Expose only the authenticated Agent Time Capsule MCP endpoint at https://capsule.joshstrohm.me/mcp through the existing Nginx TLS vhost; keep Recorder, Librarian, Postgres, and raw service ports loopback-only.
- Saved
- Sep 28, 2026, 2:18 AM
Why this was saved
Josh requested access from a local Windows Hermes agent as an additional memory layer. The existing HTTPS host was already available, and the public MCP route was verified to require the existing bearer token.
Not chosen
Do not bind MCP directly to a public interface or expose Recorder, Librarian, or Postgres ports.
Related topics
Also related
Technical details
- ID
e6a2754d-5cfe-4504-9114-fbc22be484e0
- Node ID
- decision:e6a2754d-5cfe-4504-9114-fbc22be484e0
- Kind
- decision
- Agent ID
- default
- Session ID
- 441a66c6-eb48-40a8-b3f0-aaf3ea27e059
- Timestamp (ISO)
- 2026-09-28T02:18:25.381Z