workflowy-mcp
Verified Safeby rodolfo-terriquez
Overview
Connects AI assistants to Workflowy for reading, creating, updating, and managing notes and tasks.
Installation
npm run devEnvironment Variables
- DATABASE_URL
- ACCESS_SECRET
Security Notes
The server employs a robust two-part authentication scheme using an environment-variable-stored ACCESS_SECRET and a per-request Workflowy API Key from the client, preventing the server from persistently storing the sensitive API key. Database interactions with Neon (`@neondatabase/serverless`) utilize tagged template literals for SQL queries, which inherently protect against common SQL injection vulnerabilities. No 'eval' or direct command execution patterns were found. URLs for the Workflowy API are constructed from hardcoded base paths and user-provided parameters are URI-encoded, mitigating path traversal risks. Secrets are managed via environment variables as recommended.
Similar Servers
obsidian-mcp-plugin
This plugin connects your Obsidian vault to AI assistants through MCP (Model Context Protocol), enabling them to understand and navigate your notes as a connected knowledge graph.
triliumnext-mcp
Provides AI assistants with tools to interact with TriliumNext Notes instances, enabling automated knowledge management and content manipulation.
claude-todo-emulator
Provides persistent task management for AI coding assistants within IDEs like Cursor and Windsurf by emulating Claude Code's todo system.
trello-mcp-server
Provides an AI-agent-friendly interface (MCP server) to interact with the Trello API for managing boards, lists, cards, and other Trello resources.