registry / @noesis-brain/mcp-server / 2.1.0

@noesis-brain/mcp-server@2.1.0

Official MCP server for Noesis — the markdown notes manager for Claude Code. Search, sync, and manage your .md knowledge base via 19 AI-powered tools.

AI Security Review

scanned 20h ago · by lpm-firewall-ai

Explicit setup installs first-party Claude Code instructions and skills; an optional SessionEnd hook runs a packaged cleanup script. The capture feature can continuously copy selected Claude session transcripts to a configured Noesis service.

Static reason

No blocking static signals were detected.

Trigger

User runs noesis-mcp setup and opts into capture, or invokes /noesis-capture; agent mode requires noesis-mcp agent.

Impact

Selected session content can leave the machine; setup can persist a first-party Claude hook and background watcher cleanup.

Mechanism

Claude transcript collection and authenticated Noesis API sync

Rationale

No concrete malicious install-time or stealth execution chain was found. The package nevertheless provides explicit persistent Claude integration and transcript export, so it merits a warning rather than a clean verdict.

Evidence

package.jsondist/cli/setup.jsdist/agent/runner.jsscripts/noesis-capture-watcher.mjsscripts/noesis-capture-session-end.mjsskill-templates/noesis-capture.md~/.claude/CLAUDE.md~/.claude/commands~/.claude/settings.json~/.claude/noesis-capture-state.json

Network endpoints2

noesisbrain.com/api/mcp/notes/upsert/api/mcp/notes/heartbeat

@noesis-brain/mcp-server@2.1.0

AI Security Review

Decision evidence

Source & flagged code

Source & flagged code

Findings

Source & flagged code