Skip to content

Security attestation — calibre-librarian

Data classification

  • Indexed book text: internal (user-owned library content on local disk)
  • Embeddings: internal (derived from book text, stored locally)
  • Config paths: low_sensitive

Network egress

Component Endpoint Purpose
Ollama (default) http://localhost:11434 Text embeddings
Calibre local subprocess (calibredb) Metadata + file paths

No cloud API calls in the default configuration.

Controls

  • SPB-11: Embeddings restricted to configured ollama_base_url (default localhost)
  • SPB-09: No secrets in config files; paths only
  • SPB-10: MCP tools read from local index only; scope enforced at ingest

User responsibilities

  • Configure ingest scope so personal/fiction collections are excluded
  • Keep ollama_base_url on localhost unless explicitly choosing a trusted local proxy
  • Review .cursor/mcp.json before enabling the library MCP server