DevNotes MCP
Click on "Install Server".
Wait a few minutes for the server to deploy. Once ready, it will show a "Started" state.
In the chat, type
@followed by the MCP server name and your instructions, e.g., "@DevNotes MCPsummarize my latest note"
That's it! The server will respond to your query, and you can continue using it as needed.
Here is a step-by-step guide with screenshots.
ποΈ DevNotes MCP
A notes server built to exercise every advanced feature of the Model Context Protocol.
Follow-up project for Anthropic Academy's Model Context Protocol: Advanced Topics course.
π What this is
DevNotes is a small, in-memory notes server β think a minimal Notion, exposed over MCP instead of a web UI. It's deliberately not trying to be a real product; every tool exists to be a clean, runnable example of one specific advanced MCP feature, and the notes themselves are just the excuse to have something worth calling a tool on.
Course topic | Where it lives |
Sampling β server asks the client's LLM to do the work | |
Elicitation β server pauses to ask the user something |
|
Roots β client grants the server a specific local folder | |
Progress & logging notifications | also |
Pagination |
|
Structured output | every tool returns |
stdio vs. Streamable HTTP transports | |
Resumable transport |
|
Stateless transport |
|
OAuth 2.1 + PKCE authorization |
|
Related MCP server: my-server MCP Server
ποΈ Architecture
flowchart LR
subgraph client["interactiveClient.ts"]
cap["declares: sampling, roots, elicitation"]
end
subgraph transport["pick one"]
stdio["stdio.ts"]
http["http.ts (Streamable HTTP)"]
end
subgraph server["createServer.ts"]
t1["create-note<br/><i>elicitation</i>"]
t2["search-notes<br/><i>pagination</i>"]
t3["summarize-note<br/><i>sampling</i>"]
t4["index-roots<br/><i>roots + notifications</i>"]
store[("NotesStore<br/>(in-memory)")]
end
auth["auth.ts<br/>OAuth 2.1 + PKCE"]
evt["eventStore.ts<br/>resumability"]
client <-->|JSON-RPC over stdio or HTTP| transport
transport --> server
t1 & t2 & t3 & t4 --> store
http -. "--oauth protects" .-> auth
http -. "stateful mode uses" .-> evtSampling is the one genuinely bidirectional flow in the demo β the server calls back into whichever process holds the model credentials β so it's worth seeing on its own:
sequenceDiagram
participant You
participant Client as interactiveClient.ts
participant Server as DevNotes server
You->>Client: summarize-note
Client->>Server: tools/call
Server->>Client: sampling/createMessage
alt ANTHROPIC_API_KEY set
Client->>Anthropic API: messages.create()
Anthropic API-->>Client: completion
else no key configured
Client->>Client: return a mock completion
end
Client-->>Server: CreateMessageResult
Server-->>Client: tool result (the summary)
Client-->>You: print itThe server never holds a model API key itself β that's the point of sampling. Only the client in this diagram needs one, and only optionally (see Quick start).
π Quick start
npm install
cp .env.example .env # optional β see belowEverything runs with zero configuration. .env only matters if you want real Claude
completions for summarize-note instead of a mocked one β set ANTHROPIC_API_KEY there.
Local (stdio) β what Claude Desktop and the MCP Inspector use:
npm run client # spawns the server itself, opens an interactive prompt
# or, to poke at it directly:
npm run inspectorRemote (Streamable HTTP):
npm run start:http # stateful, resumable β default
npm run start:http:stateless # no session id, horizontally scalable
npm run start:http:oauth # requires a bearer token (see below)
npm run start:http:oauth-strict # + RFC 8707 resource-indicator enforcement
npm run client:http # talk to whichever one is running on :3000Try roots by pointing the client at the bundled example notes:
npm run client -- --root ./examples
# then call index-roots from the promptTry the full OAuth flow: run npm run start:http:oauth, then open the MCP Inspector
(npx @modelcontextprotocol/inspector) and connect to http://127.0.0.1:3000/mcp β its
built-in "Connect" flow walks through dynamic client registration, the authorization
redirect, and the PKCE token exchange for you. auth.ts has a header-comment listing
exactly what it does and doesn't do β it's a real OAuth 2.1 authorization server, but an
intentionally minimal one (in-memory storage, no real login screen); the same file explains
what a production deployment needs to add back.
π Project structure
src/
server/
createServer.ts factory: builds one McpServer + registers all four tools
store.ts the in-memory NotesStore (create/search/importFromRoot)
stdio.ts entrypoint: stdio transport
http.ts entrypoint: Streamable HTTP, stateful/stateless/oauth
auth.ts demo OAuth 2.1 + PKCE authorization server
eventStore.ts in-memory EventStore for resumable HTTP
tools/
createNote.ts elicitation
searchNotes.ts pagination
summarizeNote.ts sampling
indexRoots.ts roots + progress/logging notifications
client/
interactiveClient.ts demo client: implements the handlers a server can call back into
examples/ sample notes for the index-roots demo
assets/ the certificate this repo is a follow-up toπ Notes on the security-relevant bits
Roots are enforced entirely by the client β
store.importFromRootonly ever reads thefile://URI it's handed, one directory level deep, capped at 200 files / 200 KB each. The server never picks its own path.createMcpExpressAppenables DNS-rebinding protection automatically for127.0.0.1β seehttp.ts.auth.tsis explicitly a demo authorization server (see the header comment in that file for the exact list of what it skips). In a real deployment you'd almost always pointverifyAccessTokenat an existing IdP rather than writing one.Every server-initiated request (
createMessage,listRoots,elicitInput) passesrelatedRequestId, so responses route to the right session under concurrent HTTP load instead of the first one that happens to be listening.
πΊοΈ Learning path
Part of a series built while working through Anthropic Academy:
claude-api-starterβ Building with the Claude APImcp-client-starterβ Introduction to Model Context Protocolmcp-advanced-starterβ MCP: Advanced Topics (this repo)Claude Code in Action β next up
License
MIT β see LICENSE.
This server cannot be installed
Maintenance
Resources
Unclaimed servers have limited discoverability.
Looking for Admin?
If you are the server author, to access and configure the admin panel.
Latest Blog Posts
- Your AI Chatbot Just Exposed Your CEO's Salary to an InternBy Om-Shree-0709 on .Agent IdentityMCP SecurityOAuth Delegation
- Why MCP Servers Need Execution Sandboxing (And Why Your Current Stack Isn't Enough)By Om-Shree-0709 on .Agentic AiPrompt InjectionWebAssembly
MCP directory API
We provide all the information about MCP servers via our MCP API.
curl -X GET 'https://glama.ai/api/mcp/v1/servers/Lazaro549/mcp-advanced-starter'
If you have feedback or need assistance with the MCP directory API, please join our Discord server