MCP Standardnotes runs on your own machine — the client starts it, so there is no endpoint to ping. 126 installs a week from npm. Last commit 19 Aug 2026.
End-to-end encrypted access to a Standard Notes vault (protocol 004, local stdio only).
Today is the operative word: we check MCP Standardnotes every 15 minutes and re-read its code on every release. Watch it and you find out the day that stops being true.
This server runs on your own machine — install it with the package manager and the client starts it for you. Package name taken from the official registry entry.
claude mcp add mcp-standardnotes -e 'SN_EMAIL=<SN_EMAIL>' -- npx -y mcp-standardnotes
{
"mcpServers": {
"mcp-standardnotes": {
"command": "npx",
"args": [
"-y",
"mcp-standardnotes"
],
"env": {
"SN_EMAIL": "<SN_EMAIL>"
}
}
}
}
[mcp_servers.mcp-standardnotes]
command = "npx"
args = ["-y", "mcp-standardnotes"]
env = { SN_EMAIL = "<SN_EMAIL>" }
{
"mcpServers": {
"mcp-standardnotes": {
"command": "npx",
"args": [
"-y",
"mcp-standardnotes"
],
"env": {
"SN_EMAIL": "<SN_EMAIL>"
}
}
}
}
{
"servers": {
"mcp-standardnotes": {
"type": "stdio",
"command": "npx",
"args": [
"-y",
"mcp-standardnotes"
],
"env": {
"SN_EMAIL": "<SN_EMAIL>"
}
}
}
}
Put your own value in place of
<SN_EMAIL> (Standard Notes account email. The password is prompted once via `npx mcp-standardnotes-login` and the session is persisted in the OS keychain).
The author’s registry entry marks it as required.
Optional settings from the registry entry, left out of the block above:
SN_SERVER_URL (Standard Notes sync server URL. Defaults to the official cloud if unset), SN_CERT_FINGERPRINT (Optional SHA-256 TLS certificate fingerprint for pinning a self-hosted server).
Local, encrypted MCP vault for passports, IDs, visas and photos. You control access.
Create-only, age-encrypted deposits of new logins and notes into Vaultwarden, without vault reads.
Encrypted local ledger of structured user state, shared across every MCP-aware AI tool.
Read-only access to secrets in a local KeePassXC vault. Runs commands with them injected.
Read-only, dated public crypto source registry with evidence status. Local stdio; no API keys.
Hash, sign, and encrypt text locally with standard algorithms. No network and no key.
Read-only access to your Priomate tasks, notes, inbox and team projects.
Read-only, self-hosted MCP access to IMAP email, mirrored locally and indexed by notmuch.
Answers built from our own checks of this server.