Self-hosted brain for any LLM: memory, skills, encrypted vault, devices and scheduled jobs.
Connect Runs on your machine
claude mcp add aicortex -e STORAGE_ENCRYPTION_KEY=<STORAGE_ENCRYPTION_KEY> -e OIDC_CONFIG_URL=<OIDC_CONFIG_URL> -e OIDC_CLIENT_ID=<OIDC_CLIENT_ID> -e OIDC_CLIENT_SECRET=<OIDC_CLIENT_SECRET> -e BASE_URL=<BASE_URL> -e JWT_SIGNING_KEY=<JWT_SIGNING_KEY> -- docker run -i --rm ghcr.io/ikarusmk/aicortex:v2.7.2
{
"mcpServers": {
"aicortex": {
"command": "docker",
"args": [
"run",
"-i",
"--rm",
"ghcr.io/ikarusmk/aicortex:v2.7.2"
],
"env": {
"STORAGE_ENCRYPTION_KEY": "<STORAGE_ENCRYPTION_KEY>",
"OIDC_CONFIG_URL": "<OIDC_CONFIG_URL>",
"OIDC_CLIENT_ID": "<OIDC_CLIENT_ID>",
"OIDC_CLIENT_SECRET": "<OIDC_CLIENT_SECRET>",
"BASE_URL": "<BASE_URL>",
"JWT_SIGNING_KEY": "<JWT_SIGNING_KEY>"
}
}
}
}
{
"mcpServers": {
"aicortex": {
"command": "docker",
"args": [
"run",
"-i",
"--rm",
"ghcr.io/ikarusmk/aicortex:v2.7.2"
],
"env": {
"STORAGE_ENCRYPTION_KEY": "<STORAGE_ENCRYPTION_KEY>",
"OIDC_CONFIG_URL": "<OIDC_CONFIG_URL>",
"OIDC_CLIENT_ID": "<OIDC_CLIENT_ID>",
"OIDC_CLIENT_SECRET": "<OIDC_CLIENT_SECRET>",
"BASE_URL": "<BASE_URL>",
"JWT_SIGNING_KEY": "<JWT_SIGNING_KEY>"
}
}
}
}
{
"servers": {
"aicortex": {
"type": "stdio",
"command": "docker",
"args": [
"run",
"-i",
"--rm",
"ghcr.io/ikarusmk/aicortex:v2.7.2"
],
"env": {
"STORAGE_ENCRYPTION_KEY": "<STORAGE_ENCRYPTION_KEY>",
"OIDC_CONFIG_URL": "<OIDC_CONFIG_URL>",
"OIDC_CLIENT_ID": "<OIDC_CLIENT_ID>",
"OIDC_CLIENT_SECRET": "<OIDC_CLIENT_SECRET>",
"BASE_URL": "<BASE_URL>",
"JWT_SIGNING_KEY": "<JWT_SIGNING_KEY>"
}
}
}
}
Replace the values in angle brackets with your own. Keys stay on your machine; we never see them.
Tools
This server runs locally, so its tools are listed by your MCP client once it starts.
Environment variables
| Name | Description |
|---|---|
STORAGE_ENCRYPTION_KEYRequired, secret | Fernet key that encrypts the vault and the sign-in store (openssl rand -base64 32 | tr '+/' '-_') |
OIDC_CONFIG_URLOptional | Discovery URL of your own identity provider (sign-in for cloud LLM apps) |
OIDC_CLIENT_IDOptional | Client ID registered at your identity provider |
OIDC_CLIENT_SECRETOptional, secret | Client secret registered at your identity provider |
BASE_URLOptional | Public HTTPS URL of this server, e.g. https://agent.example.com |
JWT_SIGNING_KEYOptional, secret | Signs the server's own tokens (openssl rand -hex 32) |
Details
| Package | ghcr.io/ikarusmk/aicortex:v2.7.2 (OCI, streamable-http) |
| First published | 12 Nov 2026 |
| Last updated | 12 Nov 2026 |
| Registry name | io.github.IkarusMK/aicortex |
More ai and media servers See all
Listing data from the official MCP registry. Status and tools from NestDaddy's daily check. Browse all MCP servers.
