Secondbrain Mcp — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited Secondbrain Mcp (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
A tiny Model Context Protocol server that exposes a folder of Markdown notes to an AI agent. Instead of pasting files into the prompt, the model can list, search, read, and append to your notes through real tool calls.
I built this because most "second brain" setups (Obsidian, a Drive folder of Markdown, Notion exports) are just files on disk. The useful question is how an agent reads and writes them reliably without you babysitting the context window. MCP is the clean answer: the notes become a typed tool surface the model can call.
MCP is an open protocol that lets an LLM client (Claude Desktop, Claude Code, ...) discover and call external tools and data over a simple JSON-RPC channel — wire a capability in once, and any MCP-aware client can use it.
| Tool | What it does |
|---|---|
list_notes | Every note with its title and size |
search_notes(query) | Full-text search; returns the lines that match |
read_note(name) | Full text of one note |
append_note(name, text) | Append-only write — never silently rewrites |
pip install -r requirements.txt
python server.py # serves over stdioNotes live in ./notes. Point it elsewhere with SECONDBRAIN_DIR=/path/to/vault.
Drop this into Claude Desktop's claude_desktop_config.json or a project .mcp.json for Claude Code:
{
"mcpServers": {
"secondbrain": {
"command": "python",
"args": ["/abs/path/to/server.py"],
"env": { "SECONDBRAIN_DIR": "/abs/path/to/your/vault" }
}
}
}Then ask "search my notes for the deployment runbook" and the model calls search_notes instead of guessing.
flowchart LR
A["Claude Desktop / Claude Code"] -- "MCP · JSON-RPC over stdio" --> B["secondbrain server"]
B --> C[("notes/*.md")]
B -. "list · search · read · append" .-> Aappend_note adds; it never overwrites. An agent can capturea thought without ever silently destroying a note.
works in Obsidian or a Git repo.
MIT
~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.