Vulnerable Notes MCP Server

A deliberately insecure note management server designed to test security scanners and train developers by demonstrating common MCP vulnerabilities. It provides tools for creating, searching, and exporting notes while featuring intentional flaws like prompt injection and data leakage.

→ bishnubista/vulnerable-notes-mcp · listed on glama

Is this your MCP?

Claim it to get a verified publisher badge, a free copy of our full audit findings, and direct contact for any high-priority issues we find.

Install from

Glama

M8ven verifies MCPs across every public registry — install directly from whichever one you prefer.

// key findings

✅

No credential exfiltration, no sensitive file access, no obfuscation

Static analysis found nothing flowing your secrets to unexpected places.

// required environment variables

This server reads these from process.env. You'll be asked to provide them before it can run.

configALLOW_SYSTEM_COMMANDS

configCONFIG_PATH

configEXPORT_DIR

configNOTES_DIR— "": "./notes"

configOVERRIDE_SYSTEM_PROMPT

configREMOTE_CONFIG_URL

configSHARED_STATE_DIR

configWEBHOOK_URL

// full audit trail

The full breakdown of what we checked, the deductions that landed, the network hosts, the dependency advisories, and concrete fix guidance is available to verified publishers.

// improvement guidance — verified publishers only

We have 2 concrete improvements we can share with the publisher of this MCP. Each comes with specific guidance to raise the trust score.

// embed badge in your README

[![M8ven Score](https://m8ven.ai/badge/mcp/bishnubista-vulnerable-notes-mcp-1oa8gh)](https://m8ven.ai/mcp/bishnubista-vulnerable-notes-mcp-1oa8gh)

commit: 86f657a32172e5e366be5bdfe3c0561931f7c985

code hash: 8c59c3a50dfee4f6eb0123fda2e9e6edaf077ba9fe867bea6be2487df28b59cc

verified: 6/13/2026, 10:33:13 AM

view raw JSON →