Readwise EnhancedSAFE
Enhanced MCP server unifying Readwise Reader + Highlights with AI-powered text processing and context optimization
Overview
From the repository's own README, as read at the audited commit. Badges and raw HTML are left out.
status: published category: mcp-server author: arnaldo-delisio publishednpm: true npmpackage: readwise-mcp-enhanced publisheddirectories: [] productionurl: null last_active: 2026-01-26 ---
[](https://badge.fury.io/js/readwise-mcp-enhanced) [](https://www.npmjs.com/package/readwise-mcp-enhanced)
A comprehensive Model Context Protocol (MCP) server that unifies Readwise Reader document management with full Readwise highlights functionality. Works with Claude Desktop, Continue, and any MCP-compatible AI tool. Built with TypeScript, featuring advanced text processing, smart content controls, and context-optimized responses.
🚀 What This Is
The first unified MCP that combines:
- Complete Readwise Reader API - Save, manage, and search documents
- Full Readwise Highlights API - Access all your highlights, books, and daily reviews
- AI-Powered Text Processing - Intelligent word segmentation and content extraction
- Context Optimization - 94% reduction in token usage while maintaining full functionality
- Smart Content Controls - Prevent context explosion with advanced filtering and pagination
Equivalent to the official Readwise MCP but more efficient and feature-complete. Compatible with all MCP clients.
✨ Key Features
📚 Enhanced Reader Management
- Smart Content Extraction: Pagination, keyword filtering, length limits
- AI-Powered Text Processing: Automatic word segmentation fixes merged words
- Performance Controls: Built-in warnings and guidance for expensive operations
- Flexible Filtering: By location, category, tags, dates, and custom criteria
🎯 Complete Highlights Ecosystem
- Daily Reviews: Spaced repetition learning system
- Advanced Search: Field-specific queries with relevance scoring
- **Book Manage
82ef81d7e99aOBSERVED · 2026-10-07Connect
Built from this server's own package name, version and transport as found in its source — not copied from anyone's documentation, so it cannot drift against a page we do not control. Replace the environment placeholders with a token scoped to the least it needs.
claude mcp add readwise-mcp-enhanced --env READWISE_TOKEN=${READWISE_TOKEN} -- npx -y [email protected]{
"mcpServers": {
"readwise-mcp-enhanced": {
"command": "npx",
"args": [
"-y",
"[email protected]"
],
"env": {
"READWISE_TOKEN": "${READWISE_TOKEN}"
}
}
}
}Exposed tools (13)
9 read · 3 write · 1 destructive. Blast radius: 1 tool can delete or overwrite — an agent that can be talked into calling a tool can be talked into calling this one.
| Tool | Risk | Description |
|---|---|---|
readwise_create_highlight | write | Create new highlights manually in Readwise |
readwise_delete_document | destructive | Delete a document from Readwise Reader |
readwise_export_highlights | read | Export all highlights from Readwise with optional filtering. Perfect for bulk analysis or backup. |
readwise_get_book_highlights | read | Get all highlights from a specific book |
readwise_get_daily_review | read | Get your daily review highlights for spaced repetition learning |
readwise_list_books | read | List books that have highlights in Readwise with optional filtering |
readwise_list_documents | read | List documents from Readwise Reader with optional filtering |
readwise_list_highlights | read | List highlights from Readwise with optional filtering by book, date, or other criteria |
readwise_list_tags | read | List all tags from Readwise Reader |
readwise_save_document | write | Save a document (URL or HTML content) to Readwise Reader |
readwise_search_highlights | read | Advanced search across all highlights using text queries and field-specific filters. Equivalent to official Readwise MCP search functionality. |
readwise_topic_search | read | Search documents in Readwise Reader by topic using regex matching on title, summary, notes, and tags |
readwise_update_document | write | Update a document in Readwise Reader |
Trust audit
SAFEgrade B · trust 89/100 Nothing in the source contradicts what it says it does. Grade A is reserved for packages that have also passed the behavioural sandbox.
| Layer | What it checks | Result |
|---|---|---|
| L0 | Provenance & inventory | PASS |
| L1 | Static analysis of the code | PASS |
| L2 | Instruction surface (what it tells the agent) | PASS |
| L3 | Class-specific surface | WARN |
| L4 | Behavioural (sandbox) | SKIPPED |
What the source does
- Filesystem
- declared (1 observation(s))
- Network
- declared (3 observation(s))
- Shell
- none-observed
- Dependencies
- not all pinned
- Secrets in source
- none-found
Findings (2)
readwise_delete_document
@modelcontextprotocol/sdk, dotenv, node-html-parser, wordsninja, @types/jest, @types/node, jest, ts-jest
Gates applied: no_behavioural_pass.
82ef81d7e99afull audit observations/trust-audit/mcp-server/arnaldo-delisio__readwise-enhanced.json · Report an issue / request a re-scanAudit history
Every audit this server has had. A grade with a past is a grade somebody is still checking.
| Date | Source | Verdict | Grade | Score | Change |
|---|---|---|---|---|---|
| 2026-10-07 | 82ef81d7e99a | SAFE | B | 89 | first audit |
Questions
What is the Readwise Enhanced MCP server?
Enhanced MCP server unifying Readwise Reader + Highlights with AI-powered text processing and context optimization
What tools does Readwise Enhanced expose?
13 in total: 9 read-only, 3 that write, and 1 that can delete or overwrite (readwise_delete_document). Every one is listed on this page with its risk.
Is Readwise Enhanced safe to connect to an agent?
The audit found nothing in the source that contradicts what it says it does, and graded it B (89/100). Grade A is held back for packages that have also passed a sandboxed behavioural run, which is why a clean server reads B. Separately from the audit: 1 of its tools can destroy data, so scope the token you give it to what you actually need.
What credentials does Readwise Enhanced need?
It reads READWISE_TOKEN from the environment. Give it a token scoped to the least it needs — an agent that can be talked into calling a tool can be talked into calling it with your credentials.
How does Readwise Enhanced run?
It speaks stdio, so it runs as a local process your client starts. It is published on npm as readwise-mcp-enhanced at 1.0.1.
How current is this page?
The grade is for one exact copy of the source (82ef81d7e99a), read on 2026-10-07. The repository is watched and re-audited when it changes.