WhyNote MCP server

by Coooolinz·io.github.Coooolinz/why-note·v0.1.0

No reviews yet

Read-only search, todo listing, and daily note access for a WhyNote account

B78/100grade B

Write a review Install

What users say

No reviews yet

Be the first

Safety scan

B78/100

full report

Adoption

New

0 stars19 downloads/wk

Reviews

Write one

Nobody has reviewed WhyNote yet.

If you have run it, two minutes of your experience saves the next person an afternoon.

WhyNote tools (4)

write = sends, deletes, buys or posts

Read from the package source without running it. The installed server may list more.

read_day
Read one day's full note body and etag.
recent_days
Read existing note days on one side of an anchor, newest first.
search
Search note lines using the same case-insensitive substring scan as the web app.
todos
List todo items with done, age, and overdue fields from the note service.

Public scan report

scanner v0.1.9 · 2026-09-23 · same rubric, same numbers if you re-run it

no findings

Code scan2 source files scanned25/25
–Live reliabilityno gateway calls yet and no remote to proben/a
–Tool poisoningtools not inspected (local package is not executed); not countedn/a
Auth qualitystatic API keys via environment variables6/15
Maintenancelast push 44 days ago12/15
Maintainer identityregistry namespace matches repository owner; GitHub account older than a year8/10

Overall 78/100. Components that don't apply are left out of the denominator. Any critical finding is an F.Rubric Appeal a finding JSON

How WhyNote compares

Against every graded Productivity MCP server, from our own scans and uptime checks. Updated after each scan run.

Safety score: 78/100; higher than 50% of 1,299 Productivity servers
Tools: 4; the typical Productivity server has 7
Tools that change things: 0%; typical: 0%. Fewer write tools means less an agent can break
Downloads a week: 19; more than 5% of 427 Productivity servers with a package

What its tools let an agent do: 4 read

Install WhyNote in Claude Code, Cursor or VS Code

Runs npx -y why-note-mcp on your machine. Read the scan report first; the gateway never runs local packages.

claude mcp add why-note -- npx -y why-note-mcp

Add to Cursor

What the publisher says

From the WhyNote repository's README, as published. We do not edit it. Read it on GitHub

WhyNote MCP

A zero-dependency, read-only Model Context Protocol server for searching and reading the notes in one WhyNote account.

Install

Generate a read-only token in WhyNote settings, then configure your MCP client to run npx -y why-note-mcp with NOTEURL and NOTETOKEN.

Generic project configuration:

{
  "mcpServers": {
    "note": {
      "command": "npx",
      "args": ["-y", "why-note-mcp"],
      "env": {
        "NOTE_URL": "https://note.example.com",
        "NOTE_TOKEN": "<read-only-token>"
      }
    }
  }
}

Claude Code:

claude mcp add --scope user note \
  -e NOTE_URL=https://note.example.com \
  -e NOTE_TOKEN='<read-only-token>' \
  -- npx -y why-note-mcp

Codex CLI:

codex mcp add note \
  --env NOTE_URL=https://note.example.com \
  --env NOTE_TOKEN='<read-only-token>' \
  -- npx -y why-note-mcp

Values written directly in a command may be retained in shell history. Edit the client configuration instead if that is a concern.

Node.js 18 or newer is required.

Tools

search: search note lines by case-insensitive substring
todos: list incomplete or all todo items
read_day: read one date's complete note and etag
recent_days: read existing note days around an anchor date

Security

The server reads NOTEURL and NOTETOKEN only from its environment. It sends the token only as a Bearer credential to the configured WhyNote URL. It never receives the account password and exposes no write tool.

Changing the WhyNote account password revokes its read-only tokens. Generate a new token in WhyNote settings when a token expires or is revoked.

Development

npm ci
npm test
npm run pack:check

The test suite uses a local fake HTTP service; it does not require a WhyNote account, network access, or third-party dependencies.

License

MIT

Nothing above is checked by us. What we check is on the safety report.

WhyNote: common questions

Is WhyNote MCP server safe?: Mostly: it is graded B (78/100). Read the WhyNote safety report
How do I install WhyNote?: It runs on your machine. Copy the Claude Code, Cursor, VS Code or Claude Desktop config from the install section.
Does WhyNote need an API key?: Yes. The registry entry asks for NOTE_TOKEN.
Is WhyNote maintained?: The last commit was 85 days ago (2026-08-11). The latest release is v0.1.0.
What can I use instead of WhyNote?: Servers from other publishers that do the same job: Obsidian MCP server, AIquila — Nextcloud MCP Server and iCloud MCP server.
How does WhyNote compare with other Productivity MCP servers?: safety score 78/100 (higher than 50% of 1,299 Productivity servers); tools 4 (the typical Productivity server has 7); tools that change things 0% (typical: 0%. Fewer write tools means less an agent can break). Full comparison.

Alternatives to WhyNote

Same job from other publishers: the closest match first, then the best rated.

Obsidian
Read, write, search, and surgically edit Obsidian notes, tags, and frontmatter via MCP.
not reviewed
Established
A
AIquila — Nextcloud MCP Server
Nextcloud MCP server — 345 tools: files, calendar, contacts, mail, Talk, Deck, photos, maps, notes
not reviewed
Established
C
iCloud MCP
Apple Mail, Calendar, Contacts, Reminders, Notes, Messages and Safari via AppleScript or iCloud
not reviewed
Established
B
DocsAgent — Zotero, Obsidian & Apple Notes MCP Server
Instant, private access to your knowledge base: Zotero, Obsidian, Apple Notes (macOS).
not reviewed
Established
B
Apple Tools (Unified)
Unified Apple ecosystem MCP server for macOS: Mail, Calendar, Notes, Files, Messages, and more.
not reviewed
Established
A