← Back to search

Drafto

JakubAnderwald streamable_http Scanned 23h ago

Create, read, search, and organize your Drafto notes and notebooks.

MCP Registry ↗
C
65 / 100

Versions

1.0.0latest
first seen May 19, 2026
PermissionsTool SafetyAuthAnnotationsCode QualityStabilitySpecVuln HistoryAuthorTransparencyCommunity

Tools 11

list_notebooks
annotations: none low

List all notebooks for the current user

list_notes
annotations: none low

List notes in a notebook (non-trashed, ordered by last updated)

notebook_id string
read_note
annotations: none low

Read a note

note_id string
search_notes
annotations: none low

Full-text search across all notes (titles, content, and notebook names)

query string
create_notebook
annotations: none low

Create a new notebook

name string
create_note
annotations: none low

Create a new note in a notebook with optional Markdown content

title string notebook_id string content_markdown string
update_note
annotations: none low

Update a note

title string note_id string content_markdown string
move_note
annotations: none low

Move a note to a different notebook

note_id string notebook_id string
trash_note
annotations: none low

Move a note to trash (soft-delete, recoverable for 30 days)

note_id string
rename_notebook
annotations: none low

Rename a notebook (trims the name; rejects an empty name)

name string notebook_id string
delete_notebook
annotations: none low

Delete an empty notebook (refuses if it still holds non-trashed notes)

notebook_id string

Permissions 5

network medium
Server uses network capabilities via: fetch()
filesystem low
Server uses filesystem capabilities via: fs, fs sync ops, open(), os, path
shell high
Server uses shell capabilities via: child_process, execSync(), spawn(), spawnSync()
database medium
Server uses database capabilities via: sqlite3
env_vars low
Server uses env_vars capabilities via: process.env

Scan Findings 41

low
Tool 'list_notebooks' has no annotations annotation_checker · 100%
low
Tool 'list_notes' has no annotations annotation_checker · 100%
low
Tool 'read_note' has no annotations annotation_checker · 100%
low
Tool 'search_notes' has no annotations annotation_checker · 100%
low
Tool 'create_notebook' has no annotations annotation_checker · 100%
low
Tool 'create_note' has no annotations annotation_checker · 100%
low
Tool 'update_note' has no annotations annotation_checker · 100%
low
Tool 'move_note' has no annotations annotation_checker · 100%
low
Tool 'trash_note' has no annotations annotation_checker · 100%
low
Tool 'rename_notebook' has no annotations annotation_checker · 100%
low
Tool 'delete_notebook' has no annotations annotation_checker · 100%
info
Sandbox failed to start for behavioral verification behavioral_verifier · 100%
medium
Excessive dependency count: 71 direct dependencies dependency_analyzer · 90%
medium
Suspicious package name: react-native dependency_analyzer · 60%
medium
Suspicious package name: react-dom dependency_analyzer · 60%
medium
Vulnerable dependency: @react-native-community/cli@18.0.0 (GHSA-399j-vxmf-hjvr) dependency_analyzer · 95%
medium
Buffer.from base64 in JakubAnderwald-drafto-f24594c/apps/desktop/__tests__/lib/attachment-queue.test.ts:57 entropy_analyzer · 75%
info
package.json metadata manifest_parser · 100%
info
Tool: list_notebooks manifest_parser · 70%
info
Tool: list_notes manifest_parser · 70%
info
Tool: read_note manifest_parser · 70%
info
Tool: search_notes manifest_parser · 70%
info
Tool: create_notebook manifest_parser · 70%
info
Tool: create_note manifest_parser · 70%
info
Tool: update_note manifest_parser · 70%
info
Tool: move_note manifest_parser · 70%
info
Tool: trash_note manifest_parser · 70%
info
Tool: rename_notebook manifest_parser · 70%
info
Tool: delete_notebook manifest_parser · 70%
info
Transport: streamable-http manifest_parser · 80%
info
Required env vars (42) manifest_parser · 80%
info
Sandbox failed to start for output poisoning scan output_poisoning · 100%
medium
Permission: network access detected permission_analyzer · 70%
low
Permission: filesystem access detected permission_analyzer · 90%
high
Permission: shell access detected permission_analyzer · 95%
medium
Permission: database access detected permission_analyzer · 90%
low
Permission: env_vars access detected permission_analyzer · 90%
info
SBOM generated: 114 components sbom_generator · 100%
high
Hardcoded Password found in JakubAnderwald-drafto-f24594c/docs/operations/builds-and-releases.md secret_scanner · 65%
high
Hardcoded Password found in JakubAnderwald-drafto-f24594c/apps/mobile/e2e/README.md secret_scanner · 65%
medium
No build provenance detected (SLSA L0) slsa_assessor · 90%