mcp-memo-server
mcp-memo-server
Ein einfacher MCP-Server zur Notizverwaltung, der von Claude Code aus verwendet werden kann. Es ist eine Beispielimplementierung für Lernzwecke. Er unterstützt eine einfache Benutzerauthentifizierung (Benutzerregistrierung / Login / Sitzungstoken) und Notizen werden pro Benutzer getrennt.
Bereitgestellte Werkzeuge
Werkzeugname | Beschreibung | Argumente |
| Registriert einen neuen Benutzer |
|
| Meldet sich an und erhält ein Sitzungstoken |
|
| Fügt eine Notiz hinzu (Login erforderlich) |
|
| Ruft die Liste der eigenen registrierten Notizen ab (Login erforderlich) |
|
| Löscht die eigene Notiz mit der angegebenen ID (Login erforderlich) |
|
Notizen werden in memos.json (im Projektverzeichnis) und Benutzerinformationen in users.json gespeichert. Beide sind in .gitignore enthalten.
Funktionsweise der Authentifizierung (Lernpunkte)
Passwörter werden mit dem Node.js-Standard
crypto.scryptmit Salt gehasht und inusers.jsongespeichert (keine Klartextspeicherung).Nach erfolgreichem
loginwird ein zufälliges Sitzungstoken ausgegeben. Das Token wird nur im Speicher des Serverprozesses verwaltet, hat eine Gültigkeit von 2 Stunden und verfällt bei einem Neustart des Servers.add_memo/list_memos/delete_memovalidieren dastokenund geben einen Fehler zurück, wenn keine gültige Sitzung vorhanden ist.list_memos/delete_memofiltern die Notizen nach der mit dem Token verknüpftenuserId, sodass die Notizen anderer Benutzer nicht sichtbar sind.
Hinweis: Dies ist eine Authentifizierungsimplementierung für Lernzwecke über den stdio-Transport (lokaler Prozess). Bei stdio hat man bereits Ausführungsrechte für den Prozess, sobald man den Server starten kann. Daher geht es hier weniger um eine „echte Sicherheitsgrenze“, sondern darum, „mehrere Benutzer zu unterscheiden“ und „die Implementierung eines Authentifizierungsablaufs zu lernen“.
Related MCP server: mcp-memos
Einrichtung
npm install
npm run buildRegistrierung bei Claude Code
Nach dem Build registrieren Sie mit dem absoluten Pfad des Projekts.
claude mcp add --transport stdio memo-server -- node /絶対パス/mcp-memo-server/build/index.jsÜberprüfen, ob die Registrierung erfolgreich war:
claude mcp listWenn Sie in einer Claude-Code-Sitzung /mcp eingeben, können Sie überprüfen, dass memo-server als connected angezeigt wird.
Beispiel für die Verwendung (Konversation in Claude Code)
> ユーザー名 taro、パスワード pass1234 で登録して
> taro でログインして
> 「Qiitaのネタを考える」というメモを追加して
> 今登録されているメモを一覧で見せて
> ID 1 のメモを削除してDas beim Login ausgegebene Token wird von Claude im Gespräch gespeichert und automatisch für spätere Aufrufe von add_memo / list_memos / delete_memo wiederverwendet.
Manuelle Funktionsprüfung
test-client.mjs ist ein einfaches Skript, das JSON-RPC-Nachrichten (initialize → tools/list → tools/call) direkt an den als untergeordneten Prozess gestarteten Server sendet und die Antworten überprüft.
