Google Keep Mcp — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited Google Keep Mcp (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
An MCP server for Google Keep. Apply the power of AI to organize, update, or just export your Keep notes.
search_by_keyword - Search notes by keyword against title and text contentsearch_by_label - Search notes by label namefind - Alias for search_by_keyword (backwards compatible)get_pinned_notes - Get pinned notes (with optional search)get_archived_notes - Get archived notes (with optional search)get_trashed_notes - Get trashed notes (with optional search)All search/list operations return notes with created, updated, and edited ISO 8601 timestamps.
create_note - Create a new note with title and textupdate_note - Update a note's title and textset_note_color - Set the color of a note (12 colors available)archive_note - Archive a noteunarchive_note - Unarchive a noterestore_note - Restore a trashed note back to an active notedelete_note - Mark a note for deletiondelete_archived_note - Permanently delete an archived noteget_labels - Get all labels (with their usage count) for notesget_note_colors - Get available note colors and usage statistics "mcpServers": {
"google-keep-mcp": {
"command": "pipx",
"args": [
"run",
"google-keep-mcp"
],
"env": {
"GOOGLE_EMAIL": "Your Google Email",
"GOOGLE_MASTER_TOKEN": "Your Google Master Token"
}
}
}GOOGLE_EMAIL: Your Google account email addressGOOGLE_MASTER_TOKEN: Your Google account master tokenWill you will need to create a master token (unless you have a Google Enterprise account, and can access the Google Keep API directly). Follow these steps:
docker run --rm -it breph/ha-google-home_get-token and enter your gmail address and app password (make sure it doesn't have a space at the end)[!TIP] Stuck? Check https://github.com/leikoilja/ha-google-home/issues/890#issuecomment-2515002294, https://gkeepapi.readthedocs.io/en/latest/#obtaining-a-master-token and https://github.com/simon-weber/gpsoauth?tab=readme-ov-file#alternative-flow for more information.
To publish a new version to PyPI:
pyproject.toml pipx run build pipx run twine upload --repository pypi dist/*~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.