mcp-memo-server
mcp-memo-server
Es un sencillo servidor MCP de gestión de notas que se puede utilizar desde Claude Code. Es una implementación de ejemplo con fines didácticos. Admite una autenticación de usuario simplificada (registro de usuario / inicio de sesión / token de sesión), y las notas quedan separadas por usuario.
Herramientas disponibles
Herramienta | Descripción | Argumentos |
| Registra un nuevo usuario |
|
| Inicia sesión y obtiene un token de sesión |
|
| Agrega una nota (requiere iniciar sesión) |
|
| Obtiene la lista de tus notas registradas (requiere iniciar sesión) |
|
| Elimina tu nota con el ID especificado (requiere iniciar sesión) |
|
Las notas se guardan en memos.json (en la raíz del proyecto) y la información de los usuarios en users.json. Ambos ya están en .gitignore.
Cómo funciona la autenticación (punto de aprendizaje)
Las contraseñas se guardan con hash y sal mediante
crypto.scrypt, el estándar de Node.js, enusers.json(no se almacenan en texto plano).Un inicio de sesión correcto en
loginemite un token de sesión aleatorio. El token se gestiona únicamente en la memoria del proceso del servidor, caduca a las 2 horas y se invalida al reiniciar el servidor.add_memo/list_memos/delete_memovalidan eltokeny devuelven un error si no hay una sesión válida.list_memos/delete_memofiltran las notas por eluserIdvinculado al token, por lo que las notas de otras personas no son visibles.
Nota: se trata de una implementación de autenticación con fines didácticos sobre transporte stdio (proceso local). En el caso de stdio, si puedes arrancar el servidor ya tienes permisos de ejecución sobre el proceso, por lo que esta autenticación no es una «frontera de seguridad real», sino que busca «diferenciar varios usuarios» y «aprender a implementar un flujo de autenticación».
Related MCP server: mcp-memos
Configuración
npm install
npm run buildRegistro en Claude Code
Después de compilar, regístralo usando la ruta absoluta del proyecto.
claude mcp add --transport stdio memo-server -- node /絶対パス/mcp-memo-server/build/index.jsComprueba que se ha registrado:
claude mcp listDentro de una sesión de Claude Code, escribe /mcp y podrás ver que memo-server aparece como connected.
Ejemplo de uso (conversación dentro de Claude Code)
> ユーザー名 taro、パスワード pass1234 で登録して
> taro でログインして
> 「Qiitaのネタを考える」というメモを追加して
> 今登録されているメモを一覧で見せて
> ID 1 のメモを削除してEl token emitido al iniciar sesión es recordado por Claude durante la conversación y se reutiliza automáticamente en las llamadas posteriores a add_memo / list_memos / delete_memo.
Verificación manual del funcionamiento
test-client.mjs es un script sencillo que envía mensajes JSON-RPC directamente al servidor lanzado como subproceso
(initialize → tools/list → tools/call) y comprueba las respuestas.
node test-client.mjsPara eliminarlo
claude mcp remove memo-serverAvailable Tools
5 toolsadd_memoメモを追加A
新しいメモをテキストで追加します。ログインが必要です。
| Name | Required | Description | Default |
|---|---|---|---|
| text | Yes | 追加するメモの内容 | |
| token | Yes | login で取得したセッショントークン |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
No annotations are provided, so the description must disclose behavior. It only reveals that login is required and that a new memo is added; it does not mention persistence, return values, side effects, duplication behavior, or errors. This is thin for a mutation tool.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is a single concise sentence that conveys both the purpose and the authentication prerequisite. There is no filler or redundant content.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
For a simple two-parameter creation tool with fully documented schema, the description covers the essential purpose and the auth requirement. The lack of output schema and response details is not critical here, though mentioning the result of the operation would make it fully complete.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema coverage is 100% and both parameters already have clear descriptions. The description's mention of 'text' adds little beyond the string type, and 'login required' is already implied by the token parameter. It meets the baseline but adds no real parameter-level insight.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly states the action 'add' and the target resource 'new memo', plus the format 'as text'. It is easily distinguished from sibling tools like list_memos, delete_memo, register, and login.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description explicitly notes that login is required, giving a clear prerequisite for use. It does not name alternatives or exclusions, but the add-vs-list/delete distinction is obvious enough from the sibling names.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
delete_memoメモを削除A
指定したIDの自分のメモを削除します。ログインが必要です。
| Name | Required | Description | Default |
|---|---|---|---|
| id | Yes | 削除するメモのID | |
| token | Yes | login で取得したセッショントークン |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
No annotations are provided, so the description carries the full burden. It discloses two important traits: login necessity and that only 'own' memos can be deleted. However, it does not disclose error behavior (e.g., if the memo ID does not exist or belongs to another user) or whether deletion is irreversible, which would be valuable for a destructive action.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
Two short, front-loaded sentences. Each sentence provides essential information (action and scope, then prerequisite) without wasted words.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
For a simple delete operation with two required parameters and no output schema, the description covers the core aspects: action, target, scope, and prerequisite. It lacks explicit mention of success/failure responses or edge cases, but given the tool's simplicity and absence of annotations, it is largely complete.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema description coverage is 100%, so the baseline is 3. The description adds meaning by clarifying the ID refers to 'your own' memo, which is not explicitly stated in the schema (schema only says '削除するメモのID'). It also reiterates the login requirement, tying the token parameter to a prerequisite. This adds value beyond the schema.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly states '指定したIDの自分のメモを削除します' (deletes your own memo with the specified ID), using a specific verb (削除) and resource (メモ), and explicitly scopes to '自分の' (own). This distinguishes it from siblings like add_memo (create) and list_memos (read), offering no ambiguity.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description indicates this is for deleting a memo and notes that login is required, which is a clear prerequisite. It does not explicitly contrast with alternatives or mention when not to use it, but since no other delete tool exists among siblings, the context is sufficient for selection.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
list_memosメモ一覧を取得A
自分が登録したメモを一覧表示します。ログインが必要です。
| Name | Required | Description | Default |
|---|---|---|---|
| token | Yes | login で取得したセッショントークン |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
