Mcp Standardnotes

io.github.lozit由 GitHub 账号 lozit 发布v0.6.0更新于 Oct 24, 2026

End-to-end encrypted access to a Standard Notes vault (protocol 004, local stdio only).

已验证STDIO仅桌面效率与工作流文件与存储

概览

AI 生成的概览

让助手在本机读取、搜索、创建、更新和删除端到端加密的 Standard Notes 笔记库中的笔记与标签。

可以做什么
提供浏览和搜索笔记的工具（notes_list、notes_search、notes_get），写入笔记的工具（notes_create、notes_update、notes_delete，以及一次最多 50 条的 notes_create_many），以及查看笔记库统计的 notes_stats。还提供完整的标签管理（tags_list、tags_get、tags_create、tags_update、tags_delete、tags_attach、tags_detach）和强制同步的 sync 工具。解密在本地完成，服务器仅通过 stdio 通信。
适用场景
适合把笔记保存在 Standard Notes 中，并希望助手在不导出笔记库的情况下进行总结、起草、整理或搜索的场景。也适合希望以本地方式访问加密笔记库、不经过云端中间服务的用户。
运行要求
需要 Node.js 20 或更高版本、使用协议 004 的 Standard Notes 账户，以及可用的操作系统钥匙串（macOS Keychain、Linux libsecret 或 Windows Credential Vault）。先运行一次 npx mcp-standardnotes-login 输入密码并保存会话；设置 SN_EMAIL，自托管服务器可另设 SN_SERVER_URL 和 SN_CERT_FINGERPRINT。传输方式为 stdio，仅限桌面端。
安装前请注意
该服务器可以创建、更新和删除笔记与标签，助手的误操作可能改动或删除笔记库内容。它会处理账户密码和主密钥；密码在登录时输入，会话保存在操作系统钥匙串中。必须提供 SN_EMAIL，自托管时可选用 SN_CERT_FINGERPRINT 固定 TLS 证书。这是非官方第三方集成，与 Standard Notes Ltd. 无关联。

安装

在 SourceWeft 中

  1. 打开 控制台中的 Mcp Standardnotes，将其添加到工作区。
  2. 为需要使用其工具的对话启用该服务。

Desktop only，通过 STDIO。 STDIO 服务会启动本地进程，因此需要 SourceWeft 桌面宿主。

其他 MCP 客户端

参照 仓库 中的启动说明。

README

[mcp-standardnotes]

mcp-standardnotes

[CI] [License: MIT] [Node: ≥20]

Give Claude secure read/write access to your Standard Notes vault — end-to-end encrypted, local stdio only, zero cloud middleman.

Ask Claude to summarize your notes, draft new ones, organize tags, search across your vault — all while your master key stays on your machine. Works with Claude Code, Claude Desktop, and any MCP-compatible client.

Disclaimer. This is an unofficial third-party integration. Not affiliated with, endorsed by, or sponsored by Standard Notes Ltd. "Standard Notes" is a trademark of Standard Notes Ltd.

Why

  • 🔒 End-to-end encrypted. All decryption happens locally using audited libsodium primitives (Argon2id + XChaCha20-Poly1305 IETF). Your password never leaves RAM; your master key never leaves your machine.
  • 🔌 Local stdio only. No network port is ever opened by this server.
  • 🔑 OS keychain for session storage. macOS Keychain, Linux libsecret, Windows Credential Vault — never plaintext files.
  • ☁️ Works with the official cloud or self-hosted Standard Notes servers.

Features

ToolWhat it does
notes_list / notes_search / notes_getBrowse and search your notes (filter by tag with tag: "<uuid-or-title>")
notes_create / notes_update / notes_deleteWrite notes (markdown, super, code, rich-text, task, spreadsheet, plain-text)
notes_create_manyBatch-create up to 50 notes in one sync push
notes_statsVault stats: counts, sizes, oldest/newest/largest note
tags_list / tags_get / tags_create / tags_update / tags_deleteFull tag CRUD
tags_attach / tags_detachLink/unlink tags to notes
syncForce a sync with the server

notes_create and notes_update accept an optional tags: string[] (tag UUIDs) to link tags at write time.

