Server data from the Official MCP Registry
Self-hosted MCP server for speech: ASR transcription, TTS synthesis, and file staging tools.
Self-hosted MCP server for speech: ASR transcription, TTS synthesis, and file staging tools.
This is a well-architected speech-to-text/text-to-speech MCP bridge server with proper authentication support and reasonable security controls. The codebase shows good engineering practices with input validation, path traversal protection, and error handling. However, there are several moderate-severity issues: optional bearer token authentication that defaults to disabled, unvalidated file symlink handling, broad exception catching in critical paths, and potential sensitive data exposure in debug logging. These issues are mitigated by the server's self-hosted design and the fact that users must explicitly enable authentication. Supply chain analysis found 8 known vulnerabilities in dependencies (0 critical, 5 high severity).
4 files analyzed · 15 issues found
Security scores are indicators to help you make informed decisions, not guarantees. Always review permissions before connecting any MCP server.
This plugin requests these system permissions. Most are normal for its category.
Add this to your MCP configuration file:
{
"mcpServers": {
"io-github-psyb0t-talkies": {
"args": [
"-y",
"@psyb0t/talkies"
],
"command": "npx"
}
}
}From the project's GitHub README.
Self-hosted speech services in one Docker image: OpenAI-compatible file transcription and text-to-speech, Talkies live ASR over WebSocket, file staging, model lifecycle controls, and an MCP endpoint for ASR workflows.
Restrict the first boot to the models you need; otherwise the entrypoint downloads every model in the bundled registry.
docker run --rm -it --name talkies \
-p 127.0.0.1:8000:8000 \
-v "$PWD/talkies-data:/data" \
-e TALKIES_ENABLED_MODELS=whisper-large-v3-turbo,kokoro-82m \
psyb0t/talkies:latest
curl -s http://127.0.0.1:8000/healthz
curl -s http://127.0.0.1:8000/v1/audio/transcriptions \
-F "file=@/path/to/clip.wav" \
-F "model=whisper-large-v3-turbo"
For CUDA-only models and Qwen3 TTS, use psyb0t/talkies:latest-cuda with
--gpus all. The loopback port mapping keeps the service local; see
Getting started for first boot and authentication.
| Surface | Purpose | Reference |
|---|---|---|
POST /v1/audio/transcriptions | File transcription and subtitles | HTTP API |
WS /v1/audio/transcriptions/stream | Live 16 kHz PCM ASR | Streaming |
POST /v1/audio/speech | Speech synthesis in six formats | HTTP API |
GET/PUT/DELETE /v1/files/* | Server-side file staging | HTTP API |
/api/ps, /unload | Model inspection and eviction | Operations |
/v1/mcp | Streamable HTTP MCP with ASR/file tools | HTTP API |
The HTTP transcription and speech routes use the corresponding OpenAI wire shapes where those contracts overlap. Streaming ASR, files, lifecycle controls, and MCP are Talkies extensions.
response_format="pcm"; other TTS formats and Kokoro are buffered.Exact slugs, executors, and registry format: Models and registries.
| Guide | Contents |
|---|---|
| Getting started | Run CPU/CUDA, persist data, authenticate, verify |
| Models and registries | Bundled slugs, image availability, custom registries |
| Architecture | Request flow, backend selection, on-disk layout |
| HTTP API | Requests, responses, files, lifecycle, MCP |
| Streaming | Live ASR protocol, streaming backends, PCM TTS |
| Configuration | Supported environment variables and limits |
| Operations and security | Exposure, model memory, data retention, logs |
| Development | Make targets, test suites, image builds |
TALKIES_AUTH_TOKEN enables a shared bearer token for every HTTP and WebSocket
route except /healthz. It is unset by default. Keep the port loopback-only or
put Talkies behind TLS, authentication, and rate limiting. If untrusted callers
can supply remote file_path URLs, set TALKIES_BLOCK_PRIVATE_DOWNLOADS=true.
See Operations and security for the complete posture.
make check # lint + unit tests in the dev image
make test-streaming # real CPU native WebSocket ASR test
make test-streaming-custom # real Sherpa-ONNX and Vosk WebSocket tests
make build-all # CPU and CUDA production images
Talkies is released under the WTFPL. Model weights are downloaded at runtime and have their own terms; image component notices are in THIRD_PARTY.md. Release notes are in CHANGELOG.md.
Be the first to review this server!
by Modelcontextprotocol · Developer Tools
Read, search, and manipulate Git repositories programmatically
by Toleno · Developer Tools
Toleno Network MCP Server — Manage your Toleno mining account with Claude AI using natural language.
by mcp-marketplace · Developer Tools
Create, build, and publish Python MCP servers to PyPI — conversationally.