No annotations exist, so the description carries the full burden. It discloses the login prerequisite, which is useful context, but does not state that the operation is read-only, what happens on invalid token, or any error behavior. Minimal for a simple tool; adds some value beyond the schema but leaves gaps.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
Single sentence, front-loaded with the primary action and prerequisite. No fluff or redundancy; every word earns its place.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
Tool is simple (one param, no output schema, no annotations) and the description covers the essential purpose and login requirement. However, it does not mention the return format, potential errors (e.g., invalid token), or explicitly label the operation as non-mutating, leaving some contextual gaps for an agent.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema documents the token parameter with a clear description ('login で取得したセッショントークン'), achieving 100% coverage. The tool description adds no additional parameter meaning, so baseline of 3 is appropriate.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
Clear verb+resource: '一覧表示' (list display) of '自分が登録したメモ' (user's own memos). Distinct from siblings like add_memo, delete_memo, login, register, so it unambiguously identifies the operation.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
Implies usage after login ('ログインが必要です'), but does not explicitly mention when to use this tool vs alternatives (e.g., add_memo, delete_memo). No exclusions or alternative references are provided, making the guidance merely contextual rather than explicit.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
loginログインA
ユーザー名とパスワードでログインし、セッショントークンを取得します。
| Name | Required | Description | Default |
|---|---|---|---|
| password | Yes | パスワード | |
| username | Yes | ユーザー名 |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
With no annotations, the description carries the behavioral burden. It discloses the core outcome (session token acquisition), but does not mention side effects, token expiration, security considerations, or what happens on invalid credentials.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is a single, clear sentence that is front-loaded with the action and outcome. Every word contributes meaning, with no redundancy or filler.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
For a simple two-parameter login tool with no output schema, the description sufficiently covers purpose and return value (session token). It lacks details like token format or usage in subsequent calls, but these are not essential for basic invocation.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema description coverage is 100%, and the parameter descriptions already name username and password. The tool description adds minimal semantic value beyond restating the authentication context, so baseline 3 is appropriate.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly states the action: logging in with username and password and obtaining a session token. This distinguishes it from sibling tools like register and memo management tools by naming both the authentication mechanism and the specific output.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
No explicit guidance is given about when to use this tool versus alternatives. It does not mention that login should precede authenticated memo operations, nor does it point to register as the alternative for new users.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
registerユーザー登録A
ユーザー名とパスワードで新しいアカウントを作成します。
| Name | Required | Description | Default |
|---|---|---|---|
| password | Yes | パスワード(4文字以上) | |
| username | Yes | ユーザー名 |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
No annotations are provided, so the description carries the full burden of behavioral disclosure. It only states that an account is created, but does not mention duplicate username handling, whether the user is auto-logged-in, password storage, or any side effects. This is a significant gap for a mutation tool.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is a single concise, front-loaded sentence with no filler. Every word contributes to stating the action and object.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
The tool is simple and parameters are fully documented, but there is no output schema or annotations. The description omits important operational context such as duplicate username errors, return values, or whether registration creates a session. Adequate but with clear gaps.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema description coverage is 100%, so the baseline is 3. The description mentions username and password but adds no additional meaning beyond the schema, such as uniqueness constraints or validation behavior.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
Description uses a specific verb ('作成します') with a clear resource ('新しいアカウント') and method ('ユーザー名とパスワードで'). It clearly distinguishes itself from sibling tools like login and memo operations as account creation.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
Usage is implied by '新しいアカウントを作成' and the presence of a sibling 'login' tool, but there is no explicit guidance on when to use this versus alternatives, nor any exclusions such as 'do not use for existing users'.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
Tool Schema Changelog
Recent tool additions, removals, and schema changes observed during successful MCP inspections.
5 tool updates
v1.0.0- First observed
add_memo - First observed
delete_memo - First observed
list_memos - First observed
login - First observed
register
TDQS
Scored across 5 tools
Each tool has a clearly distinct purpose: register/login handle authentication, while add_memo, list_memos, and delete_memo cover distinct memo operations. There is no meaningful overlap or ambiguity between any two tools.
Most tools follow a clear imperative verb_noun pattern like add_memo, list_memos, and delete_memo. register and login are standard auth verbs without a noun object, and list_memos uses a plural while delete_memo is singular, but the overall naming is predictable and readable.
Five tools is well-scoped for a simple memo server requiring authentication and basic memo management. Every tool earns its place, and there are no redundant or unnecessary additions.
The set covers registration, login, creating memos, listing memos, and deleting memos, but lacks an update/edit memo operation and an explicit logout tool. Editing an existing memo requires deleting and recreating it, which is a notable gap for a memo service.
Maintenance
Related MCP Connectors
An authenticated remote MCP server for user-owned devices and one-shot capability invocation.
Hosted memory for AI agents over MCP. One memory shared by all your agents.
Related MCP Servers
- AlicenseNot gradedqualityDmaintenanceEnables AI assistants to create, read, update, delete, and list memos via the MCP protocol.3MIT
- AlicenseNot gradedqualityFmaintenanceEnables creating memos and attaching files to a Memos instance via MCP tools.MIT
- AlicenseAqualityDmaintenanceMCP server for creating, listing, updating, deleting memos, and managing attachments via the Memos API.1213 npmMIT
- FlicenseNot gradedqualityDmaintenanceMCP server providing CRUD operations for Memos, enabling users to create, list, get, update, and delete memos via natural language.-