\n\n# mcp-standardnotes\n\n[](https://github.com/lozit/mcp-standardnotes/actions/workflows/ci.yml)\n[](./LICENSE)\n[](#requirements)\n\n**Give Claude secure read/write access to your [Standard Notes](https://standardnotes.com/) vault — end-to-end encrypted, local stdio only, zero cloud middleman.**\n\nAsk Claude to summarize your notes, draft new ones, organize tags, search across your vault — all while your master key stays on your machine. Works with Claude Code, Claude Desktop, and any MCP-compatible client.\n\n> **Disclaimer.** This is an unofficial third-party integration. Not affiliated with, endorsed by, or sponsored by Standard Notes Ltd. \"Standard Notes\" is a trademark of Standard Notes Ltd.\n\n## Why\n\n- 🔒 **End-to-end encrypted.** All decryption happens locally using audited libsodium primitives (Argon2id + XChaCha20-Poly1305 IETF). Your password never leaves RAM; your master key never leaves your machine.\n- 🔌 **Local stdio only.** No network port is ever opened by this server.\n- 🔑 **OS keychain for session storage.** macOS Keychain, Linux libsecret, Windows Credential Vault — never plaintext files.\n- ☁️ **Works with the official cloud or self-hosted** Standard Notes servers.\n\n## Features\n\n| Tool | What it does |\n|------|---|\n| `notes_list` / `notes_search` / `notes_get` | Browse and search your notes (filter by tag with `tag: \"\"`) |\n| `notes_create` / `notes_update` / `notes_delete` | Write notes (markdown, super, code, rich-text, task, spreadsheet, plain-text) |\n| `notes_create_many` | Batch-create up to 50 notes in one sync push |\n| `notes_stats` | Vault stats: counts, sizes, oldest/newest/largest note |\n| `tags_list` / `tags_get` / `tags_create` / `tags_update` / `tags_delete` | Full tag CRUD |\n| `tags_attach` / `tags_detach` | Link/unlink tags to notes |\n| `sync` | Force a sync with the server |\n\n`notes_create` and `notes_update` accept an optional `tags: string[]` (tag UUIDs) to link tags at write time.\n\n## Requirements\n\n- **Node.js ≥ 20**\n- A Standard Notes account on **protocol 004** (default for any account created or upgraded since 2020)\n- macOS, Linux, or Windows with a working OS keychain\n\n## Quickstart\n\n### 1. Install\n\n```bash\nnpm install -g mcp-standardnotes\n```\n\nOr run from a clone if you prefer:\n\n```bash\ngit clone https://github.com/lozit/mcp-standardnotes.git\ncd mcp-standardnotes\nnpm install && npm run build\n```\n\n### 2. Log in once\n\n```bash\nmcp-standardnotes-login # if installed globally\n# or, from a clone:\nnpm run login\n```\n\nYou'll be prompted for email and password. The password derives your master key in memory (Argon2id) and is never written to disk. An encrypted session is stored in your OS keychain; subsequent runs reuse it automatically. At the end of `login`, you're offered to wire the server into Claude Desktop in one step — accept it, restart Desktop, done.\n\n### 3. Hook it up to Claude\n\n**Claude Desktop (macOS / Windows)** — easiest path, run:\n\n```bash\nmcp-standardnotes-install\n```\n\nThis writes the right entry (absolute Node + binary paths, your email from the keychain) into `~/Library/Application Support/Claude/claude_desktop_config.json` (or `%APPDATA%/Claude/claude_desktop_config.json` on Windows), backing up any existing config first. Quit Claude Desktop fully (⌘Q) and relaunch.