mcp-memo-server

A simple memo management MCP server that can be used from Claude Code. This is a sample implementation for learning purposes. It supports simple user authentication (user registration / login / session tokens), and memos are separated per user.

Provided tools

Memos are saved to memos.json (in the project root), and user information is saved to users.json. Both are already in .gitignore.

Authentication mechanism (learning points)

• Passwords are hashed with a salt using Node.js's built-in crypto.scrypt and stored in users.json (never stored in plain text).

• A successful login issues a random session token. Tokens are managed only in the server process's memory, with a validity period of 2 hours, and they expire when the server restarts.

• add_memo / list_memos / delete_memo validate the token and return an error if there is no valid session.

• list_memos / delete_memo filter memos by the userId associated with the token, so other users' memos cannot be seen.

Note: This is a learning-oriented authentication implementation for stdio transport (local process). With stdio, anyone who can start the server already has execution permissions on the process, so this authentication is less about being a "real security boundary" and more about "separating multiple users" and "learning how to implement an authentication flow."

Related MCP server: memos-mcp-server

Setup

npm install
npm run build

Registering with Claude Code

After building, register it using the project's absolute path.

claude mcp add --transport stdio memo-server -- node /絶対パス/mcp-memo-server/build/index.js

To verify the registration:

claude mcp list

In a Claude Code session, typing /mcp lets you confirm that memo-server shows as connected.

Usage example (conversation within Claude Code)

> ユーザー名 taro、パスワード pass1234 で登録して
> taro でログインして
> 「Qiitaのネタを考える」というメモを追加して
> 今登録されているメモを一覧で見せて
> ID 1 のメモを削除して

Claude remembers the token issued at login within the conversation and automatically reuses it for subsequent add_memo / list_memos / delete_memo calls.

Manual verification

test-client.mjs is a simple script that sends JSON-RPC messages (initialize → tools/list → tools/call) directly to a server launched as a child process and checks the responses.

node test-client.mjs

To remove

claude mcp remove memo-server