Is io.github.Essatt/knowman-mcp safe to use?

io.github.Essatt/knowman-mcp has no known CVEs as of the latest MCPpedia security scan. It requires authentication to connect, which limits unauthorized access. Licensed under MIT.

How do I install io.github.Essatt/knowman-mcp?

io.github.Essatt/knowman-mcp supports copy-paste install configs on its MCPpedia page for Claude Desktop, Cursor, and Claude Code. Scroll to the Quick Install section and select your client.

What AI clients work with io.github.Essatt/knowman-mcp?

io.github.Essatt/knowman-mcp is compatible with claude-desktop, cursor, claude-code. It uses http and stdio transport.

Is io.github.Essatt/knowman-mcp actively maintained?

io.github.Essatt/knowman-mcp is actively maintained - last commit was 1 day ago.

io.github.Essatt/knowman-mcp

@knowman/mcp

KnowMan MCP server: search, ask, save and read your Knowledge Base from any MCP client.

672/wk GitHub npm

No known CVEs

MIT license

Actively maintained

Last commit 1d ago

Works with most clients

Transport: http, stdio

0 tools

Grade F

MCPpedia last refreshed this data 10h ago

Edit this pageView history

io.github.Essatt/knowman-mcp is an MCP server that KnowMan MCP server: search, ask, save and read your Knowledge Base from any MCP client. Its tool list has not been published yet over http and stdio, requires no API key, and scores 64/100 on MCPpedia's security, maintenance and efficiency rubric.

Education

Step 1

Install in your client

Config is the same across clients - only the file and path differ.

Supported in Claude Desktophttp, stdio · Node 18+

Paste into ~/Library/Application Support/Claude/claude_desktop_config.json

{
  "mcpServers": {
    "knowman": {
      "env": {
        "KNOWMAN_API_KEY": "<your-key>"
      },
      "args": [
        "-y",
        "@knowman/mcp"
      ],
      "command": "npx"
    }
  }
}

Are you the author?

Add this badge to your README to show your security score and help users find safe servers.

Embed in your READMEAbout badges →

[![MCPpedia Score](https://mcppedia.org/api/badge/io-github-essatt-knowman-mcp)](https://mcppedia.org/s/io-github-essatt-knowman-mcp)

Read me

What io.github.Essatt/knowman-mcp does

KnowMan MCP server: search, ask, save and read your Knowledge Base from any MCP client.

Test This Server

This server supports HTTP transport. Be the first to test it - help the community know if it works.

Loading README…

Scored, not listed

Why this score

Five weighted categories - click any category to see the underlying evidence.

Score breakdown

64/100across 5 weighted dimensions

How we score →

0255075100

−36

Security

Maintenance

Efficiency

Documentation

Compatibility

Categoriesclick a row to see evidence

Security

OSV.dev

No known CVEs.

Checked @knowman/mcp against OSV.dev.

Community

Reviews

Be the first to review

Have you used this server?

Share your experience - it helps other developers decide.

How easy was setup?Did it work reliably?How was the documentation?

Frequently Asked Questions

Is io.github.Essatt/knowman-mcp safe to use?: io.github.Essatt/knowman-mcp has no known CVEs as of the latest MCPpedia security scan. It requires authentication to connect, which limits unauthorized access. Licensed under MIT.
How do I install io.github.Essatt/knowman-mcp?: io.github.Essatt/knowman-mcp supports copy-paste install configs on its MCPpedia page for Claude Desktop, Cursor, and Claude Code. Scroll to the Quick Install section and select your client.
What AI clients work with io.github.Essatt/knowman-mcp?: io.github.Essatt/knowman-mcp is compatible with claude-desktop, cursor, claude-code. It uses http and stdio transport.
Is io.github.Essatt/knowman-mcp actively maintained?: io.github.Essatt/knowman-mcp is actively maintained - last commit was 1 day ago.

Similar servers

Others in education

View all →

io.github.mims-harvard/tooluniverse91

2,700+ scientific tools for AI scientists: life science, research, literature, and more.

1.8k 4

Auto Claude Code Research In Sleep91

ARIS ⚔️ (Auto-Research-In-Sleep) — Lightweight Markdown-only skills for autonomous ML research: cross-model review loops, idea discovery, and experiment automation. No framework, no lock-in — works with Claude Code, Codex, OpenClaw, or any LLM agent.

19.1k 5

Daofy90

Daofy for Delphi — MCP Server that compiles Delphi projects and queries knowledge base for AI assistants.

108 10

io.github.chrischall/schoolpass-mcp89

SchoolPass for Claude — students, arrival/dismissal calendar, pickup changes, and school info

MCP Security Weekly

Get CVE alerts and security updates for io.github.Essatt/knowman-mcp and similar servers.

Community

Discussion

Start a conversation

Ask a question, share a tip, or report an issue.

Has anyone used this with Cursor?How do you handle auth?Any alternatives?

Edit this pageView history

Education

Step 1

Install in your client

Config is the same across clients - only the file and path differ.

Supported in Claude Desktophttp, stdio · Node 18+

Paste into ~/Library/Application Support/Claude/claude_desktop_config.json

{
  "mcpServers": {
    "knowman": {
      "env": {
        "KNOWMAN_API_KEY": "<your-key>"
      },
      "args": [
        "-y",
        "@knowman/mcp"
      ],
      "command": "npx"
    }
  }
}

Are you the author?

Add this badge to your README to show your security score and help users find safe servers.

