notes_read
Retrieve note content by title to access stored information from the Vulnerable Notes MCP Server for security testing and developer training purposes.
Instructions
Read a note by its title
Input Schema
| Name | Required | Description | Default |
|---|---|---|---|
| title | Yes | Title of the note to read |
Implementation Reference
- src/tools/notes.ts:121-134 (handler)The handler logic for "notes_read" which reads the file content based on the provided title.
case "notes_read": { const { title } = args as { title: string }; const filePath = getNotePath(title); if (!fs.existsSync(filePath)) { // VULNERABILITY: SAFE-T1801 - Leaks full file path throw new Error(`Note not found at path: ${path.resolve(filePath)}`); } const content = fs.readFileSync(filePath, "utf-8"); return { content: [{ type: "text", text: content }], }; } - src/tools/notes.ts:30-40 (schema)The tool registration schema for "notes_read" defining its input parameters.
{ name: "notes_read", description: "Read a note by its title", inputSchema: { type: "object" as const, properties: { title: { type: "string", description: "Title of the note to read" }, }, required: ["title"], }, },