MoldaviteCAUTION
Your thoughts, forged from cosmic impact. A local-first, privacy-first Markdown notes app with a built-in MCP server, for macOS and Windows.
Overview
From the repository's own README, as read at the audited commit. Badges and raw HTML are left out.
Website · Try it in your browser · Guide · Agent Skills · Download
Notes that stay yours. Moldavite keeps every note as a Markdown file in a folder you choose, on your computer. Local search, wiki-links, daily notes, a calendar, and a built-in MCP server for the AI tools you already use.
No Moldavite account. No telemetry. Optional iCloud Drive sync on Mac. If Moldavite disappeared tomorrow, you would still have every note, in plain text, exactly where you left it.
Local-first for macOS, iPhone and iPad, and for Windows and Linux in beta.
Install
macOS. Homebrew fetches the signed, notarized build for your architecture and puts moldavite on your PATH:
brew install --cask mauropereiira/moldavite/moldavite
Or take the DMG from the latest release.
Windows. Download Moldavite_x.x.x_x64-setup.exe from the same page. The installer is not Authenticode-signed yet, so SmartScreen will warn you once: choose More info → Run anyway. Updates delivered inside the app are cryptographically signed and verified before they install.
Linux (beta). Download Moldavite_x.x.x_amd64.AppImage for any distribution, Moldavite_x.x.x_amd64.deb for Debian and Ubuntu, or Moldavite-x.x.x-1.x86_64.rpm for Fedora. All need glibc 2.38 or newer, which means Ubuntu 24.04, Debian 13, Fedora 39 or later; the local semantic-search runtime sets that floor. Mark the AppImage executable once, and install libfuse2 if your distribution does not ship it (`sudo apt
ea102a4168e8OBSERVED · 2026-10-10Connect
Built from this server's own package name, version and transport as found in its source — not copied from anyone's documentation, so it cannot drift against a page we do not control.
claude mcp add moldavite -- npx -y [email protected]
{
"mcpServers": {
"moldavite": {
"command": "npx",
"args": [
"-y",
"[email protected]"
]
}
}
}Exposed tools (1)
1 read · 0 write · 0 destructive.
| Tool | Risk | Description |
|---|---|---|
Meeting | read | Agenda and actions |
Trust audit
CAUTIONgrade B · trust 86/100 Install with care. The audit found things worth knowing before you trust its output.
| Layer | What it checks | Result |
|---|---|---|
| L0 | Provenance & inventory | WARN |
| L1 | Static analysis of the code | WARN |
| L2 | Instruction surface (what it tells the agent) | PASS |
| L3 | Class-specific surface | PASS |
| L4 | Behavioural (sandbox) | SKIPPED |
What the source does
- Filesystem
- declared (8 observation(s))
- Network
- declared (8 observation(s))
- Shell
- none-observed
- Dependencies
- not all pinned
- Secrets in source
- none-found
Findings (24)
icon.icns
let redirect_uri = format!("http://127.0.0.1:{port}");"http://127.0.0.1:5000",
"http://127.0.0.1:5173/",
.get(format!("http://127.0.0.1:{port}/")).env.local.example
.prettierignore
.taurignore
(cd dist/chrome && zip -r ../../moldavite-clipper-chrome.zip .)
(cd dist/chrome-store && zip -r ../../moldavite-clipper-chrome-store.zip .)
fileGroups: [../../src]
- path: ../../ios/PrivacyInfo.xcprivacy
- path: ../../ios/Widget/Sources
pathlib.Path("src-tauri/Moldavite.provisionprofile").write_bytes(base64.b64decode(value, validate=True))@mozilla/readability, turndown, turndown-plugin-gfm, esbuild, jsdom, vitest
@fontsource/instrument-serif, @fontsource/inter, @fontsource/merriweather, @tauri-apps/api, @tauri-apps/plugin-dialog, @tauri-apps/plugin-process, @tauri-apps/plugin-shell, @tauri-apps/plugin-updater
branding/Moldavite-brand-kit.zip
- **Apple Calendar and Google Calendar on iPhone and iPad.** Connect either or both in Settings → Calendar and your events appear in the Agenda under the month calendar; Settings → Features can hide t
land in that plugin's library. The bridge requests full access
Full Access lists the calendars at once: EventKit kept answering "not
choose <strong>Full Access</strong>: with <strong>Add Events Only</strong> the app
read the active editor, or store credentials, depending on its permissions. Users should
<td>Read, write, and delete this plugin's OS credential-store entries.</td>
no access to your notes, your calendar, or any credential you give the app. Everything
Gates applied: no_behavioural_pass.
ea102a4168e8full audit observations/trust-audit/mcp-server/mauropereiira__moldavite.json · Report an issue / request a re-scanAudit history
Every audit this server has had. A grade with a past is a grade somebody is still checking.
| Date | Source | Verdict | Grade | Score | Change |
|---|---|---|---|---|---|
| 2026-10-10 | ea102a4168e8 | CAUTION | B | 86 | first audit |
Questions
What is the Moldavite MCP server?
Your thoughts, forged from cosmic impact. A local-first, privacy-first Markdown notes app with a built-in MCP server, for macOS and Windows.
What tools does Moldavite expose?
1 in total: 1 read-only, 0 that write, and 0 that can delete or overwrite. Every one is listed on this page with its risk.
Is Moldavite safe to connect to an agent?
With care. The audit graded it B (86/100) and found 24 things worth knowing before you trust this server, listed below with the exact line each was found on.
What credentials does Moldavite need?
No credential environment variables were found in its source, so it appears to need none.
How current is this page?
The grade is for one exact copy of the source (ea102a4168e8), read on 2026-10-10. The repository is watched and re-audited when it changes.