Mcp Standardnotes

io.github.lozit由 GitHub 帳號 lozit 發布v0.6.0更新於 Oct 24, 2026

End-to-end encrypted access to a Standard Notes vault (protocol 004, local stdio only).

已驗證STDIO僅桌面效率與工作流檔案與儲存

概覽

AI 產生的概覽

讓助手在本機讀取、搜尋、建立、更新與刪除端對端加密的 Standard Notes 筆記庫中的筆記與標籤。

可以做什麼
提供瀏覽與搜尋筆記的工具（notes_list、notes_search、notes_get），寫入筆記的工具（notes_create、notes_update、notes_delete，以及一次最多 50 則的 notes_create_many），還有檢視筆記庫統計的 notes_stats。另外提供完整的標籤管理（tags_list、tags_get、tags_create、tags_update、tags_delete、tags_attach、tags_detach）與強制同步的 sync 工具。解密在本機進行，伺服器僅透過 stdio 通訊。
適用情境
適合把筆記存放在 Standard Notes，並希望助手在不匯出筆記庫的情況下進行摘要、草擬、整理或搜尋的情境。也適合想以本機方式存取加密筆記庫、不經雲端中介服務的使用者。
執行需求
需要 Node.js 20 或更新版本、使用協定 004 的 Standard Notes 帳號，以及可用的作業系統鑰匙圈（macOS Keychain、Linux libsecret 或 Windows Credential Vault）。先執行一次 npx mcp-standardnotes-login 輸入密碼並保存工作階段；設定 SN_EMAIL，自架伺服器可另設 SN_SERVER_URL 與 SN_CERT_FINGERPRINT。傳輸方式為 stdio，僅限桌面端。
安裝前請注意
此伺服器可以建立、更新與刪除筆記和標籤，助手的誤操作可能更動或刪除筆記庫內容。它會處理帳號密碼與主金鑰；密碼在登入時輸入，工作階段存放在作業系統鑰匙圈中。必須提供 SN_EMAIL，自架時可選用 SN_CERT_FINGERPRINT 固定 TLS 憑證。這是非官方第三方整合，與 Standard Notes Ltd. 無關聯。

安裝

在 SourceWeft 中

  1. 開啟 儀表板中的 Mcp Standardnotes，將其新增到工作區。
  2. 為需要使用其工具的對話啟用該服務。

Desktop only，透過 STDIO。 STDIO 服務會啟動本機處理程序，因此需要 SourceWeft 桌面主機。

其他 MCP 客戶端

參照 儲存庫 中的啟動說明。

README

[mcp-standardnotes]

mcp-standardnotes

[CI] [License: MIT] [Node: ≥20]

Give Claude secure read/write access to your Standard Notes vault — end-to-end encrypted, local stdio only, zero cloud middleman.

Ask Claude to summarize your notes, draft new ones, organize tags, search across your vault — all while your master key stays on your machine. Works with Claude Code, Claude Desktop, and any MCP-compatible client.

Disclaimer. This is an unofficial third-party integration. Not affiliated with, endorsed by, or sponsored by Standard Notes Ltd. "Standard Notes" is a trademark of Standard Notes Ltd.

Why

  • 🔒 End-to-end encrypted. All decryption happens locally using audited libsodium primitives (Argon2id + XChaCha20-Poly1305 IETF). Your password never leaves RAM; your master key never leaves your machine.
  • 🔌 Local stdio only. No network port is ever opened by this server.
  • 🔑 OS keychain for session storage. macOS Keychain, Linux libsecret, Windows Credential Vault — never plaintext files.
  • ☁️ Works with the official cloud or self-hosted Standard Notes servers.

Features

ToolWhat it does
notes_list / notes_search / notes_getBrowse and search your notes (filter by tag with tag: "<uuid-or-title>")
notes_create / notes_update / notes_deleteWrite notes (markdown, super, code, rich-text, task, spreadsheet, plain-text)
notes_create_manyBatch-create up to 50 notes in one sync push
notes_statsVault stats: counts, sizes, oldest/newest/largest note
tags_list / tags_get / tags_create / tags_update / tags_deleteFull tag CRUD
tags_attach / tags_detachLink/unlink tags to notes
syncForce a sync with the server

notes_create and notes_update accept an optional tags: string[] (tag UUIDs) to link tags at write time.

