Listed from the MCP registry; nobody on Odel publishes it.
Read Remind classes, chats and messages, and manage notification settings.
Runs on your machine from its package; the steps are below.
At most: moves money, runs code or commands, deletes data, or sends messages for you.
Odel charges nothing per call. The publisher may charge for its own service.
Runs locally over stdio
This server isn't hosted — your MCP client launches it from a package registry. Use one of the commands below, or drop the config into your client (e.g. Claude Desktop).
Run
npx -y @chrischall/remind-mcp
MCP client config
{
"mcpServers": {
"remind": {
"command": "npx",
"args": [
"-y",
"@chrischall/remind-mcp"
]
}
}
}MCP server for Remind — read your classes, chats and messages, and manage notification settings.
This project was developed and is maintained by AI. Use at your own discretion.
Remind exposes a single GraphQL endpoint that is reachable server-side, so only the credential needs a browser: the session is lifted once from a signed-in tab through the ContextMint Bridge browser extension, and every request after that is a plain server-side fetch.
npx -y @chrischall/remind-mcp
{
"mcpServers": {
"remind": { "command": "npx", "args": ["-y", "@chrischall/remind-mcp"] }
}
}
Two headers are captured from a signed-in remind.com tab: the full Cookie header and the
x-csrf-token value. Either let the bridge capture them (needs the ContextMint Bridge browser
extension and a signed-in tab), or supply them yourself:
| Variable | Required | Description |
|---|---|---|
REMIND_COOKIE | no | Captured Cookie request header. Skips the bridge when set with the next one; once Remind rejects the pair as expired, the server falls back to the bridge (or, without one, tells you to refresh both). |
REMIND_CSRF_TOKEN | no | Captured x-csrf-token value. |
REMIND_WS_PORT | no | fetchproxy bridge concentrator port (default 37149). |
REMIND_SESSION_FILE | no | Where the captured session is cached. Defaults to $MCP_DATA_DIR/$HOME under .remind-mcp. |
Install ContextMint Bridge from its
releases page: in Chrome, unzip the
Chrome build and load it unpacked (chrome://extensions → Developer mode → Load unpacked).
Safari isn't available yet (it will ship inside the ContextMint app, which has no public download),
so use Chrome for now.
ContextMint Bridge is the fetchproxy browser extension under its new name, from the same
maintainer — fetchproxy's own README points
to it. Its source is public at https://github.com/nullnet-app/contextmint-bridge: build it
yourself, or check a release zip against the .sha256 file published beside it
(shasum -a 256 -c contextmint-bridge-chrome-<version>.zip.sha256).
The server boots without either, so a host's install-time tools/list probe succeeds; the
error surfaces on the first tool call instead.
The browser is needed once. A captured session is cached (mode 0600) and reused across
restarts, and every call after the bootstrap is a plain server-side fetch. This matters because
the capture completes only while the signed-in tab is actually issuing a /graphql request — so
without the cache, a restart would sit waiting unless you happened to be using Remind.
The cache is bounded: analytics and consent cookies are dropped from the jar before it is used or
stored, the record is bound to the Remind account (me.uuid) it authenticated as when captured —
a restored session that answers as a different account, or as none, is discarded and re-captured —
and it is re-captured from the browser after at most 7 days. An env-supplied session is never
restored from the cache.
| Tool | |
|---|---|
remind_me | The signed-in account. |
remind_list_entities | Classes and chats with unread counts — start here, it yields the uuids. |
remind_get_classes | Full class detail by uuid. |
remind_list_chats | Conversation streams and their permissions (canSend). |
remind_get_messages | Messages in a chat stream. |
remind_get_notification_settings | Preferences and delivery devices. |
remind_set_notification_devices | Enable/disable delivery devices. Asks you to confirm first. |
remind_send_message | Send to a chat or class. Asks you to confirm first. |
remind_graphql | Arbitrary read-only GraphQL; introspection is enabled. Mutations refused. |
remind_healthcheck | Verify the session still authenticates; on failure error.kind names the broken hop (no_credential, credential_rejected, edge_blocked, http, timeout, transport). |
Write tools ask you to confirm before anything is sent. A client that can show a confirmation
prompt (Claude Code) shows one. Otherwise the first call makes no network call and returns a
preview of the exact payload plus a confirmToken; only a repeat call with that token (and the
same arguments) performs the write. A token works once, and changing any argument between the
two calls voids it.
| variable | default | |
|---|---|---|
MCP_CONFIRM_MODE | ask-user | What a write does on a client that cannot show a confirmation prompt (claude.ai, Claude Desktop). ask-user: two steps — the first call does nothing and returns a preview plus a token, and the model must get your approval in chat before calling again with it. auto: the same two steps, but the model may use the token after reviewing the preview itself. refuse: writes are refused on such clients. A client that can show prompts (Claude Code) always gets the real prompt, unless MCP_CONFIRM_ELICITATION=off. An unrecognised value is treated as refuse. |
MCP_CONFIRM_ELICITATION | on | off never shows a confirmation prompt, so every client gets the MCP_CONFIRM_MODE behaviour. Set it for a client that says it can show prompts but never does (the write hangs — opencode 2.0.x). Any other value is treated as on, with a warning on stderr. |
MCP_CONFIRM_TTL_SECONDS | 600 | How long a token stays valid. |
MCP_CONFIRM_SECRET | random per process | Signing key; set it only if tokens must survive a server restart. On mcp-host the host supplies a stable per-child key (MCP_HOST_CONFIRM_SECRET) and spent tokens are recorded under MCP_DATA_DIR, so an approval survives an idle restart. |
skills/remind-fpx/ is a shell-only skill covering the same read surface with fpx + curl —
no MCP process required.
errors[0].message = "Unauthorized"; the same
string also means "your account may not do that" (scheduled messages are owner/teacher-only).Internal service error, not a field error — introspect rather
than guess. docs/REMIND-API.md is the capture log.npm install && npm run build && npm test
npm run test:coverage
MIT