Co-Reading MCP

Item: Co-Reading MCP
Rating: 45
Author: M8ven

A local MCP server that gives Claude a durable reading room for EPUB and plain text books, enabling chunk-by-chunk navigation, annotations, progress tracking, and shared margin cards.

→ idleprocesscc/co-reading-mcp · listed on glama

Is this your MCP?

Claim it to get a verified publisher badge, a free copy of our full audit findings, and direct contact for any high-priority issues we find.

Install from

Glama

M8ven verifies MCPs across every public registry — install directly from whichever one you prefer.

// key findings

✅

No credential exfiltration, no sensitive file access, no obfuscation

Static analysis found nothing flowing your secrets to unexpected places.

✅

Open source with a license and README

Anyone can audit the code, the license is declared, and the publisher documents what it does.

🔐

You'll be asked for 1 credential: MCP_AUTH_TOKEN

These are read from process.env at runtime. Make sure you trust where they’ll be sent.

// required environment variables

This server reads these from process.env. You'll be asked to provide them before it can run.

🔐 secretMCP_AUTH_TOKEN— READING_MCP_DATA_DIR=./data ="change-me" npm run start:sse

configMCP_CORS_ORIGIN— CORS origin. When MCP_AUTH_TOKEN is set, defaults to ; when unset, defaults to no CORS headers (blocks cross-origin requests)

configMCP_MAX_BODY_BYTES— max JSON-RPC POST body size, default 25000000

configMCP_SSE_HOST— listen host, default 0.0.0.0

configMCP_SSE_PORT— or PORT: listen port, default 3100

configPLAYWRIGHT_CLI

configPORT— MCP_SSE_PORT or : listen port, default 3100

configREADING_HTTP_HOST

configREADING_HTTP_MAX_BODY_BYTES

configREADING_HTTP_PORT— "": "8787"

configREADING_HTTP_STDIO

configREADING_IMPORT_MAX_BYTES— max EPUB/TXT upload size, default 25000000

configREADING_IMPORT_MAX_OUTPUT_BYTES

configREADING_MCP_DATA_DIR— "": "/absolute/path/to/co-reading-mcp/data",

configREADING_TRASH_RETENTION_DAYS

// full audit trail

The full breakdown of what we checked, the deductions that landed, the network hosts, the dependency advisories, and concrete fix guidance is available to verified publishers.

// improvement guidance — verified publishers only

We have 1 concrete improvement we can share with the publisher of this MCP. Each comes with specific guidance to raise the trust score.

// embed badge in your README

[![M8ven Score](https://m8ven.ai/badge/mcp/idleprocesscc-co-reading-mcp-43q56j)](https://m8ven.ai/mcp/idleprocesscc-co-reading-mcp-43q56j)

commit: 3e53a8e298e3646922dba6fb2939e9fe0588bd49

code hash: 27fed7f1caeb726da2bb2de6c79d548922c576b277318aee184911a8959374de

verified: 6/11/2026, 12:17:30 PM

view raw JSON →