mcp server

rifugio--community

我们的港湾

anrrow2002-ctrl/rifugio--communitycommunitylistedunreviewednot running here yet

Use tool

Set up

Runs on your computer. Pick your agent and operating system.

This project does not publish an install method we can turn into a config. Follow the README instead.

README

synced Oct 14, 2026

Rifugio Community

A self-hostable home for AI conversations, long-term memory, and MCP tools.

This is a clean-room community edition: application code and empty templates only. Production memories, chat logs, health data, media, credentials, private domains, and private Git history do not belong here.

What stays private

.env: credentials and cryptographic secrets
private/profile.json: names and relationship identity
private/features.json: optional personal integrations
private/persona.md: optional private persona prompt
data/: SQLite databases and generated files

All of them are ignored by Git.

Quick start (computer or NAS)

node scripts/setup.mjs
# edit private/profile.json
npm run privacy:scan
docker compose up -d --build

Open http://localhost:8080. The API creates empty databases and schemas on first start. Its health endpoint performs a rolled-back SQLite read/write probe, so it verifies storage without leaving test data.

Android phone-only hosting is documented in Termux deployment. See deployment, architecture, and the safe publishing checklist.

When radio is enabled, the Music settings page supports real NetEase Cloud Music QR login, account status, personal playlists/favorites, and logout. The login cookie stays encrypted on the self-hosted API and is never exposed to the browser. This is an unofficial integration and remains subject to NetEase network/device risk controls.

Layout

apps/web — installable PWA frontend
apps/api — HTTP API and provider orchestration
packages/mcp — canonical remote MCP server
config — public example configuration
private — ignored local identity and secrets
data — ignored databases and generated media

Security defaults

Arbitrary shell execution is not part of the Community MCP. Health, radio, image, voice, toy, and CLI bridge integrations are off by default. The API bridge uses an allowlist. MCP accepts a bearer token at /mcp; legacy token-in-path transport remains compatible but should not be placed in proxy access logs.

License and attribution

Rifugio-authored code is available under the Apache License 2.0 in LICENSE. UI or virtual-phone portions that may be adapted from SullyOS / 手抓糯米机 remain subject to the PolyForm Noncommercial License 1.0.0. See NOTICE and the included PolyForm license.

Redistributors must preserve all three files and the Required Notice. Commercial use is not authorized for SullyOS-derived portions without separate permission or a provenance audit that removes/replaces them.

Community builds ship emoji/character App launcher defaults rather than third-party photo icons. The installable PWA icons are separate project assets.