node test-client.mjsZum Entfernen
claude mcp remove memo-serverAvailable Tools
5 toolsadd_memoメモを追加A
新しいメモをテキストで追加します。ログインが必要です。
| Name | Required | Description | Default |
|---|---|---|---|
| text | Yes | 追加するメモの内容 | |
| token | Yes | login で取得したセッショントークン |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
No annotations are provided, so the description must disclose behavior. It only reveals that login is required and that a new memo is added; it does not mention persistence, return values, side effects, duplication behavior, or errors. This is thin for a mutation tool.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is a single concise sentence that conveys both the purpose and the authentication prerequisite. There is no filler or redundant content.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
For a simple two-parameter creation tool with fully documented schema, the description covers the essential purpose and the auth requirement. The lack of output schema and response details is not critical here, though mentioning the result of the operation would make it fully complete.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema coverage is 100% and both parameters already have clear descriptions. The description's mention of 'text' adds little beyond the string type, and 'login required' is already implied by the token parameter. It meets the baseline but adds no real parameter-level insight.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly states the action 'add' and the target resource 'new memo', plus the format 'as text'. It is easily distinguished from sibling tools like list_memos, delete_memo, register, and login.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description explicitly notes that login is required, giving a clear prerequisite for use. It does not name alternatives or exclusions, but the add-vs-list/delete distinction is obvious enough from the sibling names.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
delete_memoメモを削除A
指定したIDの自分のメモを削除します。ログインが必要です。
| Name | Required | Description | Default |
|---|---|---|---|
| id | Yes | 削除するメモのID | |
| token | Yes | login で取得したセッショントークン |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
No annotations are provided, so the description carries the full burden. It discloses two important traits: login necessity and that only 'own' memos can be deleted. However, it does not disclose error behavior (e.g., if the memo ID does not exist or belongs to another user) or whether deletion is irreversible, which would be valuable for a destructive action.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
Two short, front-loaded sentences. Each sentence provides essential information (action and scope, then prerequisite) without wasted words.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
For a simple delete operation with two required parameters and no output schema, the description covers the core aspects: action, target, scope, and prerequisite. It lacks explicit mention of success/failure responses or edge cases, but given the tool's simplicity and absence of annotations, it is largely complete.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema description coverage is 100%, so the baseline is 3. The description adds meaning by clarifying the ID refers to 'your own' memo, which is not explicitly stated in the schema (schema only says '削除するメモのID'). It also reiterates the login requirement, tying the token parameter to a prerequisite. This adds value beyond the schema.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly states '指定したIDの自分のメモを削除します' (deletes your own memo with the specified ID), using a specific verb (削除) and resource (メモ), and explicitly scopes to '自分の' (own). This distinguishes it from siblings like add_memo (create) and list_memos (read), offering no ambiguity.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description indicates this is for deleting a memo and notes that login is required, which is a clear prerequisite. It does not explicitly contrast with alternatives or mention when not to use it, but since no other delete tool exists among siblings, the context is sufficient for selection.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
list_memosメモ一覧を取得A
自分が登録したメモを一覧表示します。ログインが必要です。
| Name | Required | Description | Default |
|---|---|---|---|
| token | Yes | login で取得したセッショントークン |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
No annotations exist, so the description carries the full burden. It discloses the login prerequisite, which is useful context, but does not state that the operation is read-only, what happens on invalid token, or any error behavior. Minimal for a simple tool; adds some value beyond the schema but leaves gaps.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
Single sentence, front-loaded with the primary action and prerequisite. No fluff or redundancy; every word earns its place.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
Tool is simple (one param, no output schema, no annotations) and the description covers the essential purpose and login requirement. However, it does not mention the return format, potential errors (e.g., invalid token), or explicitly label the operation as non-mutating, leaving some contextual gaps for an agent.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema documents the token parameter with a clear description ('login で取得したセッショントークン'), achieving 100% coverage. The tool description adds no additional parameter meaning, so baseline of 3 is appropriate.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
Clear verb+resource: '一覧表示' (list display) of '自分が登録したメモ' (user's own memos). Distinct from siblings like add_memo, delete_memo, login, register, so it unambiguously identifies the operation.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
