# Rifugio Community

> 我们的港湾

- **Type:** MCP server
- **Install:** `agentstack add mcp-anrrow2002-ctrl-rifugio-community`
- **Verified:** Yes — security-reviewed for prompt injection and unsafe behavior
- **Seller:** [anrrow2002-ctrl](https://agentstack.voostack.com/s/anrrow2002-ctrl)
- **Installs:** 0
- **Category:** [Databases](https://agentstack.voostack.com/c/databases)
- **Latest version:** 0.1.0
- **License:** Apache-2.0
- **Upstream author:** [anrrow2002-ctrl](https://github.com/anrrow2002-ctrl)
- **Source:** https://github.com/anrrow2002-ctrl/rifugio--community

## Install

```sh
agentstack add mcp-anrrow2002-ctrl-rifugio-community
```

Requires the [AgentStack CLI](https://agentstack.voostack.com/docs/cli). Works with Claude Code, Cursor, and any MCP-compatible agent.

## About

# Rifugio Community

A self-hostable home for AI conversations, long-term memory, and MCP tools.

This is a clean-room community edition: application code and empty templates only. Production memories, chat logs, health data, media, credentials, private domains, and private Git history do not belong here.

## What stays private

- `.env`: credentials and cryptographic secrets
- `private/profile.json`: names and relationship identity
- `private/features.json`: optional personal integrations
- `private/persona.md`: optional private persona prompt
- `data/`: SQLite databases and generated files

All of them are ignored by Git.

## Quick start (computer or NAS)

```sh
node scripts/setup.mjs
# edit private/profile.json
npm run privacy:scan
docker compose up -d --build
```

Open `http://localhost:8080`. The API creates empty databases and schemas on first start. Its health endpoint performs a rolled-back SQLite read/write probe, so it verifies storage without leaving test data.

Android phone-only hosting is documented in [Termux deployment](docs/TERMUX.md). See [deployment](docs/DEPLOYMENT.md), [architecture](docs/ARCHITECTURE.md), and the [safe publishing checklist](docs/PUBLISHING.md).

## Layout

- `apps/web` — installable PWA frontend
- `apps/api` — HTTP API and provider orchestration
- `packages/mcp` — canonical remote MCP server
- `config` — public example configuration
- `private` — ignored local identity and secrets
- `data` — ignored databases and generated media

## Security defaults

Arbitrary shell execution is not part of the Community MCP. Health, radio, image, voice, toy, and CLI bridge integrations are off by default. The API bridge uses an allowlist. MCP accepts a bearer token at `/mcp`; legacy token-in-path transport remains compatible but should not be placed in proxy access logs.

## License and attribution

Rifugio-authored code is available under the Apache License 2.0 in [LICENSE](LICENSE). UI or virtual-phone portions that may be adapted from [SullyOS / 手抓糯米机](https://github.com/qegj567-cloud/SullyOS) remain subject to the PolyForm Noncommercial License 1.0.0. See [NOTICE](NOTICE) and [the included PolyForm license](LICENSES/PolyForm-Noncommercial-1.0.0.md).

Required Notice: Copyright (c) 2024-2026 NMJ (SullyOS / 手抓糯米机)

Redistributors must preserve all three files and the Required Notice. Commercial use is not authorized for SullyOS-derived portions without separate permission or a provenance audit that removes/replaces them.

Community builds ship emoji/character App launcher defaults rather than third-party photo icons. The installable PWA icons are separate project assets.

## Source & license

This open-source MCP server is cataloged on AgentStack and links to its original source — we do not rehost the code.

- **Author:** [anrrow2002-ctrl](https://github.com/anrrow2002-ctrl)
- **Source:** [anrrow2002-ctrl/rifugio--community](https://github.com/anrrow2002-ctrl/rifugio--community)
- **License:** Apache-2.0

Install and usage instructions live in the source repository linked above.

## Pricing

- **Free** — Free

## Security capabilities

Automated source analysis of v0.1.0 — what this tool can access:

- **Network access:** no
- **Filesystem access:** no
- **Shell / process execution:** no
- **Environment & secrets:** yes
- **Dynamic code execution:** no

*"Yes" means the capability is present in the source — more access means more to trust, not that it is unsafe.*


## Versions

- **0.1.0** — security scan: passed — Imported from the upstream source.

## Links

- Listing page: https://agentstack.voostack.com/l/mcp-anrrow2002-ctrl-rifugio-community
- Seller: https://agentstack.voostack.com/s/anrrow2002-ctrl
- Browse the marketplace: https://agentstack.voostack.com/browse

---
Listed on AgentStack — the marketplace for AI agent skills and MCP servers. Every listing is security-reviewed. Creators keep 70%.