joplin-mcp-server

MCP server for Joplin

→ jordanburke/joplin-mcp-server· npm: joplin-mcp-server· listed on npm

Install from

npm

M8ven verifies MCPs across every public registry — install directly from whichever one you prefer.

// key findings

🚨

Known vulnerabilities in dependencies: 2 critical

Affects packages this MCP installs at runtime. Upgrade or remove the affected dependency.

🔐

You'll be asked for 2 credentials: JOPLIN_SYNC_PASSWORD, JOPLIN_TOKEN

These are read from process.env at runtime. Make sure you trust where they’ll be sent.

// required environment variables

This server reads these from process.env. You'll be asked to provide them before it can run.

configJOPLIN_CLI— The Joplin CLI is resolved in this order: env var > node_modules/.bin/joplin (bundled) > global install > npx fallback.

configJOPLIN_HOST— Connects to an existing Joplin instance instead of spawning a sidecar. Activated by setting or JOPLIN_PORT.

configJOPLIN_PORT— Connects to an existing Joplin instance instead of spawning a sidecar. Activated by setting JOPLIN_HOST or .

configJOPLIN_PROFILE— Joplin data directory for sidecar mode ~/.config/joplin-mcp

🔐 secretJOPLIN_SYNC_PASSWORD— Sync password --

configJOPLIN_SYNC_PATH— Sync target URL/path --

configJOPLIN_SYNC_TARGET— Sync target type none

configJOPLIN_SYNC_USERNAME— Sync username/email --

🔐 secretJOPLIN_TOKEN— API token (required) --

configLOG_LEVEL— Log level: debug, info, warn, error info

configTRANSPORT_TYPE

// full audit trail

The full breakdown of what we checked, the deductions that landed, the network hosts, the dependency advisories, and concrete fix guidance is available to verified publishers.

// improvement guidance — verified publishers only

We have 3 concrete improvements we can share with the publisher of this MCP. Each comes with specific guidance to raise the trust score.

// embed badge in your README

[![M8ven Score](https://m8ven.ai/badge/mcp/npm-https-github-com-jordanburke-joplin-mcp-server)](https://m8ven.ai/mcp/npm-https-github-com-jordanburke-joplin-mcp-server)

commit: 6ba157e78cd700fc9a573a0448b80904a1332667

code hash: f22daa6d12fa247e3e9996ea4083144d6145e49c7e2778a9529566e1daf0b949

verified: 4/11/2026, 1:46:23 PM

view raw JSON →