Requirements

  • Node.js ≥ 20
  • A Standard Notes account on protocol 004 (default for any account created or upgraded since 2020)
  • macOS, Linux, or Windows with a working OS keychain

Quickstart

1. Install

bash
npm install -g mcp-standardnotes

Or run from a clone if you prefer:

bash
git clone https://github.com/lozit/mcp-standardnotes.gitcd mcp-standardnotesnpm install && npm run build

2. Log in once

bash
mcp-standardnotes-login         # if installed globally# or, from a clone:npm run login

You'll be prompted for email and password. The password derives your master key in memory (Argon2id) and is never written to disk. An encrypted session is stored in your OS keychain; subsequent runs reuse it automatically. At the end of login, you're offered to wire the server into Claude Desktop in one step — accept it, restart Desktop, done.

3. Hook it up to Claude

Claude Desktop (macOS / Windows) — easiest path, run:

bash
mcp-standardnotes-install

This writes the right entry (absolute Node + binary paths, your email from the keychain) into ~/Library/Application Support/Claude/claude_desktop_config.json (or %APPDATA%/Claude/claude_desktop_config.json on Windows), backing up any existing config first. Quit Claude Desktop fully (⌘Q) and relaunch.

Claude Code — let the claude CLI do it:

bash
mcp-standardnotes-install code   # prints the exact `claude mcp add` command

Or add to ~/.claude.json / .mcp.json manually:

json
{  "mcpServers": {    "mcp-standardnotes": {      "type": "stdio",      "command": "mcp-standardnotes",      "env": { "SN_EMAIL": "[email protected]" }    }  }}

Then /mcp to reconnect.

Any other MCP client — run node dist/index.js with SN_EMAIL set in the environment. Transport is stdio.

Self-hosting Standard Notes? See docs/self-hosted.md for the docker-compose recipe and how to pin your TLS certificate.

Want a remote agent (Hermes on a VPS, self-hosted LangGraph, etc.) to use your vault? See docs/remote-agent-bridge.md for the full Cloudflare Tunnel + MCP Portals setup. Your master key stays on your Mac; the agent talks to a public HTTPS endpoint gated by a Cloudflare service token, and Portals handles automatic MCP tool discovery, multi-server bundling, and Access application generation.

Configuration

VariableDefaultDescription
SN_EMAILrequiredYour SN account email. Must match what you used with npm run login.
SN_SERVER_URLhttps://api.standardnotes.comSync server URL. Change for self-hosted instances.
KEYCHAIN_SERVICEmcp-standardnotesOverride the keychain service name (useful for multiple accounts).
SN_CERT_FINGERPRINTunsetSHA-256 TLS cert pin for self-hosted servers (64 hex chars, colons optional). See docs/self-hosted.md.

Security at a glance

  • Password in RAM only during key derivation. Never logged, never stored.
  • Session + master key hex → OS keychain only. Never plaintext files.
  • stdio transport only. No HTTP port, ever.
  • All logs go to stderr, routed through a redactor that masks passwords, keys, JWTs, and token-like strings.
  • All tool inputs validated by zod.
  • npm audit HIGH/CRITICAL is a merge blocker in CI.
  • Only the protocol 004 framing is implemented locally; all cryptographic primitives come from libsodium-wrappers-sumo.

Full threat model and deep-dive: docs/protocol-004.md. Security policy, vulnerability reporting, and dependency-advisory notes: SECURITY.md.

Troubleshooting

Common issues and fixes: docs/troubleshooting.md.

Logout

bash
[email protected] mcp-standardnotes-logout# or, from a clone:[email protected] npm run logout

Roadmap

Upcoming work tracked in ROADMAP.md.

Contributing

Contributions welcome. See CONTRIBUTING.md for setup, tests, and PR checklist.

License

MIT — use it, fork it, ship it.

Credits

來源：README.md，提交 749d466

工具

0
SourceWeft 尚未在沙箱中啟動過該軟體包，因此其工具未知。

版本歷史

1
  1. v0.6.0最新Sep 16, 2026

評分

已滿足適用檢查項的 50%

該評分衡量此收錄條目的完整程度，依據註冊中心條目、端點與公開來源計算得出。它不是對伺服器本身的評價，也不表示伺服器安全或目前可用：可連通性是帶日期的檢查結果，評分也不包含安裝量或使用者評價。

  • 近 30 天內可連通25 分

    請保持端點能夠回應 MCP 握手；SourceWeft 每 30 天探測一次。

  • 已宣告認證方式10 分

    請在註冊中心條目中宣告憑證請求標頭，或保持端點能夠回應探測，以便判定其認證方式。

  • 已列出工具15 分

    請讓伺服器在無憑證時回應 tools/list，或發布可在沙箱中無憑證啟動的軟體包。

  • 描述必需15 分
  • 圖示10 分
  • 文件15 分
  • 授權條款10 分