AnkiCAUTION
MCP server for Anki via AnkiConnect
Overview
From the repository's own README, as read at the audited commit. Badges and raw HTML are left out.
A Model Context Protocol (MCP) server that enables LLMs to interact with Anki flashcard software through AnkiConnect.
Features
Tools
anki_check_connection- Check whether AnkiConnect is reachableanki_list_decks- List all available Anki decks, optionally with deck IDsanki_create_deck- Create a new Anki deckanki_list_tags- List all tags currently used in the collectionanki_add_note_tags- Add tags to one or more notesanki_remove_note_tags- Remove tags from one or more notesanki_create_note- Create a new noteanki_batch_create_notes- Create multiple notes at onceanki_search_notes- Search for notes using Anki query syntaxanki_get_note_info- Get detailed information about a noteanki_update_note- Update an existing note's fields and/or tagsanki_delete_note- Delete one or multiple notesanki_list_note_types- List all available note typesanki_create_note_type- Create a new note typeanki_get_note_type_info- Get detailed structure of a note typeanki_sync- Trigger AnkiWeb sync; requires{"confirm": true}because a full sync can merge or overwrite local and remote collections. Success means Anki accepted the request, not that AnkiWeb received the data; a blocking dialog in Anki can silently keep the sync queued
Legacy unprefixed tool names such as create_note and list_decks remain callable for existing clients, but new agent integrations should use the anki_* names.
Resources
anki://decks/all- Complete list of available decks with deck IDsanki://tags/all- Complete list of tagsanki://note-types/all- List of all available note typesanki://note-types/all-with-schemas- Detailed structure information for all note typesanki://note-types/{modelName}- Detailed structure information for a specific note type
Prerequisites
- Anki installed on your system
- [An
8a259c93295fOBSERVED · 2026-10-06Connect
Built from this server's own package name, version and transport as found in its source — not copied from anyone's documentation, so it cannot drift against a page we do not control.
claude mcp add anki-mcp-server -- npx -y [email protected]
Exposed tools (14)
7 read · 5 write · 2 destructive. Blast radius: 2 tools can delete or overwrite — an agent that can be talked into calling a tool can be talked into calling this one.
| Tool | Risk | Description |
|---|---|---|
anki_add_note_tags | write | Use when the user wants to add one or more tags to existing notes for organization. Do not use when the user wants to remove tags (use anki_remove_note_tags) or update note content (use anki_update_note). Safety: confirm before adding tags to a large number of notes. |
anki_batch_create_notes | write | Use when the user wants to create multiple study cards at once (2–50 notes). Prefer this over repeated anki_create_note calls. Returns per-note success and error details. Safety: ask the user to confirm before creating a large batch of notes. |
anki_check_connection | read | Check whether AnkiConnect is reachable and return the API version. |
anki_create_deck | write | Create an Anki deck by name. |
anki_delete_note | destructive | Use when the user explicitly asks to permanently delete one or more notes. Do not use when the user only wants to inspect, search, or update notes. Safety: always confirm with the user before deleting any note — this action is irreversible. |
anki_get_note_info | read | Get detailed information for one note ID. |
anki_get_note_type_info | read | Use when inspecting a note type before creating or updating notes, especially for non-standard models. Returns fields and card templates. Call this before anki_create_note when using a custom note type. Do not use when the user wants to create notes or modify a note type. |
anki_list_decks | read | List all available Anki decks, optionally with deck IDs. |
anki_list_note_types | read | List all available Anki note types/models. |
anki_list_tags | read | List all tags currently used in the Anki collection. |
anki_remove_note_tags | destructive | Use when the user wants to remove specific tags from one or more existing notes. Do not use when the user wants to add tags (use anki_add_note_tags) or clear all tags (use anki_update_note with an empty tags array). Safety: confirm with the user before removing tags, as this modifies note metadata. |
anki_search_notes | read | Search notes with Anki query syntax and return paginated note details. |
anki_sync | write | Request AnkiWeb sync. Requires { |
anki_update_note | write | Use when the user wants to edit the fields or replace the tags of an existing note. Do not use when the user only wants to inspect note content (use anki_get_note_info) or delete it (use anki_delete_note). Safety: confirm with the user before overwriting note content. |
Trust audit
CAUTIONgrade B · trust 89/100 Install with care. The audit found things worth knowing before you trust its output.
| Layer | What it checks | Result |
|---|---|---|
| L0 | Provenance & inventory | WARN |
| L1 | Static analysis of the code | PASS |
| L2 | Instruction surface (what it tells the agent) | PASS |
| L3 | Class-specific surface | WARN |
| L4 | Behavioural (sandbox) | SKIPPED |
What the source does
- Filesystem
- declared (1 observation(s))
- Network
- none-observed
- Shell
- none-observed
- Dependencies
- pinned
- Secrets in source
- none-found
Findings (5)
macos APP Icons.icns
anki_delete_note, anki_remove_note_tags
.mise.toml
.node-version
Gates applied: no_behavioural_pass, no_license.
8a259c93295ffull audit observations/trust-audit/mcp-server/nailuogg__anki-3.json · Report an issue / request a re-scanAudit history
Every audit this server has had. A grade with a past is a grade somebody is still checking.
| Date | Source | Verdict | Grade | Score | Change |
|---|---|---|---|---|---|
| 2026-10-06 | 8a259c93295f | CAUTION | B | 89 | first audit |
Questions
What is the Anki MCP server?
MCP server for Anki via AnkiConnect
What tools does Anki expose?
14 in total: 7 read-only, 5 that write, and 2 that can delete or overwrite (anki_delete_note, anki_remove_note_tags). Every one is listed on this page with its risk.
Is Anki safe to connect to an agent?
With care. The audit graded it B (89/100) and found 5 things worth knowing before you trust this server, listed below with the exact line each was found on. Separately from the audit: 2 of its tools can destroy data, so scope the token you give it to what you actually need.
What credentials does Anki need?
No credential environment variables were found in its source, so it appears to need none.
How does Anki run?
It speaks stdio, so it runs as a local process your client starts. It is published on npm as anki-mcp-server at 0.2.0.
How current is this page?
The grade is for one exact copy of the source (8a259c93295f), read on 2026-10-06. The repository is watched and re-audited when it changes.