simplenote-mcp-serverCAUTION
MCP Server for Simplenote integration with Claude Desktop
Overview
From the repository's own README, as read at the audited commit. Badges and raw HTML are left out.
A lightweight MCP server that integrates Simplenote with Claude Desktop using the MCP Python SDK.
This allows Claude Desktop to interact with your Simplenote notes as a memory backend or content source.
[](https://github.com/docdyhr/simplenote-mcp-server/actions/workflows/unified-ci.yml) [](https://github.com/docdyhr/simplenote-mcp-server/actions/workflows/security.yml)
[](https://github.com/docdyhr/simplenote-mcp-server) [](./CHANGELOG.md) [](./htmlcov/index.html) [](https://opensource.org/licenses/MIT)
[](https://pypi.org/project/simplenote-mcp-server/) [](https://hub.docker.com/r/docdyhr/simplenote-mcp-server) [![GitHub Stars](https://img.shields.io/github/stars/docdyhr/simplenote-mcp-server?style=social
a89271f97d57OBSERVED · 2026-10-10Connect
Built from this server's own package name, version and transport as found in its source — not copied from anyone's documentation, so it cannot drift against a page we do not control. Replace the environment placeholders with a token scoped to the least it needs.
claude mcp add simplenote-mcp-server-evals --env ALERT_SMTP_PASSWORD=${ALERT_SMTP_PASSWORD} --env ALERT_WEBHOOK_SECRET=${ALERT_WEBHOOK_SECRET} --env DOCKER_TOKEN=${DOCKER_TOKEN} --env GITHUB_TOKEN=${GITHUB_TOKEN} -- npx -y [email protected]{
"mcpServers": {
"simplenote-mcp-server-evals": {
"command": "npx",
"args": [
"-y",
"[email protected]"
],
"env": {
"ALERT_SMTP_PASSWORD": "${ALERT_SMTP_PASSWORD}",
"ALERT_WEBHOOK_SECRET": "${ALERT_WEBHOOK_SECRET}",
"DOCKER_TOKEN": "${DOCKER_TOKEN}",
"GITHUB_TOKEN": "${GITHUB_TOKEN}"
}
}
}
}Exposed tools (7)
5 read · 2 write · 0 destructive.
| Tool | Risk | Description |
|---|---|---|
append_to_daily_note | read | Append a timestamped entry to today |
export_notes | read | Export one or more notes to Markdown or JSON format |
find_and_merge_duplicates | write | Find duplicate or near-duplicate notes and optionally merge them |
get_note_versions | read | Retrieve the version history of a note (up to 10 most recent versions). |
rename_tag | write | Rename a tag across all notes that use it. Supports dry_run to preview changes. |
replace_section | read | Replace the content of a Markdown section (## heading) in a note without touching other sections. |
server_health_check | read | Basic server health and responsiveness test |
Trust audit
CAUTIONgrade F · trust 56/100 Install with care. The audit found things worth knowing before you trust its output.
| Layer | What it checks | Result |
|---|---|---|
| L0 | Provenance & inventory | PASS |
| L1 | Static analysis of the code | WARN |
| L2 | Instruction surface (what it tells the agent) | PASS |
| L3 | Class-specific surface | PASS |
| L4 | Behavioural (sandbox) | SKIPPED |
What the source does
- Filesystem
- declared (5 observation(s))
- Network
- declared (13 observation(s))
- Shell
- declared (4 observation(s))
- Dependencies
- not all pinned
- Secrets in source
- found
Findings (25)
importlib.import_module(module_name)
return importlib.import_module(module_name)
logger.warning(f"Invalid from date format: {token.value}")logger.warning(f"Invalid to date format: {token.value}")CMD python -c "import sys,urllib.request; sys.exit(0 if urllib.request.urlopen('http://127.0.0.1:8080/health', timeout=5).status == 200 else 1)"if curl -s -o /dev/null "http://127.0.0.1:${port}/mcp" 2>/dev/null; then-X POST "http://127.0.0.1:${port}/mcp" \-X POST "http://127.0.0.1:${port}/mcp" \return f"{seconds * 1000000:.2f}μs"local token="docker-ci-smoke-test-token"
.bandit
.claude-code-hooks.yaml
.claude-code-settings.json
.env.local
.lycheerc.toml
exec(import_test)
exec(import_test)
exec(`gh pr merge ${pr.number} --auto --squash`, (err, stdout, stderr) => {return hashlib.md5(combined.encode(), usedforsecurity=False).hexdigest()
for _ in range(random.randint(3, 8)): # Insert 3-8 keywords # noqa: S311
keyword = random.choice(keywords) # noqa: S311
"~/.ssh/id_rsa",
parts.append(f" ([{short_hash}](../../commit/{commit.hash}))")project_root = os.path.abspath(os.path.join(script_dir, "../../"))
project_root = os.path.abspath(os.path.join(script_dir, "../../"))
Gates applied: no_behavioural_pass.
a89271f97d57full audit observations/trust-audit/mcp-server/docdyhr__simplenote-mcp-server.json · Report an issue / request a re-scanAudit history
Every audit this server has had. A grade with a past is a grade somebody is still checking.
| Date | Source | Verdict | Grade | Score | Change |
|---|---|---|---|---|---|
| 2026-10-10 | a89271f97d57 | CAUTION | F | 56 | first audit |
Questions
What is the simplenote-mcp-server MCP server?
MCP Server for Simplenote integration with Claude Desktop
What tools does simplenote-mcp-server expose?
7 in total: 5 read-only, 2 that write, and 0 that can delete or overwrite. Every one is listed on this page with its risk.
Is simplenote-mcp-server safe to connect to an agent?
With care. The audit graded it F (56/100) and found 25 things worth knowing before you trust this server, listed below with the exact line each was found on.
What credentials does simplenote-mcp-server need?
It reads ALERT_SMTP_PASSWORD, ALERT_WEBHOOK_SECRET, DOCKER_TOKEN, GITHUB_TOKEN, HAS_OPENAI_KEY, HTTP_ENDPOINT_AUTH_TOKEN, MCP_HTTP_AUTH_TOKEN, PASS_RATE, QUALITY_GATE_PASSED, SESSION_SECRET_KEY, SIMPLENOTE_PASSWORD and SIMPLENOTE_TOKEN from the environment. Give it a token scoped to the least it needs — an agent that can be talked into calling a tool can be talked into calling it with your credentials.
How does simplenote-mcp-server run?
It speaks stdio and streamable-http, so it runs as a local process your client starts. It is published on npm as simplenote-mcp-server-evals at 1.0.0.
How current is this page?
The grade is for one exact copy of the source (a89271f97d57), read on 2026-10-10. The repository is watched and re-audited when it changes.