Anotepad Mcp — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited Anotepad Mcp (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
<p align="center"> <img src="assets/logo.svg" alt="aNotepad" width="220" /> </p>
<h1 align="center">aNotepad MCP Server</h1>
<p align="center"> Connect your <a href="https://anotepad.com">aNotepad</a> online notes to Claude, ChatGPT, and Cursor through the <a href="https://modelcontextprotocol.io">Model Context Protocol</a>. Read, search, write, and organize your notes through natural conversation. </p>
<p align="center"> <a href="https://anotepad.com/mcp-access">Documentation</a> · <a href="https://anotepad.com">anotepad.com</a> · <a href="mailto:[email protected]">Support</a> </p>
Note: This is the public home for the aNotepad MCP server. aNotepad is a remote, hosted MCP server — there's nothing to install or run. You connect your AI client straight to the hosted endpoint below and sign in with your aNotepad account. The server source lives in the private aNotepad codebase; this repo holds the registry manifest, docs, and branding.
| Endpoint | https://api.anotepad.com/mcp |
| Transport | Streamable HTTP |
| Auth | OAuth 2.1 (PKCE) + Dynamic Client Registration (RFC 7591) — no API key setup |
| Required plan | aNotepad Pro or Max |
https://api.anotepad.com/mcp.<details> <summary><strong>Claude Desktop</strong></summary>
https://api.anotepad.com/mcp.</details>
<details> <summary><strong>ChatGPT</strong> (Plus / Pro / Team / Enterprise)</summary>
https://api.anotepad.com/mcp.</details>
<details> <summary><strong>Cursor</strong></summary>
https://api.anotepad.com/mcp.</details>
<details> <summary><strong>MCP Inspector</strong> (testing)</summary>
npx @modelcontextprotocol/inspectorSet transport to Streamable HTTP, URL https://api.anotepad.com/mcp, then Connect. </details>
22 tools across six groups.
| Group | Tools |
|---|---|
| Notes | list_notes, get_note, search_notes, create_note, update_note, delete_note |
| Versions | list_note_versions, get_note_version, restore_note_version |
| Export & email | get_note_download_url, email_note |
| Collections | list_collections, create_collection, move_note_to_collection, delete_collection |
| Comments | list_comments, list_recent_comments, create_comment, delete_comment |
| Files & bookmarks | list_note_files, get_note_file_download_url, delete_note_file, list_bookmarks_in_note, add_bookmark, remove_bookmark |
Some operations stay on the web app, by design:
Paid is supported, but the one-time wallet/email verification must be done in the web app first.<untrusted-comment> markers in tool responses, signaling to the AI that the text is data, not instructions — a defense against prompt injection.| Plan | Tool calls / min | New notes / day | Emails / hour |
|---|---|---|---|
| Pro | 60 | 1,000 | 10 |
| Max | 300 | 5,000 | 10 |
Limits are per user, shared across all connected clients.
Documentation and manifest in this repository are released under the MIT License. The hosted aNotepad service and its source code are proprietary.
~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.