Back to MCP Trust Indexm8ven
36
/ 100
1 month ago
glama

reMarkable MCP Server

Enables AI assistants to read, search, and traverse your reMarkable tablet's library, including handwritten notes via OCR.

→ rbonitz/remarkable-mcp-http-· listed on glama
Is this your MCP?

Claim it to get a verified publisher badge, a free copy of our full audit findings, and direct contact for any high-priority issues we find.

Install from

Glama

M8ven verifies MCPs across every public registry — install directly from whichever one you prefer.

// key findings
⚠️
Tool descriptions don’t match what handlers do
3 tools describe read intent but their handlers mutate — remarkable_read (line 400: tmp_path.unlink(missing_ok=True)); remarkable_recent (line 1128: tmp_path.unlink(missing_ok=True)); remarkable_image (line 1822: ocr_tmp_path.unlink(missing_ok=True))
✅
No credential exfiltration, no sensitive file access, no obfuscation
Static analysis found nothing flowing your secrets to unexpected places.
✅
Open source with a license and README
Anyone can audit the code, the license is declared, and the publisher documents what it does.
🔐
You'll be asked for 4 credentials: REMARKABLE_TOKEN, REMARKABLE_SSH_KEY, GOOGLE_VISION_API_KEY, REMARKABLE_SSH_PASSWORD
These are read from process.env at runtime. Make sure you trust where they’ll be sent.
// required environment variables
This server reads these from process.env. You'll be asked to provide them before it can run.
🔐 secretREMARKABLE_TOKEN— "": "${input:remarkable-token}",
configREMARKABLE_USE_SSH
configREMARKABLE_USE_USB_WEB
configREMARKABLE_READ_ONLY
configREMARKABLE_DISABLE_CLOUD_FALLBACK— Pass --no-cloud-fallback (or set =1) to disable this and fail instead when the device is unreachable.
🔐 secretREMARKABLE_SSH_KEY
configREMARKABLE_BACKGROUND_COLOR— "": "#FFFFFF"
configREMARKABLE_OCR_BACKEND— Set in your MCP config:
🔐 secretGOOGLE_VISION_API_KEY— "": "your-api-key"
configREMARKABLE_ROOT_PATH— "": "/Work",
configREMARKABLE_HTTP_HOST
configPORT
configREMARKABLE_HTTP_PORT
configREMARKABLE_SSH_HOST
configREMARKABLE_SSH_USER
configREMARKABLE_SSH_PORT
🔐 secretREMARKABLE_SSH_PASSWORD
configREMARKABLE_SYNC_WORKERS— 16 Parallel workers for cloud fetches (clamped to 64).
configREMARKABLE_DISABLE_CACHE— unset Set to 1 to disable the on-disk blob cache entirely.
configREMARKABLE_CACHE_MAX_BLOB— 4194304 (4 MiB) Blobs larger than this are streamed through but not cached.
configREMARKABLE_CACHE_DIR— ~/.remarkable/cache/blobs Where cached blobs are stored.
configREMARKABLE_RETRY_ATTEMPTS— 3 Maximum number of request attempts (minimum 1)
configREMARKABLE_RETRY_DELAY— 2.0 Base delay in seconds for exponential backoff
configREMARKABLE_USB_HOST
configREMARKABLE_USB_TIMEOUT
configREMARKABLE_SKIP_CONFIRM
// full audit trail
The full breakdown of what we checked, the deductions that landed, the network hosts, the dependency advisories, and concrete fix guidance is available to verified publishers.
// improvement guidance — verified publishers only
We have 8 concrete improvements we can share with the publisher of this MCP. Each comes with specific guidance to raise the trust score.
// embed badge in your README
[![M8ven Score](https://m8ven.ai/badge/mcp/rbonitz-remarkable-mcp-http-16s9fu)](https://m8ven.ai/mcp/rbonitz-remarkable-mcp-http-16s9fu)
commit: 923d6b087eac3c9f29a771f2a66a13a2833528ea
code hash: 7a76ff974fdd4b5569d25fd185fa91ab9ea625d0e016cd50d45dc692c57d73a9
verified: 6/24/2026, 10:20:10 AM
view raw JSON →