AIOps Field Notes

AIOps Field Notes MCP server

Four things I kept doing by hand while running AI in production, turned into tools an agent can call: price a model before committing a budget, size a GPU before ordering one, review an MCP config before trusting it, and explain what changed in a network device config.

Free, MIT, no account, no telemetry.

Install

Pin the version — see audit_mcp_config for why.

Claude Code

claude mcp add aiops-field-notes -- npx -y github:labaccessnow/aiops-field-notes-mcp#v0.1.1

Claude Desktop, Cursor, or any client with a JSON config

{  "mcpServers": {    "aiops-field-notes": {      "command": "npx",      "args": ["-y", "github:labaccessnow/aiops-field-notes-mcp#v0.1.1"]    }  }}

Docker

{  "mcpServers": {    "aiops-field-notes": {      "command": "docker",      "args": ["run", "-i", "--rm", "ghcr.io/labaccessnow/aiops-field-notes-mcp:0.1.1"]    }  }}

Node 18 or newer for the npx route; nothing else to configure either way. The server is also in the official MCP registry as io.github.labaccessnow/aiops-field-notes-mcp.

Tools

audit_mcp_config

The one I use most. Paste a client config and it reads it the way a reviewer would — every server entry is an access grant, so the questions are what it can reach, who publishes it, and what happens the next time it auto-updates:

6 servers reviewed — 7 high, 6 medium, 0 low.
files  [high] Package version is not pinned    files runs "@modelcontextprotocol/server-filesystem" at whatever version is published when it launches.    fix: Pin it — "@modelcontextprotocol/server-filesystem@<version>" for npm, "@modelcontextprotocol/server-filesystem==<version>" for uvx — and bump deliberately.  [high] Filesystem root is wide open    files is granted "/" — that is the whole home directory or the whole disk, including keys and browser profiles.    fix: Scope the server to the project directories the agent actually works in.  [medium] Installs without prompting    files passes -y, so a new release installs and runs with no confirmation.    fix: Keep the flag only alongside a pinned version, so what installs is what you reviewed.
notes  [high] Package version is not pinned    notes runs "some-random-notes-mcp" at whatever version is published when it launches.    fix: Pin it — "some-random-notes-mcp@<version>" for npm, "some-random-notes-mcp==<version>" for uvx — and bump deliberately.  [high] Secret is stored in the config file    notes has NOTES_API_KEY written out in plaintext; config files get committed, synced and screenshared.    fix: Reference the environment instead — "NOTES_API_KEY": "${NOTES_API_KEY}" — and keep the value in your secret store.  [medium] Installs without prompting    notes passes -y, so a new release installs and runs with no confirmation.    fix: Keep the flag only alongside a pinned version, so what installs is what you reviewed.  [medium] Publisher not in the tracked set    "some-random-notes-mcp" is not one of the reference or vendor servers this directory tracks.    fix: Read the source and check the publisher before wiring it into an agent that touches production.

It also flags shell entrypoints, privileged containers, host-root mounts, credentials on the command line, database access that is not read-only, unauthenticated remote servers, and anything reached over plain HTTP.

What it does not do

• No account, no signup, no key.
• No telemetry. Nothing about your usage leaves your machine.
• No filesystem access. audit_mcp_config takes the config as text, so the server never reads your disk.
• One network call in the whole package: latest_field_note fetches a public RSS feed. Skip that tool and this server never opens a socket.

The cost table, GPU list and server directory match the calculators at aiopsfieldnotes.com/tools and get re-verified with each weekly episode. Pricing moves — check the vendor's page before you commit a budget to it.

Where the network tools come from

explain_config_diff and check_config_compliance are the read-only core of DriftWatch, which runs the same rules nightly across a fleet and keeps the history. Here you get the single-shot version, on two snapshots you paste, with no storage and no scheduler. That is deliberate: the rules are the useful part, and they work fine on their own.

Licence

MIT. Written by James Son — network, security, and automation engineer — and tested in a live multi-vendor lab. Contributions and corrections welcome.