\n\n**Claude Code** — let the `claude` CLI do it:\n\n```bash\nmcp-standardnotes-install code # prints the exact `claude mcp add` command\n```\n\nOr add to `~/.claude.json` / `.mcp.json` manually:\n\n```json\n{\n \"mcpServers\": {\n \"mcp-standardnotes\": {\n \"type\": \"stdio\",\n \"command\": \"mcp-standardnotes\",\n \"env\": { \"SN_EMAIL\": \"you@example.com\" }\n }\n }\n}\n```\n\nThen `/mcp` to reconnect.\n\n**Any other MCP client** — run `node dist/index.js` with `SN_EMAIL` set in the environment. Transport is stdio.\n\n**Self-hosting Standard Notes?** See [docs/self-hosted.md](./docs/self-hosted.md) for the docker-compose recipe and how to pin your TLS certificate.\n\n**Want a remote agent (Hermes on a VPS, self-hosted LangGraph, etc.) to use your vault?** See [docs/remote-agent-bridge.md](./docs/remote-agent-bridge.md) for the full Cloudflare Tunnel + MCP Portals setup. Your master key stays on your Mac; the agent talks to a public HTTPS endpoint gated by a Cloudflare service token, and Portals handles automatic MCP tool discovery, multi-server bundling, and Access application generation.\n\n## Configuration\n\n| Variable | Default | Description |\n|---|---|---|\n| `SN_EMAIL` | *required* | Your SN account email. Must match what you used with `npm run login`. |\n| `SN_SERVER_URL` | `https://api.standardnotes.com` | Sync server URL. Change for self-hosted instances. |\n| `KEYCHAIN_SERVICE` | `mcp-standardnotes` | Override the keychain service name (useful for multiple accounts). |\n| `SN_CERT_FINGERPRINT` | *unset* | SHA-256 TLS cert pin for self-hosted servers (64 hex chars, colons optional). See [docs/self-hosted.md](./docs/self-hosted.md). |\n\n## Security at a glance\n\n- Password in RAM only during key derivation. Never logged, never stored.\n- Session + master key hex → OS keychain only. Never plaintext files.\n- stdio transport only. No HTTP port, ever.\n- All logs go to stderr, routed through a redactor that masks passwords, keys, JWTs, and token-like strings.\n- All tool inputs validated by zod.\n- `npm audit` HIGH/CRITICAL is a merge blocker in CI.\n- Only the protocol 004 *framing* is implemented locally; all cryptographic primitives come from `libsodium-wrappers-sumo`.\n\nFull threat model and deep-dive: [docs/protocol-004.md](./docs/protocol-004.md).\nSecurity policy, vulnerability reporting, and dependency-advisory notes: [SECURITY.md](./SECURITY.md).\n\n## Troubleshooting\n\nCommon issues and fixes: [docs/troubleshooting.md](./docs/troubleshooting.md).\n\n## Logout\n\n```bash\nSN_EMAIL=you@example.com mcp-standardnotes-logout\n# or, from a clone:\nSN_EMAIL=you@example.com npm run logout\n```\n\n## Roadmap\n\nUpcoming work tracked in [ROADMAP.md](./ROADMAP.md).\n\n## Contributing\n\nContributions welcome. See [CONTRIBUTING.md](./CONTRIBUTING.md) for setup, tests, and PR checklist.\n\n## License\n\n[MIT](./LICENSE) — use it, fork it, ship it.\n\n## Credits\n\n- [Standard Notes](https://standardnotes.com/) for the encryption design and public API.\n- [Model Context Protocol](https://modelcontextprotocol.io) and [Anthropic](https://www.anthropic.com) for the MCP SDK.\n- [libsodium](https://doc.libsodium.org/) by Frank Denis, exposed via [libsodium-wrappers-sumo](https://github.com/jedisct1/libsodium.js).\n",
"bytes": 6812,
"sha": "2537390dafd337b79786e0ddb27e5de82b3c34452117c59dc84979ca34176c26",
"repo_slug": "lozit/mcp-standardnotes",
"fonte": "repo",
"truncated": false,
"api": "https://agentalog.com/api/listings/mcp_io_github_lozit_mcp_standardnotes_bde71e4e/readme"
}
![\"mcp-standardnotes\"](\"./banner@2x.png\")
\n