52
grade D
10 days ago
glama
HackMD MCP Server
Enables interaction with HackMD via its API to manage personal and team notes. It supports listing, reading, creating, updating, and deleting notes, as well as accessing user history and profile information.
Install from
M8ven verifies MCPs across every public registry — install directly from whichever one you prefer.
// key findings
🚨
Secret credentials may flow to a network call
1 flow detected: HACKMD_API_TOKEN. We can’t prove the destination matches the brand the credential belongs to.
⚠️
Known vulnerabilities in dependencies: 3 high
Affects packages this MCP installs at runtime. Upgrade or remove the affected dependency.
🔐
You'll be asked for 1 credential: HACKMD_API_TOKEN
These are read from process.env at runtime. Make sure you trust where they’ll be sent.
// required environment variables
This server reads these from
process.env. You'll be asked to provide them before it can run.🔐 secret
HACKMD_API_TOKEN— "": "your-token-here"// full audit trail
The full breakdown of what we checked, the deductions that landed, the network hosts, the dependency advisories, and concrete fix guidance is available to verified publishers.
// improvement guidance — verified publishers only
We have 5 concrete improvements we can share with the publisher of this MCP. Each comes with specific guidance to raise the trust score.
// embed badge in your README
[](https://m8ven.ai/mcp/zyx1121-hackmd-mcp-99xn9w)commit: a2533427183410321a040eae03c020faeea27b67
code hash: 789013350c29a62f5cf66882a91009164fbb1bea2e04e58ac336abb084ab3eaf
verified: 4/11/2026, 2:23:10 PM