses table.”

  Network · tinycloud_sql_query

• Changes data with one SQL statement

  Runs a single parameterized INSERT, UPDATE or DELETE. It needs an explicit acknowledgement that the approved write permission covers the whole database.

  Try: “Delete the expense row with id 42.”

  Delete · tinycloud_sql_execute

• Reads a secret you have shared

  Returns the value of a named delegated secret. Values stay in the structured result, but your AI app may keep them in its own chat history.

  Try: “Get the value of my STRIPE_TEST_KEY secret.”

  Write · tinycloud_secrets_get

• Checks if a secret is ready (local only)

  Reports without reading any value whether each named secret is ready, pending a setup link, or waiting for consent. It never signs in.

  Try: “Are my deploy secrets ready?”

  Files · tinycloud_secrets_status

Watch out for

• It can overwrite and delete your data

  The key-value delete, SQL execute and personal-record write tools can remove or change data inside the access you approved. Approve narrow requests and read before you edit. github.com

• The tool can hand secrets to your chat

  The secrets tool returns secret values, and the README warns that AI apps may keep structured results in their own transcripts. Only use it with a client whose retention suits secrets. npmjs.com

• Hosted mode sends your data to TinyCloud

  Requests go through mcp.tinycloud.xyz. The README says the privacy flag on personal-record tools is not a claim that the service cannot see plaintext. Keep passwords, card data, government IDs and health data out. npmjs.com

• Hosted approvals cannot be revoked from the server

  The README says delegations have no MCP-side revoke route and expire after their lifetime (30 days in production). Revoke them on the TinyCloud account site, since OAuth revocation does not remove them. npmjs.com

• The local server needs your owner profile

  Local mode runs data tools only for an explicitly chosen profile with the allow-owner-profile flag. Use a profile you are happy to give the assistant. npmjs.com

Security advisories