Atlas / MCP servers / the-flash-7 / OpenNote

OpenNoteCAUTION

Name: OpenNote
Author: the-flash-7

mcp/the-flash-7/opennote-2

MCP server by the-flash-7 · agent · ai · cli · Audited 2026-10-08

⚑ Report / re-scan Source ↗

一款跨平台智能笔记 Agent 应用,支持多格式笔记、本地知识库、AI 智能助手、向量语义检索。

Verdict

CAUTION

Grade

Trust score

87 /100

Exposed tools

6 3r · 2w · 1d

Transport

stdio

License

NOASSERTION

Stars

Overview

From the repository's own README, as read at the audited commit. Badges and raw HTML are left out.

**官方网站** | **文档**

Read from source at commit 79a7ee1f964bOBSERVED · 2026-10-08

Connect

Built from this server's own package name, version and transport as found in its source — not copied from anyone's documentation, so it cannot drift against a page we do not control.

claude-code

claude mcp add open-note-mcp -- uvx open-note-mcp

claude-desktop

{
  "mcpServers": {
    "open-note-mcp": {
      "command": "uvx",
      "args": [
        "open-note-mcp"
      ]
    }
  }
}

Exposed tools (6)

3 read · 2 write · 1 destructive. Blast radius: 1 tool can delete or overwrite — an agent that can be talked into calling a tool can be talked into calling this one.

Tool	Risk	Description
`create_note`	write	创建笔记。返回创建的笔记详情。
`delete_note`	destructive	删除笔记(软删除)。删除后可在回收站恢复。
`get_note`	read	查看笔记详情。返回笔记的完整内容。
`list_notes`	read	列出笔记。默认按更新时间倒序排列。支持按分类和收藏过滤。
`search_notes`	read	搜索笔记。按标题、内容或摘要搜索。支持按分类、标签和收藏过滤。
`update_note`	write	编辑笔记。可以更新标题和/或内容。返回更新后的笔记详情。

Trust audit

CAUTIONgrade B · trust 87/100 Install with care. The audit found things worth knowing before you trust its output.

Layer	What it checks	Result
L0	Provenance & inventory	PASS
L1	Static analysis of the code	WARN
L2	Instruction surface (what it tells the agent)	PASS
L3	Class-specific surface	WARN
L4	Behavioural (sandbox)	SKIPPED

What the source does

Filesystem: declared (2 observation(s))
Network: declared (9 observation(s))
Shell: none-observed
Dependencies: not all pinned
Secrets in source: none-found

Findings (15)

MEDIUMNetwork egress · net.raw_ip · CWE-200, CWE-319

lib/providers/notes_provider.dart:109

String serviceUrl = 'http://127.0.0.1:8765',

MEDIUMNetwork egress · net.raw_ip · CWE-200, CWE-319

lib/services/embedding_service.dart:39

String serviceUrl = 'http://127.0.0.1:8765',

MEDIUMNetwork egress · net.raw_ip · CWE-200, CWE-319

lib/services/file_import_service.dart:27

static const String _pythonServiceUrl = 'http://127.0.0.1:8765';

MEDIUMNetwork egress · net.raw_ip · CWE-200, CWE-319

lib/services/python_service_manager.dart:24

String _baseUrl = 'http://127.0.0.1:8765';

MEDIUMNetwork egress · net.raw_ip · CWE-200, CWE-319

lib/services/python_service_manager.dart:129

.get(Uri.parse('http://127.0.0.1:$port/api/service/identity'))

MEDIUMFilesystem / path · mcp.destructive_tools · CWE-22, CWE-59

delete_note

Why it matters. 1 tool(s) can delete or overwrite

Fix. prefer a read-only mode or scoped tokens; the page states the blast radius

LOWObfuscation / stealth · obf.base64_blob · CWE-506, CWE-94

README.md:38

src="https://img.shields.io/badge/dynamic/json?url=https%3A%2F%2Fpypi.org%2Fpypi%2Fopen-note-mcp%2Fjson&query=%24.info.version&prefix=v&logo=data:image/svg+xml;base64,PD94bWwgdmVyc2lvbj0iMS4wIiBzdGFuZ

LOWPrivilege escalation / persistence · priv.escalate · CWE-269, CWE-250

.github/workflows/build.yml:27

sudo apt-get update

Why it matters. asks for elevated privileges

LOWPrivilege escalation / persistence · priv.escalate · CWE-269, CWE-250

.github/workflows/build.yml:28

sudo apt-get install -y clang cmake ninja-build pkg-config libgtk-3-dev liblzma-dev libstdc++-12-dev libkeybinder-3.0-0 libkeybinder-3.0-dev gir1.2-keybinder-3.0

Why it matters. asks for elevated privileges

LOWSupply chain · supply.unpinned · CWE-829, CWE-1357

embedding_service/requirements.txt

fastapi, uvicorn, pydantic, numpy, tokenizers, chromadb, hnswlib, opentelemetry-instrumentation

Why it matters. 12 requirement(s) not pinned with ==

Fix. pin exact versions