End-to-end encrypted access to a Standard Notes vault (protocol 004, local stdio only).
End-to-end encrypted access to a Standard Notes vault (protocol 004, local stdio only).
This MCP server demonstrates strong security practices with proper encryption, credential handling via OS keychain, and comprehensive input validation. The code uses libsodium for cryptographic operations, stores sensitive data (master key, session tokens) only in OS keychain or memory, and implements a redacting logger. Minor code quality issues and some broad exception handling do not substantially impact security posture. Supply chain analysis found 4 known vulnerabilities in dependencies (1 critical, 2 high severity). Package verification found 1 issue.
4 files analyzed · 10 issues found
Security scores are indicators to help you make informed decisions, not guarantees. Always review permissions before connecting any MCP server.
This plugin requests these system permissions. Most are normal for its category.
Set these up before or after installing:
Environment variable: SN_EMAIL
Environment variable: SN_SERVER_URL
Environment variable: SN_CERT_FINGERPRINT
Add this to your MCP configuration file:
{
"mcpServers": {
"io-github-lozit-mcp-standardnotes": {
"env": {
"SN_EMAIL": "your-sn-email-here",
"SN_SERVER_URL": "your-sn-server-url-here",
"SN_CERT_FINGERPRINT": "your-sn-cert-fingerprint-here"
},
"args": [
"-y",
"mcp-standardnotes"
],
"command": "npx"
}
}
}Be the first to review this server!
by Modelcontextprotocol · Developer Tools
Read, search, and manipulate Git repositories programmatically
by Toleno · Developer Tools
Toleno Network MCP Server — Manage your Toleno mining account with Claude AI using natural language.
by mcp-marketplace · Developer Tools
Create, build, and publish Python MCP servers to PyPI — conversationally.