loomnote-mcp
Loomnote 笔记的 MCP 服务端:在你自己的电脑上启动,用你自己的存储凭证直连你的 笔记数据(本地磁盘 / 腾讯云 COS / S3 兼容存储),让 AI 客户端(Claude Code、 Codex 等)读笔记、把笔记分发到公众号/小红书/微博/B站/Reddit/YouTube,并把 发布结果写回一份回执文件。Loomnote 的服务器不在这条数据路径上。
安全模型
- 默认只读。
record_publish_receipt/publish_note/update_publish_receipt三个写工具始终注册(客户端能看到它们),但调用会 返回{"ok": false, "error": "..."},直到你加--allow-publish-writes重新启动。 - 只写一个文件:即使开了可写模式,唯一可能被写入的文件是
publish-receipts.json(发布回执)。笔记正文(memos/)、图片/视频 (file/)、模板(templates/)、配置(.config.json)在写入前就会被 拒绝,抛PermissionError。 - 没有删除功能。这个 MCP 不提供、也不会去调用任何删除对象/文件的接口——
无论是否加
--allow-publish-writes。 - 凭证只走环境变量,从不出现在命令行参数或返回给 AI 客户端的内容里;
建议给 COS/S3 单独开一个只有读 + 对
publish-receipts.json有写权限的 子账号密钥,而不是主账号全量密钥。
安装
uvx loomnote-mcp --help # 免安装直接跑
# 或
pipx install loomnote-mcp
启动
# 本地磁盘(memos/ 所在目录)
uvx loomnote-mcp --source disk --notes-dir /path/to/memos
# 腾讯云 COS
export LOOMNOTE_COS_SECRET_ID=...
export LOOMNOTE_COS_SECRET_KEY=...
uvx loomnote-mcp --source cos --bucket <bucket> --region <region> --prefix <可选前缀>
# 开启可写回执(默认关闭,见上面的安全模型)
uvx loomnote-mcp --source cos --bucket <bucket> --region <region> --allow-publish-writes
参数一览:--source {disk,cos,s3}、--notes-dir(disk)、--bucket /
--region(cos)/ --endpoint(s3 兼容)、--prefix、--allow-publish-writes、
--transport stdio(目前只支持 stdio)。
自检
uvx loomnote-mcp --source disk --notes-dir /path/to/memos --selfcheck
# loomnote-mcp 已连通 · 数据源 disk(...) · N 条笔记 · 11 个工具 · 只读
N 应等于 Loomnote App 里的笔记总数;对不上说明没连到正确的数据源。
客户端配置示例(Claude Code)
claude mcp add loomnote \
-e LOOMNOTE_COS_SECRET_ID=<你的子账号 SecretId> \
-e LOOMNOTE_COS_SECRET_KEY=<你的子账号 SecretKey> \
-- uvx loomnote-mcp --source cos --bucket <your-bucket> --region <your-region>
其他支持 stdio MCP 的客户端(Codex 等)同理,把上面的命令粘进各自的 MCP 服务器配置里即可。Loomnote App 的「AI 接入」页会按你的实际存储配置生成这段 命令,直接复制粘贴,不用手拼。
Metadata
Release files for loomnote-mcp 0.1.2
For a detailed explanation of source distributions (sdists) and built distributions (wheels), please see the package formats documentation.
Source distribution (sdist)
| File | Size | Uploaded | Provenance | Actions |
|---|---|---|---|---|
| loomnote_mcp-0.1.2.tar.gz | 44.4 kB | Without provenance | Details for loomnote_mcp-0.1.2.tar.gz |
Built distribution (wheel)
| File | Interpreter | ABI | Platform | Actions Reset |
|---|---|---|---|---|
| loomnote_mcp-0.1.2-py3-none-any.whl | Python 3 | none | any | Details for loomnote_mcp-0.1.2-py3-none-any.whl |
Total release size: 94.4 kB
Release files / loomnote_mcp-0.1.2.tar.gz
| Download URL | loomnote_mcp-0.1.2.tar.gz |
|---|---|
| Size | 44.4 kB |
| Tags | Source |
|
SHA-256 checksum How to use checksums |
3ed1b5392c74fcc36b0ed26c3e7c189323d2b862311e6ecd14e2d1c98052731b
|
|
BLAKE2b-256 checksum How to use checksums |
12aef472db55cc570d40621b56d58e2e31ef4398eb7d8ad79549f05c8bbf2a8b
|
| Upload date | |
|
Uploaded using Trusted Publishing? What is trusted publishing? |
No |
| Uploaded via |
uv/0.11.16 {"installer":{"name":"uv","version":"0.11.16","subcommand":["publish"]},"python":null,"implementation":{"name":null,"version":null},"distro":{"name":"macOS","version":null,"id":null,"libc":null},"system":{"name":null,"release":null},"cpu":null,"openssl_version":null,"setuptools_version":null,"rustc_version":null,"ci":null}
|
Release files / loomnote_mcp-0.1.2-py3-none-any.whl
| Download URL | loomnote_mcp-0.1.2-py3-none-any.whl |
|---|---|
| Size | 49.9 kB |
| Tags | Python 3 |
|
SHA-256 checksum How to use checksums |
0b1af622cd98d88216fa5bf032acba7f20dc9673b9f92295e5386b17ea546465
|
|
BLAKE2b-256 checksum How to use checksums |
e976fcc73bf030ac6754a6365a99e7e5c053e63d084a9839798b186a99275834
|
| Upload date | |
|
Uploaded using Trusted Publishing? What is trusted publishing? |
No |
| Uploaded via |
uv/0.11.16 {"installer":{"name":"uv","version":"0.11.16","subcommand":["publish"]},"python":null,"implementation":{"name":null,"version":null},"distro":{"name":"macOS","version":null,"id":null,"libc":null},"system":{"name":null,"release":null},"cpu":null,"openssl_version":null,"setuptools_version":null,"rustc_version":null,"ci":null}
|
Security for loomnote-mcp 0.1.2
Provenance
Provenance describes where a file came from. On PyPI, provenance is shared via attestations, which provide a verifiable record of the build or publishing details. View details, limitations and caveats.
No provenance found
None of the files in this release were uploaded with provenance metadata.
A note on package security
PyPI is a repository for distributing packages, not a service for auditing them. While third-party security researchers and our staff do their best to detect and remove malicious packages, PyPI cannot guarantee the quality, security or suitability of any given package.
To learn more about protecting yourself from malicious actors, visit our package security documentation.