md-businessBLOCK
Business documents as Markdown — invoices, design docs and test sheets validated by JSON Schema, rendered to A4 PDF, and editable by AI agents through a built-in MCP server. Tauri desktop app + Chrome extension.
Overview
From the repository's own README, as read at the audited commit. Badges and raw HTML are left out.
[](https://github.com/meta-taro/md-business/actions/workflows/ci.yml) [](./LICENSE) [](https://nodejs.org/) [](https://pnpm.io/) [](https://chromewebstore.google.com/detail/lmdplkkfmgapnhombimeohjliinifgjh)
[⬇ Download the desktop app](https://meta-taro.github.io/md-business/download/) (Windows / macOS) — installers, no build step. Or add the Chrome extension to read and print Markdown business documents in the browser.
English | 日本語
AI-native business documents, powered by Markdown as the source of truth.
md-business is an open-source framework for managing business documents as Markdown files with structured frontmatter, schemas, validation, Git history, and human-friendly viewers.
It is not just a Markdown viewer, a PDF generator, or a template collection.
md-business treats Markdown as the canonical source of truth for invoices, test specifications, design documents, API documents, database design documents, estimates, meeting notes, and other operational documents. AI agents can create, edit, validate, diff, and render these documents directly, while humans can review and consume them through familiar interfaces such as PDF, Google Workspace, Chrome, VS Code, PWA, desktop apps, or GitHub.
Why this exists
Most business documents still live inside tools designed primarily for humans:
- Word processors
- Spreadsheets
- PDFs
- Cloud drives
- Office suites
- SaaS back-office tools
- Internal web forms
These tools are useful for human input and review, but t
170c948d15d4OBSERVED · 2026-10-11Connect
Built from this server's own package name, version and transport as found in its source — not copied from anyone's documentation, so it cannot drift against a page we do not control.
claude mcp add schema-test-spec -- npx -y @md-business/[email protected]
{
"mcpServers": {
"schema-test-spec": {
"command": "npx",
"args": [
"-y",
"@md-business/[email protected]"
]
}
}
}Exposed tools (36)
30 read · 6 write · 0 destructive.
| Tool | Risk | Description |
|---|---|---|
about_md_business | read | |
aggregate | read | |
append_tsv_row | read | |
build_timeline | read | |
capture_window | read | |
check_tsv | read | |
close_document | read | |
create_document | write | |
data_to_table | read | |
declare_web_mode | read | |
export_pdf | read | |
filter_records | read | |
get_schema | read | |
git_commit | write | |
git_diff | read | |
git_status | read | |
list_open_documents | read | |
list_schemas | read | |
list_site_files | read | |
open_in_app | read | |
orders | read | 注文ヘッダ |
read_data | read | |
read_document | read | |
read_har | read | |
read_lines | read | |
read_site_file | read | |
read_tsv | read | |
save_evidence | write | |
search_documents | read | |
search_lines | read | |
update_document | write | |
update_tsv_row | write | |
users | read | 利用者マスター |
validate_document | read | |
web_mode_status | read | |
write_site_file | write |
Trust audit
BLOCKgrade F · trust 47/100 Do not install this without reading the findings. The audit found something that could harm you or your machine.
| Layer | What it checks | Result |
|---|---|---|
| L0 | Provenance & inventory | WARN |
| L1 | Static analysis of the code | FAIL |
| L2 | Instruction surface (what it tells the agent) | PASS |
| L3 | Class-specific surface | PASS |
| L4 | Behavioural (sandbox) | SKIPPED |
What the source does
- Filesystem
- declared (6 observation(s))
- Network
- declared (7 observation(s))
- Shell
- declared (8 observation(s))
- Dependencies
- not all pinned
- Secrets in source
- found
Findings (25)
const parsed = yaml.load(yamlStr, { schema: yaml.JSON_SCHEMA });parsed = yaml.load(yamlStr, { schema: yaml.JSON_SCHEMA });parsed = yaml.load(yamlStr, { schema: yaml.JSON_SCHEMA });const hasFn = code.includes("Function('return this')") || code.includes('Function("return this")');run: (args) => exec(buildGitArgs(getRoot(), args)),
{ name: 'eval(', re: /\beval\s*\(/g },{ name: 'new Function(', re: /\bnew\s+Function\s*\(/g },{ name: 'Function("...")', re: /\bFunction\s*\(\s*['"`]/g },icon.icns
r#"<!doctype html><meta charset="utf-8"><body><script>fetch("http://127.0.0.1:{port}/")</script>"#r#"<!doctype html><meta charset="utf-8"><meta http-equiv="refresh" content="0;url=http://127.0.0.1:{port}/"><body>x"#const UTF8_BOM = '';
const UTF8_BOM = '';
const secret = 'ghp_SECRETmiddleVISIBLE9999';
const pat = 'github_pat_11ABCDEFG0somerandompayloadXYZ';
.claspignore
.nojekyll
const parsed = yaml.load(y) as { columns: Array<{ name: string; type: string }> };const parsed = yaml.load(extractFrontmatter(r.newSrc).yaml) as {expect(parseShareLink('md-business://open?repo=github.com/o/r&path=../../.ssh/id_rsa')).toBeNull();assert!(!is_valid_commit_path("docs/../../x.md"), "途中の .. も拒否");route(TOKEN, &format!("/{}/../../etc/passwd", TOKEN)),Route::Page("../../etc/passwd".to_string())readFileSync(fileURLToPath(new URL('../../src-tauri/capabilities/default.json', import.meta.url)), 'utf8'),const out = await load(chart('type: line\nsource: ../../外.tsv\nx: 日付\ny: セッション'), {Gates applied: no_behavioural_pass.
170c948d15d4full audit observations/trust-audit/mcp-server/meta-taro__md-business.json · Report an issue / request a re-scanAudit history
Every audit this server has had. A grade with a past is a grade somebody is still checking.
| Date | Source | Verdict | Grade | Score | Change |
|---|---|---|---|---|---|
| 2026-10-11 | 170c948d15d4 | BLOCK | F | 47 | first audit |
Questions
What is the md-business MCP server?
Business documents as Markdown — invoices, design docs and test sheets validated by JSON Schema, rendered to A4 PDF, and editable by AI agents through a built-in MCP server. Tauri desktop app + Chrome extension.
What tools does md-business expose?
36 in total: 30 read-only, 6 that write, and 0 that can delete or overwrite. Every one is listed on this page with its risk.
Is md-business safe to connect to an agent?
No — not without reading the findings first. The audit graded it F (47/100) and found 8 critical or high issues in the source. Each one is listed on this page with the file and line it is on.
What credentials does md-business need?
No credential environment variables were found in its source, so it appears to need none.
How does md-business run?
It speaks stdio and streamable-http, so it runs as a local process your client starts. It is published on npm as @md-business/schema-test-spec at 0.0.0.
How current is this page?
The grade is for one exact copy of the source (170c948d15d4), read on 2026-10-11. The repository is watched and re-audited when it changes.