An AI assistant on your home network, such as Claude Desktop, Cursor or Claude Code, can read one person's library through the Model Context Protocol (MCP): find the photos of a trip, look at them, say which camera took what, count what was taken last summer and, when you allow it, mark favourites or move a photo to the trash.
Like the rest of Filamama, it comes with the first public release.
1. Make a token
In the web app, an administrator opens Settings › Agents › New token and chooses:
- the account the assistant will act as;
- a name, so you know later which assistant this is;
- whether to allow writing: off, the assistant only reads; on, it may also favourite, move to the trash and restore;
- an expiry: never, or 30, 90 or 365 days.
The next dialog shows the token once. Copy it now: only its hash is kept. The dialog also shows the server's address, the key to pin (a 64-digit fingerprint), its safety code, and the configuration for each assistant, already filled in.
2. Download the bridge
The bridge, filamama-mcp.mjs, passes the assistant's messages to the server over a connection pinned to the server's key. Download it from the dialog's link, or from https://<your server>:5400/filamama-mcp.mjs, and keep it somewhere stable. It needs Node.js 20 or newer, and nothing else.
3. Paste the configuration
Claude Desktop: put the snippet in claude_desktop_config.json and restart Claude Desktop. On macOS it is ~/Library/Application Support/Claude/claude_desktop_config.json; on Windows, %APPDATA%\Claude\claude_desktop_config.json.
Cursor: put the same snippet in ~/.cursor/mcp.json for every project, or in .cursor/mcp.json inside one project.
{
"mcpServers": {
"filamama": {
"command": "node",
"args": ["/Users/me/filamama-mcp.mjs", "--server", "https://192.168.1.20:5400", "--pin", "9f2c…64 hex digits…"],
"env": { "FILAMAMA_TOKEN": "dms_agent_…" }
}
}
}
Claude Code: one command in a terminal:
claude mcp add filamama -e FILAMAMA_TOKEN=dms_agent_… -- node /Users/me/filamama-mcp.mjs --server https://192.168.1.20:5400 --pin 9f2c…
Then ask the assistant something, such as "what is in my photo library?".
Why it is safe
- Home network only, and every exchange is TLS pinned to the server's key: a server with another key gets nothing, not even the token.
- Each token reads one account's library and nothing of anyone else's. Only an administrator makes tokens.
- Read-only by default. Nothing is ever deleted for good from an assistant, nothing is uploaded, no album is changed.
- Rate limits, and every call kept for 90 days under Settings › Agents › Activity.
The server speaks MCP itself too, at https://<your server>:5400/mcp, for an assistant that can trust the server's certificate directly.