hillnote-mcp-server

The server exposes a rich set of CRUD and search operations on local files and specific Hillnote data structures (documents, tasklists, recipes, HTML tools) to an MCP-compatible AI client. While the server itself doesn't appear to use dangerous functions like 'eval' or have direct network exposure (it's run as a local process), the inherent nature of providing an AI programmatic access to local file system operations introduces a significant security consideration. A misconfigured or rogue AI could potentially modify or delete user data. The 'add_html_tool' feature allows arbitrary HTML/JS to be stored, which would be executed by the *client*, posing a client-side risk if not sandboxed properly. The project appears legitimate and well-intentioned.