MCP, MCP server
Joplin Server Vector Memory
In an era where cognitive labor is increasingly augmented by a rotating cast of AI assistants, your intellectual capital shouldn't be trapped in isolated digital silos.
Compatibility: Not stated.
Grade C
One Medium finding. Read the report before installing.
Not a guarantee. A hygiene check of the source at the commit shown, not a security audit.
PERMISSION_SHELL_UNDECLARED
Why this grade
- PERMISSION_SHELL_UNDECLARED Medium
Runs shell commands that the manifest or description does not mention.
client/src/fsw.js, line 7
rmSync: (path, options) => fs.rmSync(path, options),
Any High, or two or more Medium findings, give D. One Medium gives C. Low findings or a security Note give B. Each code names a finding behind the letter.
Grades are a hygiene check of the source at the commit shown, on the date checked, not a security audit or a guarantee. The free directory grades are automated. Before release, a PlugVet engineer reviews every paid report and any grade we hold back, including all F grades, against the source code and the evidence we quote.
What was checked
Plain notes from the hygiene checks.
Permissions
Concern
can delete files. requests shell access. No manifest field names shell or command execution.
PERMISSION_SHELL_UNDECLARED PERMISSION_DELETE_FILES
client/src/fsw.js, line 7
rmSync: (path, options) => fs.rmSync(path, options),
client/src/fsw.js, line 11
unlinkSync: (path) => fs.unlinkSync(path),
client/src/index.js, line 107
fs.rmSync(fullPath, { recursive: true, force: true });
Show more
client/src/index.js, line 683
fs.unlinkSync(sqliteDbPath);
client/src/index.js, line 698
if (fs.existsSync(profileDir)) fs.rmSync(profileDir, { recursive: true, force: true });
client/src/index.js, line 916
fs.rmSync(fullPath, { recursive: true, force: true });
client/src/sync.js, line 322
if (fs.existsSync(this.profileDir)) fs.rmSync(this.profileDir, { recursive: true, force: true });
client/src/sync.js, line 324
if (fs.existsSync(vectorDbPath)) fs.unlinkSync(vectorDbPath);
Install and update
Pass
No install-time script found, and dependencies are pinned or absent.
Network
Concern
can reach a host that is not written as a fixed address.
NETWORK_NO_FIXED_HOST
scripts/complete_work.sh, line 78
PROJECT_ID=$(curl -s --max-time 30 -X GET "${API_BASE}/projects/" \
scripts/complete_work.sh, line 91
WORK_ITEM_ID=$(curl -s --max-time 30 -X GET "${API_BASE}/projects/${PROJECT_ID}/issues/?search=${NUMBER}" \
scripts/complete_work.sh, line 104
DONE_STATE_ID=$(curl -s --max-time 30 -X GET "${API_BASE}/projects/${PROJECT_ID}/states/" \
Show more
scripts/complete_work.sh, line 190
TICKET_JSON=$(curl -s --max-time 30 -X GET "${API_BASE}/projects/${PROJECT_ID}/issues/${WORK_ITEM_ID}/" \
scripts/complete_work.sh, line 197
TICKET_COMMENTS=$(curl -s --max-time 30 -X GET "${API_BASE}/projects/${PROJECT_ID}/issues/${WORK_ITEM_ID}/comments/" \
scripts/complete_work.sh, line 288
curl -s --max-time 30 -X POST "${API_BASE}/projects/${PROJECT_ID}/issues/${WORK_ITEM_ID}/comments/" \
scripts/complete_work.sh, line 306
HTTP_CODE=$(curl -s --max-time 30 -o /dev/null -w "%{http_code}" -X PATCH \
server/script_client.py, line 4
r1 = requests.get("http://localhost:8000/http-api/mcp/sse/")
server/script_client.py, line 8
r2 = requests.post("http://localhost:8000/http-api/mcp/sse/messages")
server/script_client.py, line 12
r3 = requests.post("http://localhost:8000/http-api/mcp/stream/")
server/script_client.py, line 16
r4 = requests.post("http://localhost:8000/http-api/mcp/stateless/")
server/src/main.py, line 342
return requests.get(url, auth=auth)
server/src/main.py, line 2103
requests.post("http://127.0.0.1:3000/node-api/restart", timeout=2)
docs/local-embedding-plan.md, line 17
- Update the `fetch()` call in `generateEmbeddings()` to query the local Python backend at `http://127.0.0.1:8000/http-api/internal/embed`.
Secrets
Concern
reads a credential or environment file.
SECRETS_ENV_READ SECRETS_PATH_DOTENV
client/e2e_create_sync.js, line 13
password: process.env.JOPLIN_PASSWORD || ('ad' + 'min')
client/e2e_massive_create_sync.js, line 13
password: process.env.JOPLIN_PASSWORD || ('ad' + 'min')
client/src/index.js, line 360
const currentPass = globalCredentials.password || process.env.JOPLIN_PASSWORD || proxyConfig?.joplinPassword;
Show more
client/src/index.js, line 1251
if (!restoredFromRedis && process.env.JOPLIN_PASSWORD && (!process.env.JOPLIN_USERNAME || process.env.JOPLIN_USERNAME === config.joplinUsername)) {
client/src/index.js, line 1252
globalCredentials.password = process.env.JOPLIN_PASSWORD;
client/src/index.js, line 1253
globalCredentials.masterPassword = process.env.JOPLIN_MASTER_PASSWORD || process.env.JOPLIN_PASSWORD;
client/src/index.js, line 1254
config.joplinPassword = process.env.JOPLIN_PASSWORD;
client/src/index.js, line 1272
} else if (process.env.JOPLIN_SERVER_URL && process.env.JOPLIN_USERNAME && process.env.JOPLIN_PASSWORD) {
Jenkinsfile, line 24
// Generate a minimal .env file so docker-compose picks up the server URL
Jenkinsfile, line 26
sh 'echo "JOPLIN_SERVER_URL=${JOPLIN_SERVER_URL}" > .env'
README.md, line 81
* **Initial Boot (Setup Mode):** On first run (if no credentials are provided via `.env`), the system boots into Setup Mode. The background sync daemon is paused. You must access
docs/ARCHITECTURE.md, line 128
1. **Initial Boot (Setup Mode):** On first run (or if no credentials are provided via `.env`), the system boots into "Setup" mode. The background sync daemon is paused. The user ac
docs/SETUP.md, line 16
cp .env.example .env
docs/SETUP.md, line 18
3. Edit the `.env` file to match your setup (e.g., pointing `OLLAMA_URL` to your Ollama instance).
Agent instructions
Pass
No instruction to ignore earlier instructions or to hide a step.
Obfuscation
Note
a file was over the read cap and was not fully read.
OBFUSCATION_FILE_OVER_READ_CAP
client/package-lock.json, line 1
{
repro_data/joplin-profile/database.sqlite, line 1
SQLite format 3 @ 5 b � 5 .�� � `�����
Licence
Pass
A licence file is present (LICENSE).
Maintainer activity
Pass
The latest commit is within the last 365 days.
Note
Hygiene check of commit 74c8f59c29c7. can delete files. requests shell access. No manifest field names shell or command execution. can reach a host that is not written as a fixed address. reads a credential or environment file. a file was over the read cap and was not fully read.
Date and source
Date checked:
github.com
Commit graded: 74c8f59c29c7da670e24cba0f607bd78b2f95dd8
This link goes to the original host. PlugVet does not host or check what you download from there, and installing it is your own decision and risk.