← Back to search Server uses network capabilities via: fetch(), httpx, requests, socket, urllib Server uses filesystem capabilities via: fs sync ops, glob, open(), os, path, pathlib, shutil, tempfile Server uses shell capabilities via: child_process, spawn(), spawnSync(), subprocess Server uses database capabilities via: sqlite3 Server uses env_vars capabilities via: os.environ, os.getenv(), process.env
Provenote MCP
First-party Provenote MCP server for drafts, research threads, auditable runs, and knowledge search.
C
61.8 / 100
Versions
1.8.5latestfirst seen Jun 5, 2026
Tools 25
notebook_list annotations: none low
List notebooks.
data string
notebook_mutate annotations: none low
Mutate notebook resources via action+data schema.
data string action str
source_list annotations: none low
List sources, optionally filtered by notebook.
data string
source_mutate annotations: none low
Mutate source resources via action+data schema.
data string action str
note_list annotations: none low
List notes, optionally filtered by notebook.
data string
note_mutate annotations: none low
Mutate note resources via action+data schema.
data string action str
knowledge_search annotations: none low
Search sources and notes.
data string
chat_run annotations: none low
Send a chat message and return model response.
data string
draft_list annotations: none low
List drafts for a notebook outcome lane.
notebook_id str
draft_create annotations: none low
Create a notebook draft from selected sources, notes, and research threads.
title string language string model_id string note_ids string source_ids string thread_ids string notebook_id str near_dedup_threshold string
draft_verify annotations: none low
Verify a notebook draft and freeze its snapshot.
draft_id str
draft_download annotations: none low
Return draft markdown as tool-consumable text.
draft_id str
research_thread_list annotations: none low
List research threads for a notebook.
notebook_id str
research_thread_create annotations: none low
Create a research thread outcome artifact.
title str answer string note_ids string question string seed_kind str insight_id string source_ids string notebook_id str insight_type string search_results string
research_thread_append annotations: none low
Append a new entry to an existing research thread.
title string content str metadata string note_ids string thread_id str entry_type str source_ids string
research_thread_to_draft annotations: none low
Promote a research thread into a notebook draft.
thread_id str
auditable_run_list annotations: none low
List auditable runs for a source.
source_id str
auditable_run_create annotations: none low
Create an auditable run for a source outcome lane.
language string model_id string source_id str near_dedup_threshold string
auditable_run_download annotations: none low
Return auditable markdown as tool-consumable text.
run_id str
auditable_run_repair_claim annotations: none low
Repair one claim inside an auditable run.
run_id str model_id string target_index int
auditable_run_repair_section annotations: none low
Repair one section inside an auditable run.
run_id str model_id string target_index int
model_inspect annotations: none low
Inspect model and provider metadata via action+data schema.
data string action str
settings_mutate annotations: none low
Mutate or retrieve settings via action+data schema.
data string action str
ui_test_control annotations: none low
Control UI test runs via action+data schema.
data string action str
computer_use_control annotations: none low
Control computer-use sessions via action+data schema.
