mcp-memo-server
Click on "Deploy Server".
Wait a few minutes for the server to deploy. Once ready, it will show a "Started" state.
In the chat, type
@followed by the MCP server name and your instructions, e.g., "@mcp-memo-serverユーザーtaroで登録して「プレゼン資料の作成」というメモを追加して"
That's it! The server will respond to your query, and you can continue using it as needed.
Here is a step-by-step guide with screenshots.
mcp-memo-server
A simple memo management MCP server that can be used from Claude Code. This is a sample implementation for learning purposes. It supports simple user authentication (user registration / login / session tokens), and memos are separated per user.
Provided tools
Tool name | Description | Arguments |
| Register a new user |
|
| Log in and obtain a session token |
|
| Add a memo (login required) |
|
| Get a list of your registered memos (login required) |
|
| Delete one of your memos by ID (login required) |
|
Memos are saved to memos.json (in the project root), and user information is saved to users.json. Both are already in .gitignore.
Authentication mechanism (learning points)
Passwords are hashed with a salt using Node.js's built-in
crypto.scryptand stored inusers.json(never stored in plain text).A successful
loginissues a random session token. Tokens are managed only in the server process's memory, with a validity period of 2 hours, and they expire when the server restarts.add_memo/list_memos/delete_memovalidate thetokenand return an error if there is no valid session.list_memos/delete_memofilter memos by theuserIdassociated with the token, so other users' memos cannot be seen.
Note: This is a learning-oriented authentication implementation for stdio transport (local process). With stdio, anyone who can start the server already has execution permissions on the process, so this authentication is less about being a "real security boundary" and more about "separating multiple users" and "learning how to implement an authentication flow."
Related MCP server: mcp-memos
Setup
npm install
npm run buildRegistering with Claude Code
After building, register it using the project's absolute path.
claude mcp add --transport stdio memo-server -- node /絶対パス/mcp-memo-server/build/index.jsTo verify the registration:
claude mcp listIn a Claude Code session, typing /mcp lets you confirm that memo-server shows as connected.
Usage example (conversation within Claude Code)
> ユーザー名 taro、パスワード pass1234 で登録して
> taro でログインして
> 「Qiitaのネタを考える」というメモを追加して
> 今登録されているメモを一覧で見せて
> ID 1 のメモを削除してClaude remembers the token issued at login within the conversation and automatically reuses it for subsequent add_memo / list_memos / delete_memo calls.
Manual verification
test-client.mjs is a simple script that sends JSON-RPC messages
(initialize → tools/list → tools/call) directly to a server launched as a child process and checks the responses.
node test-client.mjsTo remove
claude mcp remove memo-serverAvailable Tools
5 toolsadd_memoメモを追加A
新しいメモをテキストで追加します。ログインが必要です。
| Name | Required | Description | Default |
|---|---|---|---|
| text | Yes | 追加するメモの内容 | |
| token | Yes | login で取得したセッショントークン |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
No annotations are provided, so the description must disclose behavior. It only reveals that login is required and that a new memo is added; it does not mention persistence, return values, side effects, duplication behavior, or errors. This is thin for a mutation tool.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is a single concise sentence that conveys both the purpose and the authentication prerequisite. There is no filler or redundant content.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
For a simple two-parameter creation tool with fully documented schema, the description covers the essential purpose and the auth requirement. The lack of output schema and response details is not critical here, though mentioning the result of the operation would make it fully complete.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema coverage is 100% and both parameters already have clear descriptions. The description's mention of 'text' adds little beyond the string type, and 'login required' is already implied by the token parameter. It meets the baseline but adds no real parameter-level insight.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly states the action 'add' and the target resource 'new memo', plus the format 'as text'. It is easily distinguished from sibling tools like list_memos, delete_memo, register, and login.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description explicitly notes that login is required, giving a clear prerequisite for use. It does not name alternatives or exclusions, but the add-vs-list/delete distinction is obvious enough from the sibling names.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
delete_memoメモを削除A
指定したIDの自分のメモを削除します。ログインが必要です。
| Name | Required | Description | Default |
|---|---|---|---|
| id | Yes | 削除するメモのID | |
| token | Yes | login で取得したセッショントークン |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
No annotations are provided, so the description carries the full burden. It discloses two important traits: login necessity and that only 'own' memos can be deleted. However, it does not disclose error behavior (e.g., if the memo ID does not exist or belongs to another user) or whether deletion is irreversible, which would be valuable for a destructive action.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
Two short, front-loaded sentences. Each sentence provides essential information (action and scope, then prerequisite) without wasted words.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
For a simple delete operation with two required parameters and no output schema, the description covers the core aspects: action, target, scope, and prerequisite. It lacks explicit mention of success/failure responses or edge cases, but given the tool's simplicity and absence of annotations, it is largely complete.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema description coverage is 100%, so the baseline is 3. The description adds meaning by clarifying the ID refers to 'your own' memo, which is not explicitly stated in the schema (schema only says '削除するメモのID'). It also reiterates the login requirement, tying the token parameter to a prerequisite. This adds value beyond the schema.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly states '指定したIDの自分のメモを削除します' (deletes your own memo with the specified ID), using a specific verb (削除) and resource (メモ), and explicitly scopes to '自分の' (own). This distinguishes it from siblings like add_memo (create) and list_memos (read), offering no ambiguity.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description indicates this is for deleting a memo and notes that login is required, which is a clear prerequisite. It does not explicitly contrast with alternatives or mention when not to use it, but since no other delete tool exists among siblings, the context is sufficient for selection.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
list_memosメモ一覧を取得A
自分が登録したメモを一覧表示します。ログインが必要です。
| Name | Required | Description | Default |
|---|---|---|---|
| token | Yes | login で取得したセッショントークン |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
