notes v0.4.1

@abhishekmcp/notes v0.4.1 — distribution + small fixes

Patch release that makes the server installable/discoverable beyond npm, plus a tiny ergonomic fix.

Install options

• Claude Code plugin: /plugin marketplace add Abhishekkumar2021/mcp-suite → /plugin install notes
• Claude Desktop (MCPB): download notes-0.4.1.mcpb below and drag it onto Settings → Extensions (no Node required; includes a folder picker for your notes dir)
• npm: npx -y @abhishekmcp/notes
• MCP registry: io.github.Abhishekkumar2021/notes

Fixes

• Added mcpName for the official MCP registry.
• NOTES_READONLY now accepts true as well as 1 (so the MCPB read-only checkbox works). Backward-compatible.

Published with provenance via OIDC.

notes v0.4.0

@abhishekmcp/notes v0.4.0 — Prompts + note-app quality-of-life

Adds MCP Prompts (slash-command workflows) and a quality-of-life tool bundle that turns the server into a daily-driver note app. No new dependencies; still pure-JS, local, free.

Prompts (new — surface as slash commands in your client)

• weekly_review — summarize the last 7 days of notes + open todos
• summarize_note — summarize one note (with note-name autocomplete)
• daily_standup — draft a standup from yesterday/today's daily notes + open todos

New tools

• daily_note — open today's daily note and append timestamped entries (NOTES_DAILY_DIR)
• list_templates / create_from_template — instantiate notes from templates with {{date}}/{{time}}/{{title}} + custom vars (NOTES_TEMPLATE_DIR)
• rename_tag — rename a tag across the whole vault (frontmatter + inline #hashtags)
• unlinked_mentions — find notes that mention a note's title as plain text but don't yet [[link]] to it

Notes

• Writes stay behind NOTES_READONLY=1; prompts + read tools are always available.
• Verified: clean build, 0 vulnerabilities, full regression (v0.2 + v0.3) + new v0.4 test suites pass. Published with provenance via OIDC.

github v0.2.0

@abhishekmcp/github v0.2.0 — production hardening

No new tools; makes the server resilient + observable for real workloads.

Added

• Resilience: official retry + throttling plugins (auto-retry transient 5xx; proactively wait + retry on primary/secondary rate limits) and a per-request timeout (GITHUB_TIMEOUT_MS, default 30s) — requests survive real GitHub conditions instead of failing or hanging.
• Pagination: list_issues/list_pull_requests/list_notifications paginate up to 300 items and report truncation.
• GitHub Enterprise: GITHUB_API_URL sets the REST base URL.
• Observability: structured logging + an audit log (GITHUB_AUDIT_LOG) of write operations.
• Secret safety: tool output is redacted of any token patterns (defense-in-depth); 403s map to a rate-limit reset or a missing-scope hint.

Published with provenance via OIDC.

files v0.2.0

@abhishekmcp/files v0.2.0 — production hardening

No new tools; this makes the filesystem server trustworthy under real use.

Added

• Secret protection: reads of (and discovery of) common secret files (.env, *.pem, *.key, .ssh/**, .aws/**, .npmrc, credentials, …) are blocked by default, plus a per-root .mcpignore. Override with FS_ALLOW_SECRETS=1.
• Audit log: every mutation is recorded to FS_AUDIT_LOG (JSON lines) and stderr.
• Resilience: per-operation timeout (FS_OP_TIMEOUT_MS) and a concurrency cap (FS_MAX_CONCURRENCY).
• Streaming + encoding: head reads and hashing stream (no whole-file loads); edits preserve line endings (CRLF stays CRLF) and BOM; binary files give a clean error.
• Committed test suite (node:test) — sandbox/runtime unit tests + integration/security tests, now run in CI.

Published with provenance via OIDC.

files v0.1.0

@abhishekmcp/files v0.1.0 — sandboxed filesystem MCP server

A robust, security-first filesystem server for any MCP client. Pure-JS, no native deps, no API keys.

Highlights

• Read & navigate: read_file (head/tail/line-window), read_media, stat, list_dir, tree, changed_since
• Search: find_files (glob) + search_content (regex/substring grep, skips binaries)
• Token-efficient edits: edit_file (unique find/replace) + edit_lines (hash-guarded line ranges), with dryRun unified-diff previews
• Organize: move, copy, create_dir, and soft-delete to trash (delete → list_trash → restore → empty_trash)
• Archive & integrity: zip/unzip (zip-slip protected), file_hash, find_duplicates

Security

Everything is sandboxed to FS_ROOTS: lexical + realpath containment, symlink-escape rejection on reads and writes, atomic writes that never act through symlinks, zip-slip protection, size/depth caps, and a read-only mode (FS_READONLY). The server refuses to start without FS_ROOTS.

Install

claude mcp add files --env FS_ROOTS=$HOME/projects -- npx -y @abhishekmcp/files, the Claude Code plugin (/plugin install files), or via the MCP registry (io.github.Abhishekkumar2021/files).

Published with provenance via OIDC.

notes v0.3.0

@abhishekmcp/notes v0.3.0 — local semantic search

Adds meaning-based search alongside the existing keyword search — all still pure-JS, no native deps, no API keys, nothing leaves your machine.

Added

• semantic_search — ranks notes by meaning using local embeddings, so it finds related notes even with no shared keywords (e.g. "puppy" matches a note about "canine companions"). Optional hybrid mode fuses semantic + keyword ranking via Reciprocal Rank Fusion.
• Runs all-MiniLM-L6-v2 (ONNX) on onnxruntime-web (WebAssembly — no native modules). The quantized model (~23 MB) is downloaded once at runtime to ~/.cache/mcp-notes/models (override with NOTES_MODEL_DIR); per-note vectors are cached in .notes-embeddings.json and incrementally synced.
• Hand-rolled BERT WordPiece tokenizer — same no-dependency spirit as the frontmatter parser.

Notes

• Lazy by design: startup, offline use, and keyword search are completely unchanged for anyone who never calls semantic_search. The first call needs network for the one-time model download and embeds the whole vault; everything after is offline and fast. A model download/load failure returns a clean error and never takes the server down.
• npm audit clean (0 vulnerabilities, no native binaries). Published with provenance via OIDC.

notes v0.2.0

@abhishekmcp/notes v0.2.0

A major upgrade turning the notes server into an advanced, secure, token-efficient MCP server — pure-JS, no native deps, no API keys.

Added

• Ranked full-text search (MiniSearch): fuzzy + prefix matching, field filters (title/tag/body/path), ranked snippets with context, pagination.
• Tags & todos: list_tags with counts, list_todos aggregating - [ ] checkboxes across notes.
• Wiki-link knowledge graph: get_backlinks, get_neighbors, find_path (shortest chain), related_notes, graph_overview, broken_links.
• Token-efficient I/O: get_outline, read_note by section or character window, paginated list_notes.
• move_note: renames a note and rewrites every [[wiki-link]] pointing at it.
• Persisted index with incremental mtime/size sync for fast warm starts (NOTES_NO_CACHE=1 to disable).

Security

• Symlink-safe sandbox (realpath containment), file size limits, atomic writes, name validation.
• NOTES_READONLY=1 omits all mutating tools.

Published with npm provenance via OIDC.

notes v0.1.1

First automated publish via OIDC trusted publishing.