data string action str
Permissions 5
network medium filesystem low shell high database medium env_vars low Scan Findings 156
low
Tool 'notebook_list' has no annotations
low
Tool 'notebook_mutate' has no annotations
low
Tool 'source_list' has no annotations
low
Tool 'source_mutate' has no annotations
low
Tool 'note_list' has no annotations
low
Tool 'note_mutate' has no annotations
low
Tool 'knowledge_search' has no annotations
low
Tool 'chat_run' has no annotations
low
Tool 'draft_list' has no annotations
low
Tool 'draft_create' has no annotations
low
Tool 'draft_verify' has no annotations
low
Tool 'draft_download' has no annotations
low
Tool 'research_thread_list' has no annotations
low
Tool 'research_thread_create' has no annotations
low
Tool 'research_thread_append' has no annotations
low
Tool 'research_thread_to_draft' has no annotations
low
Tool 'auditable_run_list' has no annotations
low
Tool 'auditable_run_create' has no annotations
low
Tool 'auditable_run_download' has no annotations
low
Tool 'auditable_run_repair_claim' has no annotations
low
Tool 'auditable_run_repair_section' has no annotations
low
Tool 'model_inspect' has no annotations
low
Tool 'settings_mutate' has no annotations
low
Tool 'ui_test_control' has no annotations
low
Tool 'computer_use_control' has no annotations
medium
OAuth implementation without PKCE
info
Sandbox failed to start for behavioral verification
medium
Excessive dependency count: 86 direct dependencies
medium
Suspicious package name: react-dom
medium
Suspicious package name: react-markdown
medium
Vulnerable dependency: axios@1.15.0 (GHSA-35jp-ww65-95wh)
medium
Vulnerable dependency: axios@1.15.0 (GHSA-3g43-6gmg-66jw)
medium
Vulnerable dependency: axios@1.15.0 (GHSA-3w6x-2g7m-8v23)
medium
Vulnerable dependency: axios@1.15.0 (GHSA-42h9-826w-cgv3)
medium
Vulnerable dependency: axios@1.15.0 (GHSA-445q-vr5w-6q77)
medium
Vulnerable dependency: axios@1.15.0 (GHSA-5c9x-8gcm-mpgx)
medium
Vulnerable dependency: axios@1.15.0 (GHSA-62hf-57xw-28j9)
medium
Vulnerable dependency: axios@1.15.0 (GHSA-6chq-wfr3-2hj9)
medium
Vulnerable dependency: axios@1.15.0 (GHSA-777c-7fjr-54vf)
medium
Vulnerable dependency: axios@1.15.0 (GHSA-7q8q-rj6j-mhjq)
medium
Vulnerable dependency: axios@1.15.0 (GHSA-898c-q2cr-xwhg)
medium
Vulnerable dependency: axios@1.15.0 (GHSA-f4gw-2p7v-4548)
medium
Vulnerable dependency: axios@1.15.0 (GHSA-hfxv-24rg-xrqf)
medium
Vulnerable dependency: axios@1.15.0 (GHSA-j5f8-grm9-p9fc)
medium
Vulnerable dependency: axios@1.15.0 (GHSA-jqh4-m9w3-8hp9)
medium
Vulnerable dependency: axios@1.15.0 (GHSA-m7pr-hjqh-92cm)
medium
Vulnerable dependency: axios@1.15.0 (GHSA-mmx7-hfxf-jppx)
medium
Vulnerable dependency: axios@1.15.0 (GHSA-mwf2-3pr3-8698)
medium
Vulnerable dependency: axios@1.15.0 (GHSA-p92q-9vqr-4j8v)
medium
Vulnerable dependency: axios@1.15.0 (GHSA-pf86-5x62-jrwf)
medium
Vulnerable dependency: axios@1.15.0 (GHSA-pjwm-pj3p-43mv)
medium
Vulnerable dependency: axios@1.15.0 (GHSA-pmv8-rq9r-6j72)
medium
Vulnerable dependency: axios@1.15.0 (GHSA-pmwg-cvhr-8vh7)
medium
Vulnerable dependency: axios@1.15.0 (GHSA-q8qp-cvcw-x6jj)
medium
Vulnerable dependency: axios@1.15.0 (GHSA-vf2m-468p-8v99)
