Atlas / MCP servers / sandraschi / onenote-mcp

onenote-mcpBLOCK

Name: onenote-mcp
Author: sandraschi

mcp/sandraschi/onenote-mcp

MCP server by sandraschi · fastmcp · mcp · mcp server · Audited 2026-10-11

MCP server for Microsoft OneNote via Graph API - notebooks, sections, pages, search, device-code auth, Vite webapp + Tauri desktop app

Verdict

BLOCK

Grade

Trust score

69 /100

Exposed tools

25 18r · 6w · 1d

Transport

sse · stdio

License

MIT

Stars

Overview

From the repository's own README, as read at the audited commit. Badges and raw HTML are left out.

Your OneNote notebooks, readable and writable by both you and your AI assistant.

What this wraps

Microsoft OneNote via the Microsoft Graph API — notebooks, sections, and full page content, headless (no screen automation). See docs/WRAPPEE.md for official links, community, and disambiguation from similarly-named projects.

Preview

Two doors

MCP server, for AI agents — 26 tools + 1 prompt over stdio or

streamable HTTP (:10907/mcp): list/explore notebooks, read page HTML, create pages, title + full-text search, notebook TOC cards. Any MCP client (Claude Desktop, Cursor, Copilot) can browse and edit your notes.

Webapp, for humans — dashboard (:10906) with notebook tree browser,

rendered page viewer, search with filter/sort/pagination/CSV export, AI chat over your notes, skills, logging, settings. No prompt engineering required.

What You Can Do

Browse notebooks → sections → pages; read full page content rendered
Search titles instantly; build a local full-text index for body search
Create pages from plain text (paragraphs from blank lines)
Back up everything to Markdown files, any time
Ask the chat about your notes (local LLM via backend proxy, nothing leaks)
Run headless, as a Tauri desktop app, or from a .mcpb bundle

Install

Installation guide: INSTALL.md - a Windows app, a one-line add-on for Claude Desktop, or a config snippet for Cursor, VS Code and Claude Code.

Example Prompts

"Show me my OneNote notebooks"
"Find pages mentioning quarterly planning"
"Create a page in My Notebook titled Shopping with a bullet list"

Documentation

Read from source at commit 5c0d6d66c6f8OBSERVED · 2026-10-11

Connect

Built from this server's own package name, version and transport as found in its source — not copied from anyone's documentation, so it cannot drift against a page we do not control. Replace the environment placeholders with a token scoped to the least it needs.

claude-code

claude mcp add onenote-mcp-sota --env GRAPH_ACCESS_TOKEN=${GRAPH_ACCESS_TOKEN} --env ONENOTE_AUTHORITY=${ONENOTE_AUTHORITY} -- npx -y [email protected]

claude-desktop

{
  "mcpServers": {
    "onenote-mcp-sota": {
      "command": "npx",
      "args": [
        "-y",
        "[email protected]"
      ],
      "env": {
        "GRAPH_ACCESS_TOKEN": "${GRAPH_ACCESS_TOKEN}",
        "ONENOTE_AUTHORITY": "${ONENOTE_AUTHORITY}"
      }
    }
  }
}

Exposed tools (25)

18 read · 6 write · 1 destructive. Blast radius: 1 tool can delete or overwrite — an agent that can be talked into calling a tool can be talked into calling this one.

Tool	Risk	Description
`authenticate`	write	Start the Microsoft authentication flow using device code.
`get_onenote_page`	read	Get OneNote page content.
`get_onenote_page_text`	read	Get OneNote page as readable text.
`onenote_authenticate`	read
`onenote_create_notebook`	write	Create a new OneNote notebook.
`onenote_create_page`	write
`onenote_delete_page`	destructive	Permanently delete one OneNote page.
`onenote_export`	read	Back up notebooks to Markdown files (one per page + index).
`onenote_export_status`	read	Show Markdown backup progress (files written, output dir).
`onenote_get_notebook`	read
`onenote_get_notebook_toc`	read
`onenote_get_page`	read
`onenote_help`	read	List the available OneNote MCP tools and when to use each.
`onenote_index_start`	write	Build (or refresh) the local full-text search index.
`onenote_index_status`	read	Show full-text index build progress and coverage.
`onenote_list_notebooks`	read
`onenote_list_pages`	read
`onenote_list_section_groups`	read	List the section groups directly under a notebook.
`onenote_list_sections`	read
`onenote_recent`	read	List recently modified pages across all notebooks.
`onenote_save_access_token`	write	Save a Microsoft Graph access token for later use.
`onenote_save_token`	write
`onenote_search_pages`	read
`show_notebooks_card`	read	Show the user
`shutdown_server`	read	Shut down the onenote-mcp server gracefully.

Trust audit

BLOCKgrade D · trust 69/100 Do not install this without reading the findings. The audit found something that could harm you or your machine.

Layer	What it checks	Result
L0	Provenance & inventory	WARN
L1	Static analysis of the code	FAIL
L2	Instruction surface (what it tells the agent)	PASS
L3	Class-specific surface	WARN
L4	Behavioural (sandbox)	SKIPPED

What the source does

Filesystem: declared (1 observation(s))
Network: declared (6 observation(s))
Shell: none-observed
Dependencies: not all pinned
Secrets in source: none-found

Findings (21)

HIGHNetwork egress · net.env_exfil · CWE-200, CWE-319

scripts/cua-smoke.py:336

os.environ.copy() ... urllib.request

Why it matters. reads secrets in the same file that sends data out

MEDIUMInventory / provenance · inv.symlink · CWE-1104

scripts/backup-repo.ps1

scripts/backup-repo.ps1

Why it matters. link not followed

MEDIUMObfuscation / stealth · obf.zero_width · CWE-506, CWE-94

scripts/FleetStartMode.ps1:1

# FleetStartMode.ps1 - vendored per-repo copy (no mcp-central-docs required at runtime)

MEDIUMObfuscation / stealth · obf.zero_width · CWE-506, CWE-94

src/onenote_mcp/mcp_clients.py:69

text = (proc.stdout or "").strip().removeprefix("")

MEDIUMObfuscation / stealth · obf.zero_width · CWE-506, CWE-94

web_sota/start.ps1:1

# Fleet unified launcher - do not edit logic here.

MEDIUMFilesystem / path · mcp.destructive_tools · CWE-22, CWE-59

onenote_delete_page

Why it matters. 1 tool(s) can delete or overwrite

Fix. prefer a read-only mode or scoped tokens; the page states the blast radius