Appflowy Mcp — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited Appflowy Mcp (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
An MCP server and CLI for AppFlowy: 128 tools covering workspaces, spaces, pages, document content (incl. collab-level editing with snapshot/restore), Markdown import & export, PDF/ZIP export, databases & rows, search, members and invitations, sharing, comments, publishing, notifications, file upload, and AI chat & meeting transcription. Distributed as a single static Rust binary — the same appflowy binary is the MCP server (appflowy serve) and a full CLI.
Install (details and more platforms: docs/installation.md):
# Linux / macOS
curl -fsSL https://raw.githubusercontent.com/weironz/appflowy_mcp/main/install.sh | sh
# Windows (PowerShell)
irm https://raw.githubusercontent.com/weironz/appflowy_mcp/main/install.ps1 | iexWire up an MCP client (docs/mcp-connect.md for Codex / Claude Desktop / Cursor, HTTP mode, and troubleshooting):
claude mcp add --scope user appflowy \
-e [email protected] \
-e APPFLOWY_PASSWORD=your-password \
-- appflowy serveOr drive it from a shell:
appflowy login
appflowy use my-workspace
appflowy export -o ./backup # whole workspace → Markdown tree (incremental on reruns)
appflowy search "quarterly report"--http) and a scriptable CLI with workspace/PATH addressing..zip archives, all as resumable server-side tasks.isError: true tool results (MCP SEP-1303) so the model can self-correct.| Where | What |
|---|---|
| docs/installation.md | Installers, manual/source install, uninstall, asset matrix |
| docs/mcp-connect.md | Client setup & troubleshooting (Codex, Claude, Cursor, HTTP) |
| docs/cli.md | CLI reference: auth chain, addressing, every command, cron/CI |
| docs/tools.md | The full 128-tool catalog |
| docs/agent-guide.md | How an AI client should use the tools (paste-ready block + recipes) |
| docs/development.md | Module map, design notes, adding a tool, release process |
| docs/ROADMAP.md | What's shipped and what's deliberately deferred |
| docs/README.md | Docs index |
The server authenticates with environment variables (.env also works):
[email protected]
APPFLOWY_PASSWORD=your-password
APPFLOWY_BASE_URL=https://beta.appflowy.cloud # only for self-hostedThe CLI can use those, or persistent tokens from appflowy login (~/.config/appflowy-cli/credentials.json). Most write operations need a workspace plus a parent view id (workspace → space → page).
v0.8.0 for those sources); PyPI packages are frozen at appflowy-mcp 0.8.0 / appflowy-cli 0.6.4.Apache License 2.0 — Copyright 2026 weironz.
~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.