medium
Vulnerable dependency: axios@1.15.0 (GHSA-w9j2-pvgh-6h63)
medium
Vulnerable dependency: axios@1.15.0 (GHSA-xhjh-pmcv-23jw)
medium
Vulnerable dependency: axios@1.15.0 (GHSA-xx6v-rp6x-q39c)
medium
Vulnerable dependency: next@16.2.3 (GHSA-267c-6grr-h53f)
medium
Vulnerable dependency: next@16.2.3 (GHSA-26hh-7cqf-hhc6)
medium
Vulnerable dependency: next@16.2.3 (GHSA-36qx-fr4f-26g5)
medium
Vulnerable dependency: next@16.2.3 (GHSA-3g8h-86w9-wvmq)
medium
Vulnerable dependency: next@16.2.3 (GHSA-4633-3j49-mh5q)
medium
Vulnerable dependency: next@16.2.3 (GHSA-492v-c6pp-mqqv)
medium
Vulnerable dependency: next@16.2.3 (GHSA-4c39-4ccg-62r3)
medium
Vulnerable dependency: next@16.2.3 (GHSA-68g3-v927-f742)
medium
Vulnerable dependency: next@16.2.3 (GHSA-6gpp-xcg3-4w24)
medium
Vulnerable dependency: next@16.2.3 (GHSA-89xv-2m56-2m9x)
medium
Vulnerable dependency: next@16.2.3 (GHSA-8h8q-6873-q5fj)
medium
Vulnerable dependency: next@16.2.3 (GHSA-955p-x3mx-jcvp)
medium
Vulnerable dependency: next@16.2.3 (GHSA-c4j6-fc7j-m34r)
medium
Vulnerable dependency: next@16.2.3 (GHSA-ffhc-5mcf-pf4q)
medium
Vulnerable dependency: next@16.2.3 (GHSA-gx5p-jg67-6x7h)
medium
Vulnerable dependency: next@16.2.3 (GHSA-h64f-5h5j-jqjh)
medium
Vulnerable dependency: next@16.2.3 (GHSA-m99w-x7hq-7vfj)
medium
Vulnerable dependency: next@16.2.3 (GHSA-mg66-mrh9-m8jx)
medium
Vulnerable dependency: next@16.2.3 (GHSA-p9j2-gv94-2wf4)
medium
Vulnerable dependency: next@16.2.3 (GHSA-q8wf-6r8g-63ch)
medium
Vulnerable dependency: next@16.2.3 (GHSA-vfv6-92ff-j949)
medium
Vulnerable dependency: next@16.2.3 (GHSA-wfc6-r584-vfw7)
medium
Vulnerable dependency: vite@8.0.5 (GHSA-fx2h-pf6j-xcff)
medium
Vulnerable dependency: vite@8.0.5 (GHSA-v6wh-96g9-6wx3)
medium
Vulnerable dependency: fastapi@0.104.0 (PYSEC-2024-38)
medium
Vulnerable dependency: fastmcp@2.12.3 (GHSA-5h2m-4q8j-pqpj)
medium
Vulnerable dependency: fastmcp@2.12.3 (GHSA-c2jp-c369-7pvx)
medium
Vulnerable dependency: fastmcp@2.12.3 (GHSA-m8x7-r2rg-vh5g)
medium
Vulnerable dependency: fastmcp@2.12.3 (GHSA-mxxr-jv3v-6pgc)
medium
Vulnerable dependency: fastmcp@2.12.3 (GHSA-rcfx-77hg-w2wv)
medium
Vulnerable dependency: fastmcp@2.12.3 (GHSA-rj5c-58rq-j5g5)
medium
Vulnerable dependency: fastmcp@2.12.3 (GHSA-rww4-4w9c-7733)
medium
Vulnerable dependency: fastmcp@2.12.3 (GHSA-vv7q-7jx5-f767)
medium
Vulnerable dependency: fastmcp@2.12.3 (PYSEC-2026-1364)
medium
Vulnerable dependency: fastmcp@2.12.3 (PYSEC-2026-1365)
medium
Vulnerable dependency: fastmcp@2.12.3 (PYSEC-2026-2474)
medium
Vulnerable dependency: fastmcp@2.12.3 (PYSEC-2026-2475)
medium
Vulnerable dependency: fastmcp@2.12.3 (PYSEC-2026-2476)
medium
Vulnerable dependency: fastmcp@2.12.3 (PYSEC-2026-338)
medium
Vulnerable dependency: langchain@1.2.0 (GHSA-gr75-jv2w-4656)
medium
Vulnerable dependency: langchain@1.2.0 (PYSEC-2026-2192)
medium
Vulnerable dependency: langgraph@1.0.5 (GHSA-g48c-2wqr-h844)
medium
Vulnerable dependency: langgraph@1.0.5 (PYSEC-2026-83)
medium
Vulnerable dependency: langgraph-checkpoint-sqlite@3.0.1 (GHSA-47pj-3jcm-6whg)
medium
Vulnerable dependency: langgraph-checkpoint-sqlite@3.0.1 (PYSEC-2026-3636)
medium
