just what i find

I’ve written before about TRMNL - it’s a great project. During a recent cleanout, i found an old Kindle Voyage in the back of a drawer. As well as supporting their own devices, TRMNL offers a “BYOD” licence and, if you manage to get it up and running on a device that nobody else has published before, they even give you back some of the licence fee!

TRMNL is an awesome open-source ePaper display that lets users show almost anything they want. Launched on Kickstarter, it’s now got thousands of plugins and users. I’ve published a few plugins myself. A few weeks ago, TRMNL added an MCP server. This lets you use a local coding agent to do most of the grunt work. I wrote about how to set that up in another post.

Secret disclosure

As soon as i’d set up the MCP server, i asked Claude to test it against a plugin i’d already built and deployed. The model called IntegrationsShowTool with no arguments. The response included:

TRMNL is an awesome open-source ePaper display that lets users show almost anything they want. Launched on Kickstarter, it’s now got thousands of plugins and users. I’ve published a few plugins, including a realtime TfL bus stop arrival time board.

A few weeks ago, TRMNL added an MCP server. This lets you use a local coding agent to do most of the grunt work.

Install the MCP server through .mcp.json

Using Claude Code, i created a simple .mcp.json file which references the API key by environment variable. Place this in the root of your repo. As it contains no secrets, this is safe to commit:

To stop my API keys being sucked up by some random malware, I keep secrets in 1Password and inject them into commands at runtime with op run. That works for almost everything, but when using Claude Code, i started getting a confusing error message.

Injecting MCP API keys to Claude Code

Claude Code reads MCP server config from .mcp.json and expands ${VAR} references from the environment.

{
  "mcpServers": {
    "trmnl": {
      "type": "http",
      "url": "https://mcp-server.com/mcp?api_key=${MY_SECRET_MCP_API_KEY}"
    }
  }
}

The API key is in a file. .env.tpl:

Ingredients

• 1 tin baked beans
• 1 small white onion
• 1 clove garlic
• 1 tbsp Hendersons Relish
• splash of vegetable oil

Method

1. finely chop the onion
2. grate the garlic
3. gently (low temperature) fry onion in the vegetable oil for 5-6 mins over a medium heat in the small (metal?) roasting tin you’ll use in the smoker
4. Take off the heat and add the grated garlic
5. Add the beans and hendersons
6. Stir and put in the smoker (110-120c) for 60-90 minutes. Check after 60 mins to make sure not dried out. If it starts to get dry, add a splash of water. Stir.

ingredients

• 20g cheddar
• 20g light cream cheese
• 1 tsp paprika
• 1/2 tsp chilli flakes
• 30g tinned sweetcorn, drained well
• One of:
  • 1/2 tsp miso paste
  • 1 tsp soy sauce
  • 1 tsp Hendersons relish
• 1/4 tsp garlic powder
• 1/4 tsp onion powder
• pinch white pepper
• 1 small tortilla

Method

1. Mix cream cheese & miso/soy/Henderson’s + spices into a paste
2. Fold in sweetcorn and cheddar
3. Spread in tortilla and fold in half
4. Cook in pan, place baking parchment on top and plate on that to squash slightly

Smoked tempeh is excellent for smoking as the dense, porous structure absorbs smoke like few other proteins.

Ingredients

• 30ml soy sauce
• 3 grams (about 1-2 cloves) minced garlic
• 15 g sesame oil
• 15ml rice vinegar - needed to penetrate
• pinch of salt

Method

1. Slice into planks or thick strips rather than cubes — more surface area, better bark formation, less risk of drying out.
2. Steam or simmer the tempeh for 10-15 minutes first. This removes bitterness and opens the pores for better smoke and marinade absorption.
3. Marinate for at least 30 minutes. This gives time for the marinade to to infuse.
4. Smoke at 110-130°C for 45-60 minutes.
5. Baste or re-glaze halfway through (or more often if you like) if using a sticky marinade.

Ingredients

• as many New Potatoes as you think you’ll need
• Vegetable oil
• salt, pepper
• and a smoker

Method

1. Boil new potatoes until fork-tender (15-20 min) then drain
2. smash them on a sheet tray to break them slightly. The fluffy bits go crispy.
3. Coat them in oil/fat (e.g. drizzle in vegetable oil) and seasoning (salt, pepper)
4. roast in the oven at 220°C for 20-25 minutes until the edges are crispy and golden.
5. Transfer to the smoker at 110-130°C for 20-30 minutes to pick up smoke flavour. The already-crisped surfaces absorb smoke well. Going longer than 30 minutes risks drying them out or making the smoke flavour acrid.

I previously wrote about how i’d implemented a combination of 1Password’s CLI and direnv to avoid storing passwords on disk. This works great, most of the time. The problem comes when i want to add a secret and i’m in the middle of a complex multi-agent task - because the environment is loaded once before Claude or Codex or whatever starts, adding or rotating credentials during a build (e.g. if the agent needs an API key to a new service, or accidentally exposes a secret to its context) is tricky. So i’ve evolved the system slightly.

glaze

• 30g white or red miso (white = sweeter/milder, red = deeper/saltier)
• 15ml soy sauce
• 15ml mirin (or 10ml rice vinegar + small pinch sugar)
• 10g grated garlic
• 10g sesame oil
• 15ml honey
• optional: 5g grated ginger

Method

1. Halve aubergines lengthways. Score the cut face in a crosshatch ~1cm deep without piercing the skin. This speeds cooking and lets glaze penetrate.
2. Lightly oil the cut face only. Do not soak it — aubergine absorbs oil indefinitely. Use high temperature oil (vegegable or avocado oil, not olive)
3. Grill cut-side down over medium heat 6-8 minutes until charred and the flesh is collapsing soft. Flip to skin-side down for another 4-6 minutes.
4. Test doneness: the flesh should be fully translucent and yielding throughout, no white spongy core.
5. Brush glaze onto the cut face. Return cut-side down over medium-low heat 2-3 minutes to caramelise. Watch closely — it scorches quickly.
6. Re-glaze and finish skin-side down 1-2 minutes to set the lacquer without burning.