Back to Browse

Freero MCP Server

Developer ToolsModerate5.0MCP RegistryLocalRemote
Free

Server data from the Official MCP Registry

A collaborative whiteboard your AI assistant can read, fill and show live, with changes you review.

About

A collaborative whiteboard your AI assistant can read, fill and show live, with changes you review.

Remote endpoints: streamable-http: https://freero.app/mcp

Security Report

5.0
Moderate5.0Moderate Risk

Freero is a real-time collaborative whiteboard with a Tauri desktop shell, a Zapier integration, and an Express/WebSocket server. Nothing in the visible code shows exfiltration, shell execution, or hardcoded production secrets. Findings are limited to low-severity items: a documented development demo login, an auto-update check against a hardcoded GitHub endpoint, and some discarded errors. The server's API auth handlers were truncated and not reviewed, so the auth assessment is partial. Supply chain analysis found 10 known vulnerabilities in dependencies (0 critical, 3 high severity).

15 files analyzed · 16 issues found

Security scores are indicators to help you make informed decisions, not guarantees. Always review permissions before connecting any MCP server.

Permissions Required

This plugin requests these system permissions. Most are normal for its category.

HTTP Network Access

Connects to external APIs or services over the internet.

network_websocket

Check that this permission is expected for this type of plugin.

File System Read

Reads files on your machine. Normal for tools that analyze or process local data.

File System Write

Writes or modifies files on your machine. Check that this is expected for the tool.

env_vars

Check that this permission is expected for this type of plugin.

database

Check that this permission is expected for this type of plugin.

notifications

Check that this permission is expected for this type of plugin.

How to Install & Connect

Available as Local & Remote

This plugin can run on your machine or connect to a hosted endpoint. during install.

Documentation

View on GitHub

From the project's GitHub README.

Freero

An original real-time collaborative whiteboard: an infinite canvas for teams to brainstorm, plan, diagram and run workshops together.

What's in it

  • Canvas — infinite pan/zoom, dot grid, minimap, snapping and alignment guides, multi-select, resize/rotate, groups, lock, undo/redo, copy/paste across boards, drag-and-drop import.
  • Content — sticky notes, 21 shapes, rich text, connectors (straight/elbow/curved, attached, labelled), pen + highlighter + eraser, images, emoji and stamps, frames, task cards, mind maps, tags, PDFs, video and audio that play on the board, and file cards for any other file.
  • Collaboration — live sync, cursors and selections, avatars, follow a collaborator, "bring everyone to me", emoji reactions, comment threads, owner/editor/commenter/viewer roles, share by invite or link.
  • Facilitation — voting sessions, a shared timer, presentation mode over frames.
  • Templates & export — 180 original templates in 18 categories; export PNG/JPG/SVG, frames to PDF, copy as image.
  • Dashboard — boards grid/list, search, filters, stars, live thumbnails, duplicate, sharing.

Run it

Requires Node 22+.

npm install
npm run dev          # server on :4000 + web on :5173

Open http://localhost:5173 and log in with the seeded demo account demo@freero.app / freero123 (development only), or sign up. http://localhost:5173/board/local is an offline sandbox board that needs no server.

Production:

npm run build && npm start     # serves the built web app and the marketing site (apps/site) on :4000
docker compose up --build -d   # or the full stack: proxy, 2 app replicas, Postgres, Redis, MinIO, Mailpit on :8080

Deploying for real: docs/deployment.md · every setting: docs/configuration.md · backups, monitoring, incidents: docs/operations.md.

Configuration: PORT (default 4000), FREERO_DATA_DIR (default ./data — the built-in PGlite database in data/pg + uploads), DATABASE_URL (use a real Postgres instead), DATABASE_POOL_MAX (default 10). Had boards from before the move to Postgres? Stop the dev server and run npm run db:import-sqlite once.

Develop

CommandWhat it does
npm run checkArchitecture boundaries + typecheck + unit tests
npm run verifyReal-session end-to-end check: real server, real Yjs WebSocket clients, roles, persistence
npm run new:feature <name> -- …Scaffold a feature folder (see ARCHITECTURE.md)
node scripts/ui-shot.mjs --url … --out …Drive the real UI in headless Chromium and screenshot it

Freero follows the Dune method: features are isolated folders discovered by reserved file names, every piece of state has one writer, and forbidden dependencies fail npm run check with an error that names the supported path. Read ARCHITECTURE.md before changing code.

Stack: React 18 + TypeScript + Vite, Yjs (CRDT) over WebSockets, Express + ws, PostgreSQL (pg; PGlite for dev/tests), Playwright for UI verification.

License

MIT. Dependencies are kept to permissive licences (MIT, Apache-2.0, MPL-2.0); GPL, AGPL and source-available projects are integrated at the protocol level only, never vendored.

Reviews

No reviews yet

Be the first to review this server!