Vulnerable dependency: python-dotenv@1.0.1 (GHSA-mf9w-mj56-hr94)
medium
Vulnerable dependency: python-dotenv@1.0.1 (PYSEC-2026-2270)
medium
High-entropy string (5.74 bits/char) in xiaojiou176-open-notebooklab-0887cbf/apps/web/src/lib/locales/zh-TW/sections/settings.ts:18
medium
High-entropy string (6.01 bits/char) in xiaojiou176-open-notebooklab-0887cbf/apps/web/src/lib/locales/zh-TW/sections/settings.ts:27
medium
High-entropy string (5.95 bits/char) in xiaojiou176-open-notebooklab-0887cbf/apps/web/src/lib/locales/ja-JP/sections/settings.ts:14
medium
High-entropy string (6.16 bits/char) in xiaojiou176-open-notebooklab-0887cbf/apps/web/src/lib/locales/ja-JP/sections/settings.ts:18
medium
High-entropy string (5.75 bits/char) in xiaojiou176-open-notebooklab-0887cbf/apps/web/src/lib/locales/ja-JP/sections/settings.ts:27
medium
High-entropy string (5.79 bits/char) in xiaojiou176-open-notebooklab-0887cbf/apps/web/src/lib/locales/ja-JP/sections/core.ts:603
medium
High-entropy string (5.74 bits/char) in xiaojiou176-open-notebooklab-0887cbf/apps/web/src/lib/locales/zh-CN/sections/settings.ts:18
medium
High-entropy string (5.98 bits/char) in xiaojiou176-open-notebooklab-0887cbf/apps/web/src/lib/locales/zh-CN/sections/settings.ts:27
info
package.json metadata
info
pyproject.toml metadata
info
Tool: notebook_list
info
Tool: notebook_mutate
info
Tool: source_list
info
Tool: source_mutate
info
Tool: note_list
info
Tool: note_mutate
info
Tool: knowledge_search
info
Tool: chat_run
info
Tool: draft_list
info
Tool: draft_create
info
Tool: draft_verify
info
Tool: draft_download
info
Tool: research_thread_list
info
Tool: research_thread_create
info
Tool: research_thread_append
info
Tool: research_thread_to_draft
info
Tool: auditable_run_list
info
Tool: auditable_run_create
info
Tool: auditable_run_download
info
Tool: auditable_run_repair_claim
info
Tool: auditable_run_repair_section
info
Tool: model_inspect
info
Tool: settings_mutate
info
Tool: ui_test_control
info
Tool: computer_use_control
info
Required env vars (73)
info
Sandbox failed to start for output poisoning scan
medium
Permission: network access detected
low
Permission: filesystem access detected
high
Permission: shell access detected
medium
Permission: database access detected
low
Permission: env_vars access detected
info
SBOM generated: 1621 components
high
Hardcoded Password found in xiaojiou176-open-notebooklab-0887cbf/apps/web/playwright.config.ts
high
Hardcoded Password found in xiaojiou176-open-notebooklab-0887cbf/apps/web/src/lib/locales/ja-JP/sections/core.ts
high
Hardcoded Password found in xiaojiou176-open-notebooklab-0887cbf/apps/web/src/lib/locales/ru-RU/sections/core.ts
high
Hardcoded Password found in xiaojiou176-open-notebooklab-0887cbf/apps/web/src/lib/locales/pt-BR/sections/core.ts
high
Hardcoded Password found in xiaojiou176-open-notebooklab-0887cbf/apps/web/src/lib/locales/fr-FR/sections/core.ts
high
Hardcoded Password found in xiaojiou176-open-notebooklab-0887cbf/apps/web/src/lib/locales/en-US/sections/core.ts
high
Hardcoded Password found in xiaojiou176-open-notebooklab-0887cbf/apps/web/src/lib/locales/it-IT/sections/core.ts
medium
No build provenance detected (SLSA L0)