Atlas / MCP servers / adeze / Raindrop

RaindropCAUTION

Name: Raindrop
Author: adeze

mcp/adeze/raindrop

MCP server by adeze · mcp · mcp server · mcp tools · Audited 2026-10-06

⚑ Report / re-scan Source ↗

Raindrop MCP Server

Verdict

CAUTION

Grade

Trust score

87 /100

Exposed tools

21 17r · 0w · 4d

Transport

stdio

License

MIT

Stars

188

Overview

From the repository's own README, as read at the audited commit. Badges and raw HTML are left out.

[](https://smithery.ai/server/@adeze/raindrop-mcp) [](https://www.npmjs.com/package/@adeze/raindrop-mcp) [](https://github.com/adeze/raindrop-mcp/releases)

Connect Raindrop.io to your AI assistant with a simple MCP server. Use it to organize, search, and manage bookmarks with natural language.

Raindrop.io now also offers a hosted Streamable HTTP MCP endpoint (https://api.raindrop.io/rest/v2/ai/mcp) in beta for Pro users. Use that when its hosted toolset is sufficient; use this package for local stdio, self-hosted HTTP, and its additional library-management tools.

What it can do

Create, update, and delete collections and bookmarks
Search bookmarks by tags, domain, type, date, and more
Manage tags (list, rename, merge, delete)
Read highlights from bookmarks
Bulk edit bookmarks in a collection
Audit broken links and duplicates, and manage trash

Tools

diagnostics - Server diagnostic information and library health metrics
collection_list - List all collections as a flat list
get_collection_tree - Hierarchical view of collections with full breadcrumb paths
collection_manage - Create, update, or delete collections
bookmark_search - Advanced search with filters, tags, and pagination
bookmark_manage - Create, update, or delete bookmarks
get_raindrop - Fetch a single bookmark by ID
list_raindrops - List bookmarks for a collection with pagination
get_suggestions - AI-powered organization advice (tags/collections) for a URL or bookmark
suggest_tags - Suggest relevant tags from bookmark metadata using AI-assisted analysis
bulk_edit_raindrops - Bulk update, move, or remove bookmarks in a specific collection
tag_manage -

Read from source at commit 127d7d00b8d6OBSERVED · 2026-10-06

Connect

Built from this server's own package name, version and transport as found in its source — not copied from anyone's documentation, so it cannot drift against a page we do not control. Replace the environment placeholders with a token scoped to the least it needs.

claude-code

claude mcp add raindrop-mcp --env RAINDROP_ACCESS_TOKEN=${RAINDROP_ACCESS_TOKEN} --env RAINDROP_CLIENT_SECRET=${RAINDROP_CLIENT_SECRET} -- npx -y @adeze/[email protected]

claude-desktop

{
  "mcpServers": {
    "raindrop-mcp": {
      "command": "npx",
      "args": [
        "-y",
        "@adeze/[email protected]"
      ],
      "env": {
        "RAINDROP_ACCESS_TOKEN": "${RAINDROP_ACCESS_TOKEN}",
        "RAINDROP_CLIENT_SECRET": "${RAINDROP_CLIENT_SECRET}"
      }
    }
  }
}

Exposed tools (21)

17 read · 0 write · 4 destructive. Blast radius: 4 tools can delete or overwrite — an agent that can be talked into calling a tool can be talked into calling this one.

Tool	Risk	Description
`bookmark_manage`	read	Creates, updates, or deletes bookmarks. Use the operation parameter to specify the action.
`bookmark_search`	read	Searches bookmarks with advanced filters, tags, and full-text search.
`bulk_edit_raindrops`	destructive	Bulk update, move, or remove bookmarks in a specific collection.
`cleanup_collections`	destructive	Remove all collections that do not contain any bookmarks. Requires
`collection_list`	read	Lists all Raindrop.io collections as a flat list.
`collection_manage`	read	Creates, updates, or deletes a collection. Use the operation parameter to specify the action.
`diagnostics`	read	Diagnostics resource and runtime metadata.
`empty_trash`	destructive	Permanently delete all bookmarks currently in the trash collection. Requires
`export_markdown`	read	Render bookmarks as Markdown list with title, link, tags, and excerpt.
`find_duplicates`	read	Identify potential duplicate bookmarks using URL + title similarity.
`get_collection_tree`	read	Returns a hierarchical view of all collections with full breadcrumb paths.
`get_raindrop`	read	Fetch a single Raindrop.io bookmark by ID.
`get_suggestions`	read	Get AI-powered suggestions for tags and collections for a specific URL or existing bookmark.
`highlight_manage`	read	Creates, updates, or deletes highlights. Use the operation parameter to specify the action.
`library_audit`	read	Scans the entire library for broken links and duplicate bookmarks.
`list_raindrops`	read	List Raindrop.io bookmarks for a collection with pagination.
`organize_by_topic`	read	Analyze titles/excerpts and suggest collections + tags for organization.
`remove_duplicates`	destructive	Optimized duplicate deletion pattern. Scans all collections and removes duplicates in batches of 50 to minimize round-trips. Supports dry run to report counts without deleting.
`suggest_tags`	read	Uses AI to suggest relevant tags based on bookmark metadata (title, URL, description).
`tag_manage`	read	Renames, merges, or deletes tags. Use the operation parameter to specify the action.
`test_tool`	read	A test tool

Trust audit

CAUTIONgrade B · trust 87/100 Install with care. The audit found things worth knowing before you trust its output.

Layer	What it checks	Result
L0	Provenance & inventory	PASS
L1	Static analysis of the code	FAIL
L2	Instruction surface (what it tells the agent)	PASS
L3	Class-specific surface	WARN
L4	Behavioural (sandbox)	SKIPPED

What the source does

Filesystem: declared (3 observation(s))
Network: declared (1 observation(s))
Shell: none-observed
Dependencies: not all pinned
Secrets in source: none-found

Findings (14)

HIGHNetwork egress · net.env_exfil · CWE-200, CWE-319

scripts/auth-check.mjs:9

/.env" ... fetch(

Why it matters. reads secrets in the same file that sends data out

MEDIUMFilesystem / path · mcp.destructive_tools · CWE-22, CWE-59

bulk_edit_raindrops, cleanup_collections, empty_trash, remove_duplicates

Why it matters. 4 tool(s) can delete or overwrite

Fix. prefer a read-only mode or scoped tokens; the page states the blast radius