AnkiSAFE
A model context protocol server that connects to Anki through AnkiConnect
Overview
From the repository's own README, as read at the audited commit. Badges and raw HTML are left out.
A server to integrate with Anki via the AnkiConnect plugin
This is a TypeScript-based MCP server that integrates with Anki via the AnkiConnect plugin. It demonstrates core MCP concepts by providing:
- Resources representing Anki decks and note models with URIs
- Tools for creating and managing Anki notes
- Integration with AnkiConnect API
Features
Resources
- List and access Anki decks via
anki://decks/{id}URIs - List and access note models via
anki://models/{id}URIs - JSON representation of Anki objects
Tools
listDecks- Get names of all deckslistModels- Get names of all note modelsgetModel- Get details of a specific note modeladdNote- Create a single note- Specify deck name, model name, fields and tags
addNotes- Create multiple notes in bulk- Create many notes with specified parameters
Development
Install dependencies:
npm install
Build the server:
npm run build
For development with auto-rebuild:
npm run watch
Installation
To use with Claude Desktop, add the server config:
On MacOS: ~/Library/Application Support/Claude/claude_desktop_config.json On Windows: %APPDATA%/Claude/claude_desktop_config.json
{
"mcpServers": {
"anki-mcp": {
"command": "node",
"args": ["d:\\anki-mcp-server\\build\\index.js"]
}
}
}Debugging
Since MCP servers communicate over stdio, debugging can be challenging. We recommend using the MCP Inspector, which is available as a package script:
npm run inspector
The Inspector will provide a URL to access debugging tools in your browser.
82506051624aOBSERVED · 2026-10-07Connect
Built from this server's own package name, version and transport as found in its source — not copied from anyone's documentation, so it cannot drift against a page we do not control.
claude mcp add anki-mcp -- npx -y [email protected]
{
"mcpServers": {
"anki-mcp": {
"command": "npx",
"args": [
"-y",
"[email protected]"
]
}
}
}Exposed tools (5)
3 read · 2 write · 0 destructive.
| Tool | Risk | Description |
|---|---|---|
addNote | write | Create a single note |
addNotes | write | Create many notes in a deck |
getModel | read | Get a model, including field and template definitions, from Anki |
listDecks | read | Get the names of all decks from Anki |
listModels | read | Get the names of all note models from Anki |
Trust audit
SAFEgrade B · trust 89/100 Nothing in the source contradicts what it says it does. Grade A is reserved for packages that have also passed the behavioural sandbox.
| Layer | What it checks | Result |
|---|---|---|
| L0 | Provenance & inventory | PASS |
| L1 | Static analysis of the code | PASS |
| L2 | Instruction surface (what it tells the agent) | PASS |
| L3 | Class-specific surface | PASS |
| L4 | Behavioural (sandbox) | SKIPPED |
What the source does
- Filesystem
- none-observed
- Network
- declared (1 observation(s))
- Shell
- none-observed
- Dependencies
- not all pinned
- Secrets in source
- none-found
Findings (1)
@types/node, typescript
Gates applied: no_behavioural_pass.
82506051624afull audit observations/trust-audit/mcp-server/camdenclark__anki.json · Report an issue / request a re-scanAudit history
Every audit this server has had. A grade with a past is a grade somebody is still checking.
| Date | Source | Verdict | Grade | Score | Change |
|---|---|---|---|---|---|
| 2026-10-07 | 82506051624a | SAFE | B | 89 | first audit |
Questions
What is the Anki MCP server?
A model context protocol server that connects to Anki through AnkiConnect
What tools does Anki expose?
5 in total: 3 read-only, 2 that write, and 0 that can delete or overwrite. Every one is listed on this page with its risk.
Is Anki safe to connect to an agent?
The audit found nothing in the source that contradicts what it says it does, and graded it B (89/100). Grade A is held back for packages that have also passed a sandboxed behavioural run, which is why a clean server reads B.
What credentials does Anki need?
No credential environment variables were found in its source, so it appears to need none.
How does Anki run?
It speaks stdio, so it runs as a local process your client starts. It is published on npm as anki-mcp at 0.1.0.
How current is this page?
The grade is for one exact copy of the source (82506051624a), read on 2026-10-07. The repository is watched and re-audited when it changes.