Back to Home
brentmid icon

evernote-mcp-server

Verified Safe

by brentmid

Overview

Integrates Claude Desktop (or any MCP-compatible LLM) with Evernote for natural language contextual queries and searches over notes.

Installation

Run Command
docker-compose up --build

Environment Variables

  • EVERNOTE_CONSUMER_KEY
  • EVERNOTE_CONSUMER_SECRET
  • DEV_MODE

Security Notes

The project demonstrates strong security practices: uses HTTPS-only, leverages Red Hat Hummingbird (Chainguard) minimal base images with zero CVEs, employs npm overrides for transitive dependency vulnerability management, implements automatic token redaction in debug logs, and limits Evernote access to read-only. A critical command injection vulnerability in the `openBrowser` function was identified and fixed in v2.2.0 by transitioning to `child_process.spawn` with array arguments, preventing shell injection. OAuth tokens are persisted in `.env` files, which should be properly secured and excluded from version control in production environments.

Similar Servers

Stats

Interest Score38
Security Score9
Cost ClassMedium
Avg Tokens20000
Stars25
Forks9
Last Update2025-11-19

Tags

EvernoteMCPLLM IntegrationNode.jsDocker