Requirements

  • Node.js ≥ 20
  • A Standard Notes account on protocol 004 (default for any account created or upgraded since 2020)
  • macOS, Linux, or Windows with a working OS keychain

Quickstart

1. Install

bash
npm install -g mcp-standardnotes

Or run from a clone if you prefer:

bash
git clone https://github.com/lozit/mcp-standardnotes.gitcd mcp-standardnotesnpm install && npm run build

2. Log in once

bash
mcp-standardnotes-login         # if installed globally# or, from a clone:npm run login

You'll be prompted for email and password. The password derives your master key in memory (Argon2id) and is never written to disk. An encrypted session is stored in your OS keychain; subsequent runs reuse it automatically. At the end of login, you're offered to wire the server into Claude Desktop in one step — accept it, restart Desktop, done.

3. Hook it up to Claude

Claude Desktop (macOS / Windows) — easiest path, run:

bash
mcp-standardnotes-install

This writes the right entry (absolute Node + binary paths, your email from the keychain) into ~/Library/Application Support/Claude/claude_desktop_config.json (or %APPDATA%/Claude/claude_desktop_config.json on Windows), backing up any existing config first. Quit Claude Desktop fully (⌘Q) and relaunch.

Claude Code — let the claude CLI do it:

bash
mcp-standardnotes-install code   # prints the exact `claude mcp add` command

Or add to ~/.claude.json / .mcp.json manually:

json
{  "mcpServers": {    "mcp-standardnotes": {      "type": "stdio",      "command": "mcp-standardnotes",      "env": { "SN_EMAIL": "[email protected]" }    }  }}

Then /mcp to reconnect.

Any other MCP client — run node dist/index.js with SN_EMAIL set in the environment. Transport is stdio.

Self-hosting Standard Notes? See docs/self-hosted.md for the docker-compose recipe and how to pin your TLS certificate.

Want a remote agent (Hermes on a VPS, self-hosted LangGraph, etc.) to use your vault? See docs/remote-agent-bridge.md for the full Cloudflare Tunnel + MCP Portals setup. Your master key stays on your Mac; the agent talks to a public HTTPS endpoint gated by a Cloudflare service token, and Portals handles automatic MCP tool discovery, multi-server bundling, and Access application generation.

Configuration

VariableDefaultDescription
SN_EMAILrequiredYour SN account email. Must match what you used with npm run login.
SN_SERVER_URLhttps://api.standardnotes.comSync server URL. Change for self-hosted instances.
KEYCHAIN_SERVICEmcp-standardnotesOverride the keychain service name (useful for multiple accounts).
SN_CERT_FINGERPRINTunsetSHA-256 TLS cert pin for self-hosted servers (64 hex chars, colons optional). See docs/self-hosted.md.

Security at a glance

  • Password in RAM only during key derivation. Never logged, never stored.
  • Session + master key hex → OS keychain only. Never plaintext files.
  • stdio transport only. No HTTP port, ever.
  • All logs go to stderr, routed through a redactor that masks passwords, keys, JWTs, and token-like strings.
  • All tool inputs validated by zod.
  • npm audit HIGH/CRITICAL is a merge blocker in CI.
  • Only the protocol 004 framing is implemented locally; all cryptographic primitives come from libsodium-wrappers-sumo.

Full threat model and deep-dive: docs/protocol-004.md. Security policy, vulnerability reporting, and dependency-advisory notes: SECURITY.md.

Troubleshooting

Common issues and fixes: docs/troubleshooting.md.

Logout

bash
[email protected] mcp-standardnotes-logout# or, from a clone:[email protected] npm run logout

Roadmap

Upcoming work tracked in ROADMAP.md.

Contributing

Contributions welcome. See CONTRIBUTING.md for setup, tests, and PR checklist.

License

MIT — use it, fork it, ship it.

Credits

来源：README.md，提交 749d466

工具

0
SourceWeft 尚未在沙箱中启动过该软件包，因此其工具未知。

版本历史

1
  1. v0.6.0最新Sep 16, 2026

评分

已满足适用检查项的 50%

该评分衡量此收录条目的完整程度，依据注册中心条目、端点与公开来源计算得出。它不是对服务器本身的评价，也不表示服务器安全或当前可用：可连通性是带日期的检查结果，评分也不包含安装量或用户评价。

  • 近 30 天内可连通25 分

    请保持端点能够响应 MCP 握手；SourceWeft 每 30 天探测一次。

  • 已声明认证方式10 分

    请在注册中心条目中声明凭据请求头，或保持端点能够响应探测，以便判定其认证方式。

  • 已列出工具15 分

    请让服务器在无凭据时响应 tools/list，或发布可在沙箱中无凭据启动的软件包。

  • 描述必需15 分
  • 图标10 分
  • 文档15 分
  • 许可证10 分