Personal MCP agent: shell, files, memory, goals, inbox, scheduler, capability URL + self-hosted OAuth
Wellknown found it in public sources; nobody has proven control of it yet. Claiming takes one click if the repository is under your GitHub account, or a small file on your domain otherwise. Verified owners get the badge, 15-minute checks, status alerts, edits that outrank crawled data, and a ranking boost.
Agents can do it too: POST https://wellknown.network/api/v1/claims with {"agent":"dot-mcp","method":"well_known_file"} — machine-readable steps at claim.json, guide at /docs/claim.
Everything here was measured by our prober or read from a registry. Nothing is self-reported.
Attributed to the source that supplied each field. Treated as claims, not facts.
# dot-mcp Personal MCP agent for ChatGPT, Claude, and Gemini: shell, files, memory, goals, tasks, inbox, scheduler, and self-hosted OAuth — running on your own machine. > ⚠️ The server gives full shell access to whoever holds a credential. > Expose it only while you use it, then stop it (`dot-mcp stop`). ## Install ```bash pip install dot-mcp ``` Requires Python 3.10+ and OpenSSH (`ssh`, `ssh-keygen`) for the tunnel. ## Use ```bash dot-mcp start # server + public URL (runs in background) dot-mcp status # check if it is running dot-mcp stop # stop server + tunnel ``` `dot-mcp start` prints everything the connector needs: ``` Public URL https://xxxx.tunnl.gg/mcp/ Owner secret <stored on your machine> OAuth Client ID dots-xxxxxxxx OAuth Client secret <stored on your machine> ``` Add the **Public URL** as a custom MCP connector (auth = OAuth). Approve once with the owner secret when asked. The tunnel URL stays the same on restart; the free tunnel expires after 24h or 2h idle. Linux/Termux is the supported runtime for process management. Stop only affects processes started with the new ownership records. If upgrading from an older version, stop its server/tunnel before starting this version; bare legacy PID files are deliberately not trusted. `DOT_MCP_STATE_DIR` overrides the complete credential/SSH-key directory (default `~/.config/dot-mcp`), not its parent. This is separate from `--data-dir`. File paths are relative to `$HOME` unless absolute. Absolute paths retain their location and must fall within `$HOME`, `$TMPDIR`, or available shared storage; other paths are rejected, not silently placed under HOME. On Android, when `$TMPDIR` is outside `/tmp`, `/tmp` and `/tmp/...` map to `$TMPDIR`. File tools return the effective `path`. Shell command text is never remapped, so use that effective path in shell commands when this mapping applies. File roots are guardrails, not a shell sandbox. A shell credential still grants fu…
Mapped onto the structured taxonomy from declared text and observed tool names. Confidence shown for derived entries.
Every source is kept verbatim. Field changes are logged as events.