How do I install Footnote?

Footnote is a local plugin. Install it using PyPI package: footnote-mcp and add the generated configuration snippet to your AI app's MCP config file. Then restart your AI app.

Is Footnote safe to use?

Footnote was flagged by MCP Marketplace's security scan, scoring 4.2/10 (high risk). It has 6 high or critical findings to review. Review the security report on this page carefully before installing it.

What AI apps work with Footnote?

Footnote uses the Model Context Protocol (MCP) and works with any MCP-compatible AI app, including Claude, ChatGPT / Codex, Gemini, Copilot, Cursor, and more.

Back to Browse

Footnote MCP Server

by KazKozDev

Developer ToolsUse Caution4.2MCP RegistryLocal

Free

Server data from the Official MCP Registry

Source-grounded web research: search, extraction, verification, and browser automation.

About

Source-grounded web research: search, extraction, verification, and browser automation.

Security Report

4.2

Use Caution4.2High Risk

footnote-mcp is a well-architected web research server with appropriate auth for hosted deployments and reasonable permission scope. The codebase demonstrates good security practices overall: proper API key handling via environment variables, no hardcoded credentials, and thoughtful access controls. However, moderate concerns exist around the sandboxed code execution feature (tool_code_run_sandboxed), subprocess-based validation, and the breadth of network access required for its research purpose. These are acceptable trade-offs for the server's stated functionality but warrant user awareness. Supply chain analysis found 9 known vulnerabilities in dependencies (0 critical, 6 high severity). Package verification found 1 issue.

4 files analyzed · 18 issues found

Security scores are indicators to help you make informed decisions, not guarantees. Always review permissions before connecting any MCP server.

Permissions Required

This plugin requests these system permissions. Most are normal for its category.

HTTP Network Access

Connects to external APIs or services over the internet.

network_websocket