Is eu.drafto/mcp safe to use?

eu.drafto/mcp has no known CVEs as of the latest MCPpedia security scan. It does not require authentication, so any local process can connect — keep this in mind in shared environments.

How do I install eu.drafto/mcp?

eu.drafto/mcp can be installed by cloning its GitHub repository and following the setup instructions in the README.

Is eu.drafto/mcp actively maintained?

eu.drafto/mcp is actively maintained — last commit was 1 day ago.

eu.drafto/mcp

Create, read, search, and organize your Drafto notes and notebooks.

ActiveNot tested

Other

GitHub

23DNo CVEsactive

Quick Install

{
  "mcpServers": {
    "eu-drafto-mcp": {
      "command": "<see-readme>",
      "args": []
    }
  }
}

Setup guide

No install config available. Check the server's README for setup instructions.

Are you the author?

Add this badge to your README to show your security score and help users find safe servers.

Embed in your READMEAbout badges →

[![MCPpedia Score](https://mcppedia.org/api/badge/eu-drafto-mcp)](https://mcppedia.org/s/eu-drafto-mcp)

Should you use this server?

Create, read, search, and organize your Drafto notes and notebooks.

✓

Is it safe?

No package registry to scan.

No authentication — any process on your machine can connect.

License not specified.

✓

Is it maintained?

Last commit 1 days ago.

Will it work with my client?

Transport: . Compatibility not confirmed.

README

Drafto

A note-taking app with notebooks, rich text editing, and auto-save. Available as a web app, mobile app (iOS + Android), and macOS desktop app — all with offline support.

Live: drafto.eu

Tech Stack

Monorepo

Package manager: pnpm workspaces
Orchestration: Turborepo
Language: TypeScript (strict mode)
Formatting: Prettier + ESLint
Git hooks: Husky + lint-staged + commitlint (conventional commits)

Web (`apps/web/`)

Framework: Next.js 16 (App Router, Turbopack)
UI: React 19, Tailwind CSS v4 + custom design system (CSS variables)
Editor: BlockNote (block-based rich text)
Database & Auth: Supabase (PostgreSQL + Row Level Security)
Env validation: t3-env + Zod
Monitoring: Sentry (errors), PostHog (analytics)
Testing: Vitest + Testing Library (unit/integration), Playwright (E2E)

Mobile (`apps/mobile/`)

Framework: Expo 55 + React Native 0.84
Navigation: expo-router
Editor: TenTap Editor (WebView-based TipTap)
Local database: WatermelonDB (SQLite, offline-first with Supabase sync)
Testing: Jest + Testing Library React Native (unit), Maestro (E2E)

Desktop (`apps/desktop/`)

Framework: React Native macOS 0.81.5 (native AppKit components)
Navigation: React Navigation
Editor: TenTap Editor (WebView-based TipTap, same as mobile)
Local database: WatermelonDB (SQLite, offline-first with Supabase sync — shared with mobile)
Native features: macOS menu bar, keyboard shortcuts, window state persistence
Distribution: Mac App Store via Fastlane
Testing: Jest (unit)

Shared (`packages/shared/`)

Shared TypeScript types (Database, API types) and constants, consumed by both web and mobile

Infrastructure

Backend: Supabase (Postgres + Auth + Storage + Realtime) — two isolated projects for dev and prod
Web hosting: Vercel (with preview deployments)
Mobile CI/CD: Fastlane — Google Play (internal testing) and TestFlight
Desktop CI/CD: Fastlane — Mac App Store via TestFlight
CI: GitHub Actions, SonarCloud (code quality)

MCP Integration

Drafto is available on the MCP Registry as eu.drafto/mcp, enabling integration with Claude Desktop, Claude Cowork, and other MCP clients.

Tools available: list notebooks, list/create/read/update/search/move/trash notes, create notebooks.

Setup: Generate an API key at drafto.eu/settings, then add Drafto as a remote MCP server with the endpoint https://drafto.eu/api/mcp and your API key as the Bearer token.

Features

Notebooks — create, rename, delete notebooks to organize notes
Notes — create and edit notes within notebooks, with relative timestamps
Rich text editor — block editor with auto-save (BlockNote on web, TenTap on mobile)
Offline support — mobile app works offline via WatermelonDB, syncs when back online
Dark mode — system-preference-aware theme toggle with localStorage persistence
Authentication — email/password signup with email confirmation, password reset
User approval — new accounts require admin approval before access
Evernote import — import notes from Evernote .enex files with full content and attachment support
Row Level Security — all data access enforced at the database level

Environments

Environment	Supabase Project	Supabase Ref	Used By
Production	drafto.eu	`tbmjbxxseonkciqovnpl`	Vercel production deploy (drafto.eu)
Development	drafto-dev	`huhzactreblzcogqkbsd`	Local dev, Vercel previews, CI/E2E

Sentry and PostHog use a single project each with environment tagging to distinguish data.

Migration Workflow

... View full README on GitHub

Test This Server

No automated test available for this server. Check the GitHub README for setup instructions.

Help improve this page

This server is missing a description. Tools and install config are also missing.If you've used it, help the community.

Add information

Score Breakdown

MCPpedia Score

Click each category to see evidence

23D

Last scored 6h ago

How we score →

Security

2/30

No known vulnerabilities.

○

Known CVEs — No package registry to scan

○

Tool safety — No tools to analyze

○

Tool poisoning — No tools to analyze

○

Injection vectors — No tools to analyze

○

Tool stability — First scan — baseline recorded

○

Dependency health — No package to analyze

✗

License — No license specified

○

Authentication — No authentication required

○

Repository — active repo

CVEs checked daily via OSV.dev. Score algorithm is open source.

Reviews

Have you used this server?

Share your experience — it helps other developers decide.

How easy was setup?Did it work reliably?How was the documentation?

Frequently Asked Questions

Is eu.drafto/mcp safe to use?: eu.drafto/mcp has no known CVEs as of the latest MCPpedia security scan. It does not require authentication, so any local process can connect — keep this in mind in shared environments.
How do I install eu.drafto/mcp?: eu.drafto/mcp can be installed by cloning its GitHub repository and following the setup instructions in the README.
Is eu.drafto/mcp actively maintained?: eu.drafto/mcp is actively maintained — last commit was 1 day ago.

Similar servers

View all →

Memory MCP Server

Official

No CVEs98A

Persistent memory using a knowledge graph

5 toolsstdio83.8k93.5k/wk1d ago

Hash-verified file editing MCP server with token efficiency hook. 11 tools for AI coding agents.

No CVEs95A

Hash-verified file editing MCP server with token efficiency hook. 11 tools for AI coding agents.

5 toolsremote398685.9k/wk11h ago

Context Mode

No CVEs95A

Privacy-first. MCP is the protocol for tool access. We're the virtualization layer for context.

6 toolsremote7.3k10.0k/wk22h ago

Browser Tools Mcp

No CVEs94A

Monitor browser logs directly from Cursor and other MCP compatible IDEs.

7 toolsremote7.2k2.9k/wk28d ago

MCP Security Weekly

Get CVE alerts and security updates for eu.drafto/mcp and similar servers.

Discussion

Start a conversation

Ask a question, share a tip, or report an issue.

Has anyone used this with Cursor?How do you handle auth?Any alternatives?

Drafto

A note-taking app with notebooks, rich text editing, and auto-save. Available as a web app, mobile app (iOS + Android), and macOS desktop app — all with offline support.

Live: drafto.eu