Implies usage after login ('ログインが必要です'), but does not explicitly mention when to use this tool vs alternatives (e.g., add_memo, delete_memo). No exclusions or alternative references are provided, making the guidance merely contextual rather than explicit.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
loginログインA
ユーザー名とパスワードでログインし、セッショントークンを取得します。
| Name | Required | Description | Default |
|---|---|---|---|
| password | Yes | パスワード | |
| username | Yes | ユーザー名 |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
With no annotations, the description carries the behavioral burden. It discloses the core outcome (session token acquisition), but does not mention side effects, token expiration, security considerations, or what happens on invalid credentials.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is a single, clear sentence that is front-loaded with the action and outcome. Every word contributes meaning, with no redundancy or filler.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
For a simple two-parameter login tool with no output schema, the description sufficiently covers purpose and return value (session token). It lacks details like token format or usage in subsequent calls, but these are not essential for basic invocation.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema description coverage is 100%, and the parameter descriptions already name username and password. The tool description adds minimal semantic value beyond restating the authentication context, so baseline 3 is appropriate.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly states the action: logging in with username and password and obtaining a session token. This distinguishes it from sibling tools like register and memo management tools by naming both the authentication mechanism and the specific output.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
No explicit guidance is given about when to use this tool versus alternatives. It does not mention that login should precede authenticated memo operations, nor does it point to register as the alternative for new users.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
registerユーザー登録A
ユーザー名とパスワードで新しいアカウントを作成します。
| Name | Required | Description | Default |
|---|---|---|---|
| password | Yes | パスワード(4文字以上) | |
| username | Yes | ユーザー名 |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
No annotations are provided, so the description carries the full burden of behavioral disclosure. It only states that an account is created, but does not mention duplicate username handling, whether the user is auto-logged-in, password storage, or any side effects. This is a significant gap for a mutation tool.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is a single concise, front-loaded sentence with no filler. Every word contributes to stating the action and object.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
The tool is simple and parameters are fully documented, but there is no output schema or annotations. The description omits important operational context such as duplicate username errors, return values, or whether registration creates a session. Adequate but with clear gaps.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema description coverage is 100%, so the baseline is 3. The description mentions username and password but adds no additional meaning beyond the schema, such as uniqueness constraints or validation behavior.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
Description uses a specific verb ('作成します') with a clear resource ('新しいアカウント') and method ('ユーザー名とパスワードで'). It clearly distinguishes itself from sibling tools like login and memo operations as account creation.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
Usage is implied by '新しいアカウントを作成' and the presence of a sibling 'login' tool, but there is no explicit guidance on when to use this versus alternatives, nor any exclusions such as 'do not use for existing users'.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
Tool Schema Changelog
Recent tool additions, removals, and schema changes observed during successful MCP inspections.
5 tool updates
v1.0.0- First observed
add_memo - First observed
delete_memo - First observed
list_memos - First observed
login - First observed
register
TDQS
Scored across 5 tools
Each tool has a clearly distinct purpose: register/login handle authentication, while add_memo, list_memos, and delete_memo cover distinct memo operations. There is no meaningful overlap or ambiguity between any two tools.
Most tools follow a clear imperative verb_noun pattern like add_memo, list_memos, and delete_memo. register and login are standard auth verbs without a noun object, and list_memos uses a plural while delete_memo is singular, but the overall naming is predictable and readable.
Five tools is well-scoped for a simple memo server requiring authentication and basic memo management. Every tool earns its place, and there are no redundant or unnecessary additions.
The set covers registration, login, creating memos, listing memos, and deleting memos, but lacks an update/edit memo operation and an explicit logout tool. Editing an existing memo requires deleting and recreating it, which is a notable gap for a memo service.
Maintenance
Related MCP Connectors
An authenticated remote MCP server for user-owned devices and one-shot capability invocation.
Hosted memory for AI agents over MCP. One memory shared by all your agents.
Related MCP Servers
- AlicenseNot gradedqualityDmaintenanceEnables AI assistants to create, read, update, delete, and list memos via the MCP protocol.3MIT
- AlicenseNot gradedqualityFmaintenanceEnables creating memos and attaching files to a Memos instance via MCP tools.MIT
- AlicenseAqualityDmaintenanceMCP server for creating, listing, updating, deleting memos, and managing attachments via the Memos API.1213 npmMIT
- FlicenseNot gradedqualityDmaintenanceMCP server providing CRUD operations for Memos, enabling users to create, list, get, update, and delete memos via natural language.-