Anytype Grpc — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited Anytype Grpc (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
Edit Anytype blocks, layouts, and views from Python or MCP, over its internal gRPC API.
Every other Anytype library wraps the official Local HTTP API, which covers search, object creation, properties, and markdown. The block tree, layouts, set and query views, and covers live a layer deeper.
This library talks to that layer: the internal gRPC service (anytype-heart's ClientCommands) that the Anytype desktop app uses for every action. It can do everything the desktop UI does, programmatically:
All 332 RPC methods are reachable. The common, fiddly ones have ergonomic helpers.
The desktop app runs a local helper process that serves gRPC on a loopback port. This library auto-discovers that port, authenticates with a session token derived from your account, and speaks the same protocol the UI speaks. The real Anytype engine does all the work, and this library is a thin remote control over it.
This is not on PyPI yet, so install it from source.
Straight from GitHub:
pip install "anytype-grpc[mcp] @ git+https://github.com/cengizozel/anytype-grpc.git"Or clone and install editable, which is handy for reading or changing the code:
git clone https://github.com/cengizozel/anytype-grpc.git
cd anytype-grpc
pip install -e ".[mcp]"Drop the [mcp] extra if you only want the client without the MCP server. Requires the Anytype desktop app to be running on the same machine.
The full gRPC surface needs a session token derived from your account. Mint one from your recovery phrase (the words you saved when you set up Anytype):
python -m anytype_grpc.authIt reads the phrase from hidden input, never writes it to disk, and prints a token. Put that token in your environment:
export ANYTYPE_TOKEN="<the token>"The token grants complete access to your local vault. Treat it like a password and never commit it.
from anytype_grpc import Anytype
at = Anytype() # auto-discovers the port, reads ANYTYPE_TOKEN
print(at.app_version()) # works without a token
space = "your-space-id"
results = at.search("project", space_id=space) # full-text search
page = results[0]["id"]
# read the whole object (blocks + details)
obj = at.objects.show(page)
# edit the block tree (namespaces group the full API by domain)
at.blocks.add_header(page, "A new heading", level=2)
at.blocks.add_text(page, "some body text")
# set a property
at.objects.set_details(page, {"description": "edited by anytype-grpc"})
# make a set, turn it into a gallery, choose its columns
new_set = at.objects.create_set([type_id], details={"name": "My gallery"})
at.views.set_view_type(new_set, "Gallery")
at.views.set_visible_columns(new_set, ["name", "status"])1. Ergonomic namespaces group the full helper API by domain. Each is reached on the client:
at.blocks blocks: text, headers, checkboxes, toggles, code, links, files, tables, gridsat.objects objects: create, show, details, covers, icons, archive, import, exportat.views set and query views: type, columns, covers, filters, sortsat.files files and images: upload, download, offload, usageat.types types, relations (properties), options, templatesat.spaces spaces and account: list, create, info, invites, membersat.query advanced search and live subscriptionsA few of the most common operations also have top-level shortcuts (at.search, at.get_object, at.add_block). See the docs for every method.
2. Generic access to every method. Anything the app can do is reachable, even if there is no hand-written helper:
# call any of the 332 RPC methods by name
resp = at.call("BlockListSetAlign", context_id=page, blockIds=[bid], align=1)
# build a request to fill in by hand when a method needs nested messages
req = at.new_request("ObjectSearch")
req.spaceId = space
req.fullText = "notes"
resp = at.call("ObjectSearch", req)
# resolve the request type for any method
print(at.request_type("ObjectCreateSet").DESCRIPTOR.full_name)This package also ships an MCP server, so AI assistants can drive Anytype through the same capabilities. It is a thin wrapper over the library. See docs/mcp.md for setup and the full tool reference.
anytype-grpc-mcp.env.127.0.0.1).The internal gRPC API is private and can change between Anytype versions. The vendored protos are pinned to a specific Anytype version (see protos/). If you upgrade the desktop app, regenerate the bindings with scripts/gen_protos.sh against the matching anytype-heart tag.
MIT. The vendored protos are from anyproto/anytype-heart (MIT).
~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.