NoteDiscovery MCP Server

NoteDiscovery is a self-hosted plain-markdown notes app (MIT, no telemetry) with a built-in stdio MCP server. The server exposes tools so AI clients (Claude Desktop, Cursor, etc.) can search, read, create, edit, tag, and instantiate templates against the same vault the web UI uses.

→ gamosoft/NoteDiscovery · listed on glama

Is this your MCP?

Claim it to get a verified publisher badge, a free copy of our full audit findings, and direct contact for any high-priority issues we find.

Install from

Glama

M8ven verifies MCPs across every public registry — install directly from whichever one you prefer.

// key findings

✅

No credential exfiltration, no sensitive file access, no obfuscation

Static analysis found nothing flowing your secrets to unexpected places.

✅

Open source with a license and README

Anyone can audit the code, the license is declared, and the publisher documents what it does.

🔐

You'll be asked for 4 credentials: AUTHENTICATION_PASSWORD, AUTHENTICATION_SECRET_KEY, AUTHENTICATION_API_KEY, NOTEDISCOVERY_API_KEY

These are read from process.env at runtime. Make sure you trust where they’ll be sent.

// required environment variables

This server reads these from process.env. You'll be asked to provide them before it can run.

configAUTHENTICATION_ENABLED

🔐 secretAUTHENTICATION_PASSWORD

🔐 secretAUTHENTICATION_SECRET_KEY

🔐 secretAUTHENTICATION_API_KEY

configDEMO_MODE

configALREADY_DONATED

configUPLOAD_MAX_IMAGE_MB

configUPLOAD_MAX_AUDIO_MB

configUPLOAD_MAX_VIDEO_MB

configUPLOAD_MAX_PDF_MB

configNOTEDISCOVERY_URL— "args": ["run", "--rm", "-i", "-e", "=http://host.docker.internal:8000", "ghcr.io/gamosoft/notediscovery:latest", "python", "-m", "mcp_server"]

🔐 secretNOTEDISCOVERY_API_KEY

configNOTEDISCOVERY_TIMEOUT

configNOTEDISCOVERY_MAX_RETRIES

configPORT

// full audit trail

The full breakdown of what we checked, the deductions that landed, the network hosts, the dependency advisories, and concrete fix guidance is available to verified publishers.

// improvement guidance — verified publishers only

We have 2 concrete improvements we can share with the publisher of this MCP. Each comes with specific guidance to raise the trust score.

// embed badge in your README

[![M8ven Score](https://m8ven.ai/badge/mcp/gamosoft-notediscovery-esc5du)](https://m8ven.ai/mcp/gamosoft-notediscovery-esc5du)

commit: 78c31ae99a8f35e8b9964c7b8c66a8d4eefb82d8

code hash: 770ac80384e34c4c849c059737ba2e6f248d1c57be1347531f384d33f13f1936

verified: 6/25/2026, 9:47:23 AM

view raw JSON →