Note Taking Ai MCP Server

This note-taking MCP server has several concerning security issues that require attention. The most critical issue is an unsafe file path injection pattern where user input is directly used to construct file system paths without validation, creating potential for directory traversal attacks. Additionally, the authentication middleware relies on local filesystem access without encryption or secure storage mechanisms, and there is an unvalidated external import from a hardcoded user directory that could be exploited if that directory is compromised. While the server implements rate limiting and has no direct data exfiltration patterns, these structural security flaws present real risks to users. Supply chain analysis found 3 known vulnerabilities in dependencies (0 critical, 3 high severity). Package verification found 1 issue.

7 files analyzed · 14 issues found

Security scores are indicators to help you make informed decisions, not guarantees. Always review permissions before connecting any MCP server.