huangdun-tempmdSAFE
MCP server for temp.md — one stable public link for agent-made artifacts, updated in place
Overview
From the repository's own README, as read at the audited commit. Badges and raw HTML are left out.
[](https://glama.ai/mcp/servers/tempmd/tempmd-mcp)
MCP server for temp.md — give agent-made artifacts one stable public link that updates in place.
Publish an HTML, Markdown, CSV, or Mermaid artifact and get a canonical URL like amber-hill-9eb6.temp.md. Push new versions behind the same URL — no re-sharing, ever. Temps expire intentionally when the work goes cold (7-day active window, resets on every update) and can be restored within 7 days of expiry.
Install
Remote — no install
claude mcp add --transport http tempmd https://api.temp.md/mcp
Remote MCP accepts inline UTF-8 or base64 files. Anonymous publishing needs no credential. To publish directly into an account and use account tools, configure the connection with Authorization: Bearer .
Local stdio — best for filesystem access and larger directories
claude mcp add tempmd -- npx -y @tempmd/mcp
Cursor / Windsurf / any MCP client — add to your MCP config:
{
"mcpServers": {
"tempmd": {
"command": "npx",
"args": ["-y", "@tempmd/mcp"]
}
}
}tempmd-mcp remains available as a compatibility package with the same implementation and version.
No account or API key required — temp.md is anonymous-create-first. Claim a Temp later to keep it.
The remote transport is limited to 10 MiB and 20 inline files per bundle. The stdio package uses local paths and supports the full 50 MiB / 100-file bundle.
Tools
76e5d84458edOBSERVED · 2026-10-13Connect
Built from this server's own package name, version and transport as found in its source — not copied from anyone's documentation, so it cannot drift against a page we do not control.
claude mcp add mcp -- npx -y @tempmd/[email protected]
Exposed tools (7)
4 read · 3 write · 0 destructive.
| Tool | Risk | Description |
|---|---|---|
get_temp_status | read | |
list_temps | read | |
publish_temp | write | |
restore_temp | read | |
set_comments | write | |
snapshot_temp | read | |
update_temp | write |
Trust audit
SAFEgrade B · trust 89/100 Nothing in the source contradicts what it says it does. Grade A is reserved for packages that have also passed the behavioural sandbox.
| Layer | What it checks | Result |
|---|---|---|
| L0 | Provenance & inventory | PASS |
| L1 | Static analysis of the code | PASS |
| L2 | Instruction surface (what it tells the agent) | PASS |
| L3 | Class-specific surface | PASS |
| L4 | Behavioural (sandbox) | SKIPPED |
What the source does
- Filesystem
- none-observed
- Network
- declared (5 observation(s))
- Shell
- none-observed
- Dependencies
- not all pinned
- Secrets in source
- none-found
Findings (1)
@modelcontextprotocol/sdk, zod, @types/node, typescript
Gates applied: no_behavioural_pass.
76e5d84458edfull audit observations/trust-audit/mcp-server/tempmd__tempmd-mcp.json · Report an issue / request a re-scanAudit history
Every audit this server has had. A grade with a past is a grade somebody is still checking.
| Date | Source | Verdict | Grade | Score | Change |
|---|---|---|---|---|---|
| 2026-10-13 | 76e5d84458ed | SAFE | B | 89 | first audit |
Questions
What is the huangdun-tempmd MCP server?
MCP server for temp.md — one stable public link for agent-made artifacts, updated in place
What tools does huangdun-tempmd expose?
7 in total: 4 read-only, 3 that write, and 0 that can delete or overwrite. Every one is listed on this page with its risk.
Is huangdun-tempmd safe to connect to an agent?
The audit found nothing in the source that contradicts what it says it does, and graded it B (89/100). Grade A is held back for packages that have also passed a sandboxed behavioural run, which is why a clean server reads B.
What credentials does huangdun-tempmd need?
No credential environment variables were found in its source, so it appears to need none.
How does huangdun-tempmd run?
It speaks stdio and streamable-http, so it runs as a local process your client starts. It is published on npm as tempmd-mcp at 0.4.3.
How current is this page?
The grade is for one exact copy of the source (76e5d84458ed), read on 2026-10-13. The repository is watched and re-audited when it changes.