GETMD

Quickstart / local MCP

Keep local file authority on your machine.

The local bridge is for hosts that need an approved filesystem root. Hosted MCP never accepts a local path.

Security model

Start the bridge

Authenticate first, then allow only the smallest directory the agent needs.

Terminalsh
getmd auth login
getmd mcp serve --allow-root /absolute/path/to/approved-sources

Configure the host

Register a stdio server whose command is getmd and whose arguments are mcp, serve, and the explicit allow-root pair.

  • Use an absolute root.
  • Review symlink and path errors instead of widening the root.
  • Run one bridge per trust boundary.

Test without reading a file

Call getmd_capabilities first. Then name one file inside the approved root and request a temporary output.

Copy for agenttext
Check GetMD capabilities first. Then convert only ./approved-note.txt to agent_context with temporary retention. Report warnings and the output identifier.