mcp-standardnotes CLAUDE.md

mcp-standardnotes CLAUDE.md is an instructions file for coding agents from lozit/mcp-standardnotes. It costs 1,487 tokens per session, scanned A, original, MIT.

Repository-specific instructions for an MCP server that lets Claude read and edit encrypted Standard Notes notes and tags. Standard Notes is a note-taking service with end-to-end encryption, meaning the stored content is designed to remain unreadable to the service.

In plain words
What is it for?
Use them when working on note or tag operations, encryption-format parsing, TypeScript builds, HTTP requests, or the MCP server's local communication.
Why use it?
They document the encryption format, supported runtime, local-only transport, and implementation limits so changes preserve compatibility and privacy.

Instructions file

Install

Getting it into your agent

One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.

agentmods
npx agentmods add instructions/lozit/mcp-standardnotes/claude-md
Clone the repo
git clone --depth 1 https://github.com/lozit/mcp-standardnotes

Wrote this? Show the measurements

A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.

agentmods badge for mcp-standardnotes CLAUDE.md

README.md
[![agentmods](https://agentmods.dev/badge/instructions/lozit/mcp-standardnotes/claude-md.svg)](https://agentmods.dev/instructions/lozit/mcp-standardnotes/claude-md)
Your own site
<a href="https://agentmods.dev/instructions/lozit/mcp-standardnotes/claude-md"><img src="https://agentmods.dev/badge/instructions/lozit/mcp-standardnotes/claude-md.svg" alt="Measured on agentmods" height="20"></a>
Per session 1,487 This file is loaded in full into every session.
When invoked 1,487 The same file — it is already loaded in full.
Security scan A 0 findings. Scan, not verified.
Origin original No closer match found in the catalogue.
Token cost

What it costs to keep this loaded

Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.

ModelPer sessionOnce invoked
Fable 5 $0.01487 $0.01487
Opus 5 $0.00744 $0.00744
Sonnet 5 $0.00297 $0.00297
Haiku 4.5 $0.00149 $0.00149

Measured 4d ago against content hash 5ed489096f03, method: parsed. Prices are Anthropic first-party input rates as of 2026-08-30, from the pricing page.

Security

Grade A, and why

mcp-standardnotes CLAUDE.md scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 4d ago.

A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.

Nothing flagged

None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.

CLAUDE.md · 111 lines

How it starts

The opening of the file, as written. The whole thing — 111 lines — stays where its author put it; the contents beside it link to each section on GitHub.

MCP Standard Notes

MCP (Model Context Protocol) server that lets Claude interact with a Standard Notes account (read, create, edit, delete notes and tags) while preserving Standard Notes' end-to-end encryption (E2EE).

What is implemented locally = only the Standard Notes protocol 004 framing (payload format 004:<nonce>:<ciphertext>:<aad>, root key derivation → masterKey/serverPassword, items_key wrap/unwrap). That's parsing/serialization of a documented public format, not new cryptography.

The @standardnotes/snjs package and the modular @standardnotes/{encryption,models,...} packages were ruled out: the monolith is deprecated (Node 16 only), and the modular packages have un-propagated breaking changes (ContentType removed from common) that make them unusable externally.

Stack

  • Language: TypeScript (strict)
  • Runtime: Node.js ≥ 20
  • MCP SDK: @modelcontextprotocol/sdk
  • Crypto: libsodium-wrappers-sumo (Argon2id + XChaCha20-Poly1305 IETF)
  • HTTP: native fetch (Node 20+)
  • MCP transport: stdio (local, no network exposure)

Commands

npm install            # Install dependencies
npm run build          # Compile TypeScript → dist/
npm run dev            # Watch mode (tsx)
npm run typecheck      # Type-check without emitting
npm test               # Run tests (vitest)
npm run lint           # ESLint

Structure

src/
  index.ts             # MCP stdio entry point
  server.ts            # McpServer + tool registration
  cli/login.ts         # `npm run login` — interactive prompt + keychain
  sn/
    client.ts          # Orchestration: login/session → HTTP + protocol
    crypto.ts          # libsodium wrapper (argon2id, xchacha20poly1305)
    protocol004.ts     # SN 004 framing: root key, items_key wrap, payload enc/dec
    http.ts            # fetch wrapper: /v1/login-params, /v1/login, /v1/items/sync
    session.ts         # Session persistence via keytar
    types.ts           # Note / NoteSummary / KeyParams types
  tools/notes.ts       # MCP handlers + zod schemas
  tools/tags.ts        # Tags + sync handlers + zod schemas
  security/
    redact.ts, logger.ts
.env.example

Read the full file on GitHub · 111 lines

Changes

What this file has done since we first saw it

Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.

  1. 4d ago First seen · 111 lines · 1,487 tokens per session scan A 5ed489096f03

Subscribe to this mod's changes

mcp-standardnotes CLAUDE.md is an instructions file published in the GitHub repository lozit/mcp-standardnotes (9 stars, last pushed 3d ago), licensed MIT. It adds 1,487 tokens to every session, about $0.0074 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-31.

Related

Other instructions, from other repositories

linkedin-mcp-server AGENTS.md

AGENTS.md instructions for stickerdaniel/linkedin-mcp-server, covering claude.md, development commands, scraping rules, browser identity rules and profile safety rules.

stickerdaniel/linkedin-mcp-server · 4,959 tokens

pagespeed-insights-mcp AGENTS.md

AGENTS.md instructions for ruslanlap/pagespeed-insights-mcp, covering project rules — pagespeed-insights-mcp (mcp server), специфіка проєкту, обов'язкові практики (mcp + ts), serena + .serena/ and професійні skills тільки.

ruslanlap/pagespeed-insights-mcp · 983 tokens

kafka-schema-reg-mcp AGENTS.md

AGENTS.md instructions for aywengo/kafka-schema-reg-mcp, covering development guidelines, prerequisites, quick setup, install dependencies and install dev dependencies (optional but recommended).

aywengo/kafka-schema-reg-mcp · 1,576 tokens

ls-mcp AGENTS.md

AGENTS.md instructions for lirantal/ls-mcp, covering agents.md, start here, documentation, prs and issues and releases.

lirantal/ls-mcp · 357 tokens

PBP CLAUDE.md

Instructions for MadGapun/PBP, covering pbp — claude-code-memory, stand 2026-08-25 (v1.7.23 stable) — ehrliche zahlen, stand 2026-07-16 (v1.8.0-beta.6, prerelease) — hotfix #760, stand 2026-07-14 (v1.7.7) — scoring-fairness & praxis-funde and stand 2026-07-03 (v1.7.6) — alltags-fuehrung.

MadGapun/PBP · 22,232 tokens

Instability CLAUDE.md

Instructions for tcpiplab/Instability, covering claude.md, commands, code style guidelines & design philosophy, v3 project architecture and core components (v3).

tcpiplab/Instability · 1,883 tokens