HackMD MCP server
io.github.yuna0x0/hackmd-mcp·v1.5.7·67 starsA Model Context Protocol server for integrating HackMD's note-taking platform with AI assistants.
67 stars
Reviews
Write oneNobody has reviewed HackMD yet.
If you have run it, two minutes of your experience saves the next person an afternoon.
HackMD tools
No tool declarations could be read from the package source. They show once the server is installed.
Public scan report
scanner v0.1.10 · 2026-10-01 · same rubric, same numbers if you re-run it
- Code scan10 source files scanned25/25
- –Live reliabilityno gateway calls yet and no remote to proben/a
- –Tool poisoningtools not inspected (local package is not executed); not countedn/a
- Auth qualitystatic API keys via environment variables6/15
- Maintenancelast push 81 days ago12/15
- Maintainer identityregistry namespace matches repository owner; GitHub account older than a year8/10
How HackMD compares
Against every graded AI and agents MCP server, from our own scans and uptime checks. Updated after each scan run.
- Safety score
- 78/100
- higher than 57% of 4,460 AI and agents servers
- GitHub stars
- 67
- more than 92% of 2,711 AI and agents servers
Install HackMD in Claude Code, Cursor or VS Code
Runs npx -y hackmd-mcp on your machine. Read the scan report first; the gateway never runs local packages.
claude mcp add hackmd-mcp -- npx -y hackmd-mcp
What the publisher says
From the HackMD repository's README, as published. We do not edit it. Read it on GitHub
HackMD MCP Server
A Model Context Protocol (MCP) server that interfaces with the HackMD API, allowing LLM clients to access and interact with HackMD notes, teams, user profiles, and history data.
Features
- Get user profile information
- Create, read, update, and delete notes
- Manage team notes and collaborate with team members
- Access reading history
- List and manage teams
- Dual transport support: Both HTTP and STDIO transports
- Cloud deployment ready: Support Smithery and other platforms
Requirements
- Node.js 18+
Local Installation (STDIO Transport)
- Add this server to your mcp.json / claudedesktopconfig.json:
{
"mcpServers": {
"hackmd": {
"command": "npx",
"args": ["-y", "hackmd-mcp"],
"env": {
"HACKMD_API_TOKEN": "your_api_token"
}
}
}
}You may also optionally set the HACKMDAPIURL environment variable if you need to use a different HackMD API endpoint.
- Restart your MCP client (e.g., Claude Desktop)
- Use the tools to interact with HackMD
Server Deployment (HTTP Transport)
Self-Hosting
Follow the Local Development instructions to set up the project locally, then run:
pnpm run start:httpThis will start the server on port 8081 by default. You can change the port by setting the PORT environment variable.
Cloud Deployment
You can deploy this MCP server to any cloud platform that supports Node.js server applications.
You can also deploy via MCP platforms like Smithery.
Configuration
Environment Variables (STDIO Transport and HTTP Transport server where host provides the config)
When using the STDIO transport or hosting the HTTP transport server, you can pass configuration via environment variables:
- HACKMDAPITOKEN: HackMD API Token (Required for all operations)
- HACKMDAPIURL: (Optional) HackMD API URL (Defaults to https://api.hackmd.io/v1)
Environment variables applied only for the HTTP transport server:
- ALLOWEDHACKMDAPI_URLS: (Optional) A comma-separated list of allowed HackMD API URLs. The server will reject requests if the provide HackMD API URL is not in this list. If not set, only the default URL (https://api.hackmd.io/v1) is allowed.
[!CAUTION]
If you are hosting the HTTP transport server with token pre-configured, you should protect your endpoint and implement authentication before allowing users to access it. Otherwise, anyone can access your MCP server while using your HackMD token.
HTTP Headers (HTTP Transport where user provides the config)
When using the HTTP transport, user can pass configuration via HTTP headers:
- Hackmd-Api-Token: HackMD API Token (Required for all operations)
- Hackmd-Api-Url: (Optional) HackMD API URL (Defaults to https://api.hackmd.io/v1)
If the user provides the token in the header, while the server also has HACKMDAPITOKEN set, the header value will take precedence.
Get a HackMD API Token
To get an API token, follow these steps:
- Go to HackMD settings.
- Click on "Create API Token".
- Copy the generated token and use it in your .env file or environment variables.
Available Tools
Profile Tools
- getuserinfo: Get information about the authenticated user
Teams Tools
- listteams**: List all teams accessible to the user
History Tools
- gethistory**: Get user's reading history
Team Notes Tools
- listteamnotes: List all notes in a team
- createteamnote: Create a new note in a team
- updateteamnote: Update an existing note in a team
- deleteteamnote: Delete a note in a team
Shortened. The full README is on GitHub.
Nothing above is checked by us. What we check is on the safety report.
HackMD: common questions
- Is HackMD MCP server safe?
- Mostly: it is graded B (78/100). Read the HackMD safety report
- How do I install HackMD?
- It runs on your machine. Copy the Claude Code, Cursor, VS Code or Claude Desktop config from the install section.
- Does HackMD need an API key?
- Yes. The registry entry asks for
HACKMD_API_TOKEN. - Is HackMD maintained?
- The last commit was 114 days ago (2026-07-13). The latest release is v1.5.7.
- What can I use instead of HackMD?
- Servers from other publishers that do the same job: Agent-Native Clips MCP server and IWE (iwe.md) MCP server.
- How does HackMD compare with other AI and agents MCP servers?
- safety score 78/100 (higher than 57% of 4,460 AI and agents servers); github stars 67 (more than 92% of 2,711 AI and agents servers). Full comparison.
Alternatives to HackMD
Same job from other publishers: the closest match first, then the best rated.
- Agent-Native ClipsScreen recording, meeting notes, and voice dictation - all with AInot reviewedEstablishedA
- IWE (iwe.md)Markdown knowledge base as agent memory. Runs against the notes directory it is started in.not reviewedEstablishedA