registry / remnote-mcp-server / 0.17.0

remnote-mcp-server@0.17.0

MCP server bridge for RemNote knowledge base

AI Security Review

scanned 8h ago · by lpm-firewall-ai

LPM treats this as warn-only first-party agent extension lifecycle risk. This package ships a first-party Claude Desktop MCPB extension and an optional local daemon. The extension proxies stdio MCP tool calls to a local RemNote MCP server; optional macOS persistence is user-invoked.

Static reason

No blocking static signals were detected.

Trigger

User installs the MCPB extension or explicitly runs `remnote-mcp-server daemon install-launchd`.

Impact

An AI client can access and modify RemNote data through explicitly installed local tooling; launchd can keep the package server running.

Mechanism

First-party MCP proxy with optional package-owned launchd service.

Rationale

Source inspection does not establish malicious behavior. Per policy, the bundled first-party AI-agent extension and explicit persistence capability warrant a non-blocking warning rather than a clean verdict.

Evidence

package.jsondist/cli.jsdist/config.jsdist/daemon.jsmcpb/remnote-local/manifest.jsonmcpb/remnote-local/server/index.jsmcpb/remnote-local/remnote-local.mcpb~/Library/LaunchAgents/com.remnote.mcp-server.plist

Network endpoints2

127.0.0.1:3001/mcpws://127.0.0.1:3002

remnote-mcp-server@0.17.0

AI Security Review

Decision evidence

Source & flagged code

Source & flagged code

Findings

Source & flagged code