FAQ
Frequently asked questions
Short, honest answers. For detail, follow the links to the full pages.
Common questions
What is Aki MCP Server?
A local-first, open-source MCP server you run locally. Local IDEs (Postman, Cursor, Claude Code, AGY, Codex) connect directly over 127.0.0.1 (offline, no tunnel); web AIs (Claude, ChatGPT, Grok) connect over an optional ingress. All safely use your files, shell, browser, git and SQLite, gated by OAuth 2.1 / Bearer auth.
Is it free?
Yes. It is open source under the MIT license and free to self-host.
Which AI clients are supported?
Local (direct over 127.0.0.1): Postman, Cursor, Claude Code, AGY, and Codex. Web (over optional ingress): Claude web, ChatGPT and Grok are dependable; Gemini is experimental.
Do I need to keep my computer on?
For remote use, yes: your machine must be powered on with the server running. Closing the terminal stops it.
What can the AI access by default?
By default the file root is your whole home folder plus ~/.aki and ~/.claude, and the shell allowlist is inspection-first with a few pre-approved dev helpers that can write. Narrow the folders and review the allowlist in the panel on a sensitive machine.
Do I need a desktop app?
No. It connects your existing web AI clients, with no desktop app and no device lock-in.
What operating systems does it run on?
Windows, Linux and macOS with Node.js 22. On Windows you also need Git for Windows (or WSL) on PATH.
How is this different from the Claude Desktop app?
It uses your cheaper web/Pro quota, supports multiple accounts by switching browser profiles, and has no device lock-in.
How do I expose it over HTTPS?
Only needed for remote web AIs — local IDEs work over 127.0.0.1 with no ingress. For web AIs, Tailscale Funnel is the zero-config default; you can also use a Cloudflare named tunnel or your own HTTPS origin.
How do I revoke access?
Open panel section 7, press Remove on the client, then Roll token. If a secret may have leaked, use Roll & sign out all clients so every AI reconnects with the passphrase.
Can someone guess my passphrase?
Guessing is throttled: 5 rejected credentials in 60 seconds block that caller for 15 minutes with a 429, and a security log records the attempts. Your own valid token is never blocked. The limits are editable in panel section 7.
How do I see who is connected?
Panel section 7 lists every client with first seen, last approval and last token grant, the addresses active since the last restart, and the newest 200 security log lines.
How many tools are there?
36 tools, from files and shell to browser automation, git, SQLite, background tasks and Postman control. See What’s new for the latest changes.