How do I install Remind?

Remind is a local plugin. Install it using npm package: @chrischall/remind-mcp and add the generated configuration snippet to your AI app's MCP config file. Then restart your AI app.

Is Remind safe to use?

Yes. Remind passed MCP Marketplace's automated security scan with a score of 10/10 (low risk). Every server on MCP Marketplace is security-scanned before it's listed; see the full security report on this page for the findings and permissions.

What credentials does Remind need?

Remind requires the following credentials or environment variables: REMIND_COOKIE, REMIND_CSRF_TOKEN, REMIND_WS_PORT, REMIND_SESSION_FILE. You can find setup instructions on the server detail page.

What AI apps work with Remind?

Remind uses the Model Context Protocol (MCP) and works with any MCP-compatible AI app, including Claude, ChatGPT / Codex, Gemini, Copilot, Cursor, and more.

Back to Browse

Remind MCP Server

by Chris Hall

Developer ToolsLow Risk10.0Local

Free

Read Remind classes, chats and messages, and manage notification settings.

About

Read Remind classes, chats and messages, and manage notification settings.

Security Report

10.0

Low Risk10.0Low Risk

Valid MCP server (2 strong, 1 medium validity signals). No known CVEs in dependencies. Package registry verified. Imported from the Official MCP Registry. Trust signals: trusted author (113/114 approved); 4 highly-trusted packages.

4 files analyzed · 1 issue found

Security scores are indicators to help you make informed decisions, not guarantees. Always review permissions before connecting any MCP server.

Permissions Required

This plugin requests these system permissions. Most are normal for its category.

file_system

Check that this permission is expected for this type of plugin.

env_vars

Check that this permission is expected for this type of plugin.

What You'll Need

Set these up before or after installing:

Captured Cookie request header from a signed-in remind.com tab. Optional: the ContextMint Bridge extension captures it automatically.Required

Environment variable: REMIND_COOKIE

Captured x-csrf-token request header value. Optional; paired with REMIND_COOKIE.Required

Environment variable: REMIND_CSRF_TOKEN

fetchproxy bridge concentrator port (default 37149).Optional

Environment variable: REMIND_WS_PORT

Path to the cached session file. Defaults to MCP_DATA_DIR/HOME under .remind-mcp.Optional

Environment variable: REMIND_SESSION_FILE

How to Install

Add this to your MCP configuration file:

{
  "mcpServers": {
    "io-github-chrischall-remind-mcp": {
      "env": {
        "REMIND_COOKIE": "your-remind-cookie-here",
        "REMIND_WS_PORT": "your-remind-ws-port-here",
        "REMIND_CSRF_TOKEN": "your-remind-csrf-token-here"
      },
      "args": [
        "-y",
        "@chrischall/remind-mcp"
      ],
      "command": "npx"
    }
  }
}

Documentation

View on GitHub

From the project's GitHub README.

remind-mcp

MCP server for Remind — read your classes, chats and messages, and manage notification settings.

This project was developed and is maintained by AI. Use at your own discretion.

Remind exposes a single GraphQL endpoint that is reachable server-side, so only the credential needs a browser: the session is lifted once from a signed-in tab through the ContextMint Bridge browser extension, and every request after that is a plain server-side fetch.

Install

npx -y @chrischall/remind-mcp

{
  "mcpServers": {
    "remind": { "command": "npx", "args": ["-y", "@chrischall/remind-mcp"] }
  }
}

Authentication

Two headers are captured from a signed-in remind.com tab: the full Cookie header and the x-csrf-token value. Either let the bridge capture them (needs the ContextMint Bridge browser extension and a signed-in tab), or supply them yourself:

Variable	Required	Description
`REMIND_COOKIE`	no	Captured `Cookie` request header. Skips the bridge when set with the next one; once Remind rejects the pair as expired, the server falls back to the bridge (or, without one, tells you to refresh both).
`REMIND_CSRF_TOKEN`	no	Captured `x-csrf-token` value.
`REMIND_WS_PORT`	no	fetchproxy bridge concentrator port (default `37149`).
`REMIND_SESSION_FILE`	no	Where the captured session is cached. Defaults to `$MCP_DATA_DIR`/`$HOME` under `.remind-mcp`.

