69
/ 100
1 month ago
glama

appflowy-mcp

A self-hosted, token-scoped Model Context Protocol server for AppFlowy. It gives AI agents tools to read and edit your AppFlowy workspaces while bounding each client to exactly the pages you allow via per-token tree-shaped scopes.

Is this your MCP?

Claim it to get a verified publisher badge, a free copy of our full audit findings, and direct contact for any high-priority issues we find.

Install from

M8ven verifies MCPs across every public registry — install directly from whichever one you prefer.

// key findings
No credential exfiltration, no sensitive file access, no obfuscation
Static analysis found nothing flowing your secrets to unexpected places.
Open source with a license and README
Anyone can audit the code, the license is declared, and the publisher documents what it does.
🔐
You'll be asked for 2 credentials: APPFLOWY_PASSWORD, APPFLOWY_ACCESS_TOKEN
These are read from process.env at runtime. Make sure you trust where they’ll be sent.
// required environment variables
This server reads these from process.env. You'll be asked to provide them before it can run.
configAPPFLOWY_MCP_TOKENSe ='[{"token":"sk-full","scopes":[]}]' \
configAPPFLOWY_MCP_CONFIGOptional path to a YAML/JSON config file
configAPPFLOWY_BASE_URL1. Backend auth (one service account). +
configAPPFLOWY_EMAIL/APPFLOWY_PASSWORD (or a pre-minted APPFLOWY_ACCESS_TOKEN).
🔐 secretAPPFLOWY_PASSWORDAPPFLOWY_EMAIL/ (or a pre-minted APPFLOWY_ACCESS_TOKEN).
🔐 secretAPPFLOWY_ACCESS_TOKENAPPFLOWY_EMAIL/APPFLOWY_PASSWORD (or a pre-minted ).
configAPPFLOWY_MCP_HOST/ APPFLOWY_MCP_PORT / APPFLOWY_MCP_PATH Listen address (default 0.0.0.0:8000/mcp)
configAPPFLOWY_MCP_PORTAPPFLOWY_MCP_HOST / / APPFLOWY_MCP_PATH Listen address (default 0.0.0.0:8000/mcp)
configAPPFLOWY_MCP_PATHAPPFLOWY_MCP_HOST / APPFLOWY_MCP_PORT / Listen address (default 0.0.0.0:8000/mcp)
configAPPFLOWY_MCP_FOLDER_CACHE_TTLSeconds to cache folder trees for scope checks (default 15)
configAPPFLOWY_MCP_LOG_LEVELINFO (default), DEBUG, …
// full audit trail
The full breakdown of what we checked, the deductions that landed, the network hosts, the dependency advisories, and concrete fix guidance is available to verified publishers.
// improvement guidance — verified publishers only
We have 5 concrete improvements we can share with the publisher of this MCP. Each comes with specific guidance to raise the trust score.
// embed badge in your README
[![M8ven Score](https://m8ven.ai/badge/mcp/careemer-appflowy-mcp-112tej)](https://m8ven.ai/mcp/careemer-appflowy-mcp-112tej)
commit: b95e455744b005c0e80cac344e114e167ea1a72b
code hash: 9a48aae5e1e3c3279085e97e232bd68c8598062b56277cff14c7416d5f668147
verified: 6/19/2026, 10:57:03 AM
view raw JSON →