KaydetSAFE
Never lose a solution twice. Terminal note-taking app for developers. CLI notes, work logs, daily journal, with SQLite FTS search and MCP AI integration.
Overview
From the repository's own README, as read at the audited commit. Badges and raw HTML are left out.
Kaydet (pronounced "kai-det", Turkish for "record") is a terminal note-taking application for developers. Capture work logs, ideas, daily notes, and structured metadata in plain text. Instantly search everything with SQLite FTS, and let your AI search your history too.
[](https://github.com/miratcan/kaydet/actions) [](https://github.com/miratcan/kaydet/actions/workflows/test.yml) [](LICENSE) [](https://www.python.org/downloads/) [](https://github.com/miratcan/kaydet/stargazers)
Install
pipx install kaydet
With AI (MCP) support:
pipx install kaydet[mcp]
Also available via:
uv tool install kaydet # uv
Quick Start
# Capture a solution (terminal notes, instantly) kaydet "Fixed auth race condition commit:abc123 issue:312" # Pipe command output into a new entry ls -lah | kaydet git log -5 --oneline | kaydet #git # 6 months later — find it kaydet --filter auth # Log what you worked on (work log / developer diary) kaydet "Deep work on ETL pipeline #work time:3h focus:high" # Todo from the command line (CLI notes + tasks) kaydet --todo "Write unit tests priority:high" kaydet --done 42 # Search by metadata kaydet --filter "status:done" kaydet --filter "time:>2" # Open today's entry in your editor kaydet --today # See your stats (plain text notes, searchable) kaydet --stats
AI Integration
Powered by MCP (Model Context Protocol). Connect Claude Desktop, Cursor, or any MCP-compatible tool:
// claude_desktop_config.json
{
"mcpSe87697eb55924OBSERVED · 2026-10-08Connect
Built from this server's own package name, version and transport as found in its source — not copied from anyone's documentation, so it cannot drift against a page we do not control.
claude mcp add kaydet -- uvx kaydet
{
"mcpServers": {
"kaydet": {
"command": "uvx",
"args": [
"kaydet"
]
}
}
}Exposed tools (2)
1 read · 0 write · 1 destructive. Blast radius: 1 tool can delete or overwrite — an agent that can be talked into calling a tool can be talked into calling this one.
| Tool | Risk | Description |
|---|---|---|
delete_entry | destructive | Delete an entry by numeric identifier |
get_entry | read | Get a single entry by its numeric ID |
Trust audit
SAFEgrade B · trust 89/100 Nothing in the source contradicts what it says it does. Grade A is reserved for packages that have also passed the behavioural sandbox.
| Layer | What it checks | Result |
|---|---|---|
| L0 | Provenance & inventory | PASS |
| L1 | Static analysis of the code | PASS |
| L2 | Instruction surface (what it tells the agent) | PASS |
| L3 | Class-specific surface | WARN |
| L4 | Behavioural (sandbox) | SKIPPED |
What the source does
- Filesystem
- declared (2 observation(s))
- Network
- none-observed
- Shell
- none-observed
- Dependencies
- pinned
- Secrets in source
- none-found
Findings (5)
delete_entry
.llm-context.md
.pre-commit-config.yaml
assets/logo.png
# Reminders (add to ~/.zshrc)
Gates applied: no_behavioural_pass.
87697eb55924full audit observations/trust-audit/mcp-server/miratcan__kaydet.json · Report an issue / request a re-scanAudit history
Every audit this server has had. A grade with a past is a grade somebody is still checking.
| Date | Source | Verdict | Grade | Score | Change |
|---|---|---|---|---|---|
| 2026-10-08 | 87697eb55924 | SAFE | B | 89 | first audit |
Questions
What is the Kaydet MCP server?
Never lose a solution twice. Terminal note-taking app for developers. CLI notes, work logs, daily journal, with SQLite FTS search and MCP AI integration.
What tools does Kaydet expose?
2 in total: 1 read-only, 0 that write, and 1 that can delete or overwrite (delete_entry). Every one is listed on this page with its risk.
Is Kaydet safe to connect to an agent?
The audit found nothing in the source that contradicts what it says it does, and graded it B (89/100). Grade A is held back for packages that have also passed a sandboxed behavioural run, which is why a clean server reads B. Separately from the audit: 1 of its tools can destroy data, so scope the token you give it to what you actually need.
What credentials does Kaydet need?
No credential environment variables were found in its source, so it appears to need none.
How does Kaydet run?
It speaks stdio, so it runs as a local process your client starts. It is published on PyPI as kaydet.
How current is this page?
The grade is for one exact copy of the source (87697eb55924), read on 2026-10-08. The repository is watched and re-audited when it changes.