Install ContextMint Bridge from its releases page: in Chrome, unzip the Chrome build and load it unpacked (chrome://extensions → Developer mode → Load unpacked). Safari isn't available yet (it will ship inside the ContextMint app, which has no public download), so use Chrome for now.

ContextMint Bridge is the fetchproxy browser extension under its new name, from the same maintainer — fetchproxy's own README points to it. Its source is public at https://github.com/nullnet-app/contextmint-bridge: build it yourself, or check a release zip against the .sha256 file published beside it (shasum -a 256 -c contextmint-bridge-chrome-<version>.zip.sha256).

The server boots without either, so a host's install-time tools/list probe succeeds; the error surfaces on the first tool call instead.

The browser is needed once. A captured session is cached (mode 0600) and reused across restarts, and every call after the bootstrap is a plain server-side fetch. This matters because the capture completes only while the signed-in tab is actually issuing a /graphql request — so without the cache, a restart would sit waiting unless you happened to be using Remind.

The cache is bounded: analytics and consent cookies are dropped from the jar before it is used or stored, the record is bound to the Remind account (me.uuid) it authenticated as when captured — a restored session that answers as a different account, or as none, is discarded and re-captured — and it is re-captured from the browser after at most 7 days. An env-supplied session is never restored from the cache.

Tools

Tool
`remind_me`	The signed-in account.
`remind_list_entities`	Classes and chats with unread counts — start here, it yields the uuids.
`remind_get_classes`	Full class detail by uuid.
`remind_list_chats`	Conversation streams and their permissions (`canSend`).
`remind_get_messages`	Messages in a chat stream.
`remind_get_notification_settings`	Preferences and delivery devices.
`remind_set_notification_devices`	Enable/disable delivery devices. Asks you to confirm first.
`remind_send_message`	Send to a chat or class. Asks you to confirm first.
`remind_graphql`	Arbitrary read-only GraphQL; introspection is enabled. Mutations refused.
`remind_healthcheck`	Verify the session still authenticates; on failure `error.kind` names the broken hop (`no_credential`, `credential_rejected`, `edge_blocked`, `http`, `timeout`, `transport`).

Confirmations

Write tools ask you to confirm before anything is sent. A client that can show a confirmation prompt (Claude Code) shows one. Otherwise the first call makes no network call and returns a preview of the exact payload plus a confirmToken; only a repeat call with that token (and the same arguments) performs the write. A token works once, and changing any argument between the two calls voids it.

variable	default
`MCP_CONFIRM_MODE`	`ask-user`	What a write does on a client that cannot show a confirmation prompt (claude.ai, Claude Desktop). `ask-user`: two steps — the first call does nothing and returns a preview plus a token, and the model must get your approval in chat before calling again with it. `auto`: the same two steps, but the model may use the token after reviewing the preview itself. `refuse`: writes are refused on such clients. A client that can show prompts (Claude Code) always gets the real prompt, unless `MCP_CONFIRM_ELICITATION=off`. An unrecognised value is treated as `refuse`.
`MCP_CONFIRM_ELICITATION`	`on`	`off` never shows a confirmation prompt, so every client gets the `MCP_CONFIRM_MODE` behaviour. Set it for a client that says it can show prompts but never does (the write hangs — opencode 2.0.x). Any other value is treated as `on`, with a warning on stderr.
`MCP_CONFIRM_TTL_SECONDS`	`600`	How long a token stays valid.
`MCP_CONFIRM_SECRET`	random per process	Signing key; set it only if tokens must survive a server restart. On mcp-host the host supplies a stable per-child key (`MCP_HOST_CONFIRM_SECRET`) and spent tokens are recorded under `MCP_DATA_DIR`, so an approval survives an idle restart.

Without the server

skills/remind-fpx/ is a shell-only skill covering the same read surface with fpx + curl — no MCP process required.

Notes

An expired session returns HTTP 200 with errors[0].message = "Unauthorized"; the same string also means "your account may not do that" (scheduled messages are owner/teacher-only).
An unknown field reports as Internal service error, not a field error — introspect rather than guess. docs/REMIND-API.md is the capture log.

Development

npm install && npm run build && npm test
npm run test:coverage

License

MIT

Reviews

No reviews yet

Be the first to review this server!

4.8

Local

mcp-creator-python

Free

by mcp-marketplace · Developer Tools

Create, build, and publish Python MCP servers to PyPI — conversationally.

Stars

146

Installs