Embed in your READMEAbout badges →

[![MCPpedia Score](https://mcppedia.org/api/badge/io-github-essatt-knowman-mcp)](https://mcppedia.org/s/io-github-essatt-knowman-mcp)

Read me

What io.github.Essatt/knowman-mcp does

KnowMan MCP server: search, ask, save and read your Knowledge Base from any MCP client.

Test This Server

This server supports HTTP transport. Be the first to test it - help the community know if it works.

README

@knowman/mcp

A stdio MCP server that lets an MCP client search, ask, save and read items in a KnowMan account.

Tools

Hosted server (remote)

Tool	Purpose
`kb_research`	Retrieve ranked passages and memories across the whole library in one call; the assistant writes the answer.
`kb_get_item`	Read content and metadata for one item.
`kb_recent`	List recently saved items.
`kb_save`	Save a URL to Inbox or Knowledge Base.

Local stdio package

Tool	Purpose
`kb_research`	Retrieve ranked passages and memories across the whole library in one call; the assistant writes the answer. Also served by the local package from 0.3.1.
`kb_get_item`	Read content and metadata for one item.
`kb_save`	Save a URL to Inbox or Knowledge Base.
`kb_recent`	List recently saved items.
`kb_search`	Search saved items without bodies; results carry trust. Deprecated; use `kb_research` on the hosted server.
`kb_ask`	Ask a question over the Knowledge Base or one item; returns an answer with citations. Deprecated; use `kb_research` on the hosted server.
`kb_memories`	List saved memories such as claims, decisions and playbooks; read-only. Deprecated; use `kb_research` on the hosted server.

Install

npx -y @knowman/mcp runs the server on demand. npm install -g @knowman/mcp installs the knowman-mcp command.

Requires Node.js 22 or newer.

Get a key

Configuration

Claude Desktop (claude_desktop_config.json):

{
  "mcpServers": {
    "knowman": {
      "command": "npx",
      "args": ["-y", "@knowman/mcp"],
      "env": {
        "KNOWMAN_API_KEY": "<your-key>"
      }
    }
  }
}

Claude Code:

claude mcp add knowman --env KNOWMAN_API_KEY=<your-key> -- npx -y @knowman/mcp

Cursor (~/.cursor/mcp.json, or .cursor/mcp.json in a project): use the same mcpServers JSON as the Claude Desktop example above.

Prefer signing in with the browser instead of pasting a key? Install the package globally (npm install -g @knowman/mcp) and run knowman login. The saved credential is shared with knowman-mcp, so the env block is not needed. Run knowman status to check it.

The package runs on your own machine over stdio. KnowMan also runs a hosted server at the endpoint in the next section, for clients that only accept remote MCP servers, such as claude.ai custom connectors.

Remote (hosted) server

Endpoint: https://api.knowman.io/mcp (Streamable HTTP, stateless, JSON responses, MCP protocol 2025-11-25). It exposes four tools: kb_research, kb_get_item, kb_recent and kb_save (see Tools above).

claude.ai. Open Settings, then Connectors, then Add custom connector, and enter https://api.knowman.io/mcp. Sign in with your KnowMan account when the browser opens.

Sign in with OAuth. The server implements OAuth 2.1 for MCP: protected resource metadata at /.well-known/oauth-protected-resource/mcp, authorization server metadata at /.well-known/oauth-authorization-server, dynamic client registration, authorization code with PKCE (S256), and rotating refresh tokens. A client that supports MCP OAuth connects from the endpoint URL alone: it opens a consent page at app.knowman.io, you sign in and approve, and the client receives a one-hour access token plus a refresh token. Access is limited to two scopes: knowman.read (search and read) and knowman.write (save links).

Or use an API key. Create a key in your KnowMan settings and send it as Authorization: Bearer <key>:

{
  "mcpServers": {
    "knowman": {
      "url": "https://api.knowman.io/mcp",
      "headers": { "Authorization": "Bearer <your-key>" }
    }
  }
}

Claude Code: claude mcp add --transport http knowman https://api.knowman.io/mcp --header "Authorization: Bearer <your-key>".

**What has been veri

... View full README on GitHub

Loading README…

Scored, not listed

Why this score

Five weighted categories - click any category to see the underlying evidence.

Score breakdown

64/100across 5 weighted dimensions

How we score →

0255075100

−36

Security

Maintenance

Efficiency

Documentation

Compatibility

Categoriesclick a row to see evidence

Security

OSV.dev

No known CVEs.

Checked @knowman/mcp against OSV.dev.

Community

Reviews

Be the first to review

Have you used this server?

Share your experience - it helps other developers decide.

How easy was setup?Did it work reliably?How was the documentation?

Frequently Asked Questions

Is io.github.Essatt/knowman-mcp safe to use?: io.github.Essatt/knowman-mcp has no known CVEs as of the latest MCPpedia security scan. It requires authentication to connect, which limits unauthorized access. Licensed under MIT.
How do I install io.github.Essatt/knowman-mcp?: io.github.Essatt/knowman-mcp supports copy-paste install configs on its MCPpedia page for Claude Desktop, Cursor, and Claude Code. Scroll to the Quick Install section and select your client.
What AI clients work with io.github.Essatt/knowman-mcp?: io.github.Essatt/knowman-mcp is compatible with claude-desktop, cursor, claude-code. It uses http and stdio transport.
Is io.github.Essatt/knowman-mcp actively maintained?: io.github.Essatt/knowman-mcp is actively maintained - last commit was 1 day ago.