No annotations exist, so the description carries the full burden. It discloses the login prerequisite, which is useful context, but does not state that the operation is read-only, what happens on invalid token, or any error behavior. Minimal for a simple tool; adds some value beyond the schema but leaves gaps.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
Single sentence, front-loaded with the primary action and prerequisite. No fluff or redundancy; every word earns its place.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
Tool is simple (one param, no output schema, no annotations) and the description covers the essential purpose and login requirement. However, it does not mention the return format, potential errors (e.g., invalid token), or explicitly label the operation as non-mutating, leaving some contextual gaps for an agent.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema documents the token parameter with a clear description ('login で取得したセッショントークン'), achieving 100% coverage. The tool description adds no additional parameter meaning, so baseline of 3 is appropriate.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
Clear verb+resource: '一覧表示' (list display) of '自分が登録したメモ' (user's own memos). Distinct from siblings like add_memo, delete_memo, login, register, so it unambiguously identifies the operation.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
Implies usage after login ('ログインが必要です'), but does not explicitly mention when to use this tool vs alternatives (e.g., add_memo, delete_memo). No exclusions or alternative references are provided, making the guidance merely contextual rather than explicit.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
loginログインA
ユーザー名とパスワードでログインし、セッショントークンを取得します。
| Name | Required | Description | Default |
|---|---|---|---|
| password | Yes | パスワード | |
| username | Yes | ユーザー名 |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
With no annotations, the description carries the behavioral burden. It discloses the core outcome (session token acquisition), but does not mention side effects, token expiration, security considerations, or what happens on invalid credentials.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is a single, clear sentence that is front-loaded with the action and outcome. Every word contributes meaning, with no redundancy or filler.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
For a simple two-parameter login tool with no output schema, the description sufficiently covers purpose and return value (session token). It lacks details like token format or usage in subsequent calls, but these are not essential for basic invocation.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema description coverage is 100%, and the parameter descriptions already name username and password. The tool description adds minimal semantic value beyond restating the authentication context, so baseline 3 is appropriate.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly states the action: logging in with username and password and obtaining a session token. This distinguishes it from sibling tools like register and memo management tools by naming both the authentication mechanism and the specific output.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
No explicit guidance is given about when to use this tool versus alternatives. It does not mention that login should precede authenticated memo operations, nor does it point to register as the alternative for new users.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
registerユーザー登録A
ユーザー名とパスワードで新しいアカウントを作成します。
| Name | Required | Description | Default |
|---|---|---|---|
| password | Yes | パスワード(4文字以上) | |
| username | Yes | ユーザー名 |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
No annotations are provided, so the description carries the full burden of behavioral disclosure. It only states that an account is created, but does not mention duplicate username handling, whether the user is auto-logged-in, password storage, or any side effects. This is a significant gap for a mutation tool.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is a single concise, front-loaded sentence with no filler. Every word contributes to stating the action and object.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
The tool is simple and parameters are fully documented, but there is no output schema or annotations. The description omits important operational context such as duplicate username errors, return values, or whether registration creates a session. Adequate but with clear gaps.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema description coverage is 100%, so the baseline is 3. The description mentions username and password but adds no additional meaning beyond the schema, such as uniqueness constraints or validation behavior.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
Description uses a specific verb ('作成します') with a clear resource ('新しいアカウント') and method ('ユーザー名とパスワードで'). It clearly distinguishes itself from sibling tools like login and memo operations as account creation.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
Usage is implied by '新しいアカウントを作成' and the presence of a sibling 'login' tool, but there is no explicit guidance on when to use this versus alternatives, nor any exclusions such as 'do not use for existing users'.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
Tool Schema Changelog
Recent tool additions, removals, and schema changes observed during successful MCP inspections.
5 tool updates
v1.0.0- First observed
add_memo - First observed
delete_memo - First observed
list_memos - First observed
login - First observed
register
TDQS
Scored across 5 tools
Each tool has a clearly distinct purpose: register/login handle authentication, while add_memo, list_memos, and delete_memo cover distinct memo operations. There is no meaningful overlap or ambiguity between any two tools.
Most tools follow a clear imperative verb_noun pattern like add_memo, list_memos, and delete_memo. register and login are standard auth verbs without a noun object, and list_memos uses a plural while delete_memo is singular, but the overall naming is predictable and readable.
Five tools is well-scoped for a simple memo server requiring authentication and basic memo management. Every tool earns its place, and there are no redundant or unnecessary additions.
The set covers registration, login, creating memos, listing memos, and deleting memos, but lacks an update/edit memo operation and an explicit logout tool. Editing an existing memo requires deleting and recreating it, which is a notable gap for a memo service.
Maintenance
Related MCP Connectors
An authenticated remote MCP server for user-owned devices and one-shot capability invocation.
Hosted MCP server for AI agent identity, permissions, verification, and reusable proof.
Related MCP Servers
- AlicenseNot gradedqualityDmaintenanceEnables AI assistants to create, read, update, delete, and list memos via the MCP protocol.3MIT
- AlicenseNot gradedqualityFmaintenanceEnables creating memos and attaching files to a Memos instance via MCP tools.MIT
- AlicenseAqualityDmaintenanceMCP server for creating, listing, updating, deleting memos, and managing attachments via the Memos API.1218MIT
- FlicenseNot gradedqualityCmaintenanceMCP server providing CRUD operations for Memos, enabling users to create, list, get, update, and delete memos via natural language.-