// SCAN REPORT

GetNote MCP Server

26 tools. 10 can modify or destroy data without limits.

2 destructive tools with no built-in limits. Policy required.

Last updated: 11 Jun 2026

10 can modify or destroy data

16 read-only

26 tools total

Community server · catalogue entry verified 11/06/2026

How to control GetNote MCP Server ↓

TOOL MAP

What GetNote MCP Server exposes to your agents

Read (16) Write / Execute (8) Destructive / Financial (2)

Running more than one server? Check your whole stack →

MOST DANGEROUS TOOLS

Critical Risk

The most dangerous GetNote MCP Server tools

Destructive · High delete_note Although the description mentions moving to trash (suggesting possible recovery), the primary function is to remove notes from active use. Destructive · Medium delete_note_tag This tool deletes a specific tag from a note. Write · Medium remove_note_from_topic This tool removes a note from a topic/knowledge base, which is a reversible organizational action (the note itself is not deleted, just disassociated from the topic). Write · Medium batch_add_notes_to_topic The tool creates associations between notes and topics, which modifies the state of the knowledge base structure.

10 of GetNote MCP Server's 26 tools can modify, destroy, or commit something on every call — and an agent calls them with no built-in limits.

POLICY

How to control GetNote MCP Server

PolicyLayer is an MCP gateway — it sits between your AI agents and GetNote MCP Server, and nothing reaches the server without passing your rules. These are the rules we recommend:

Deny destructive operations

{
  "delete_note": {
    "deny_if": [
      {
        "conditions": [],
        "on_deny": "Blocked by default. Requires approval."
      }
    ]
  }
}

Destructive tools should never be available to autonomous agents without human approval.

Rate limit write operations

{
  "remove_note_from_topic": {
    "limits": [
      {
        "counter": "remove_note_from_topic_per_hour",
        "window": "hour",
        "max": 30,
        "scope": "grant"
      }
    ]
  }
}

Prevents bulk unintended modifications from agents caught in loops.

Cap read operations

{
  "get_blogger_content_detail": {
    "limits": [
      {
        "counter": "get_blogger_content_detail_per_minute",
        "window": "minute",
        "max": 60,
        "scope": "grant"
      }
    ]
  }
}

Controls API costs and prevents retry loops from exhausting upstream rate limits.

Create a free account and register GetNote MCP Server — nothing to install.
Add these rules — paste them, or build them visually. Tune the limits to your setup.
Point your MCP client (Claude, Cursor, anything) at your gateway URL.

ENFORCE POLICY ON GETNOTE →

Free to start. No card required.

FULL CATALOGUE

All 26 GetNote MCP Server tools

DESTRUCTIVE 2 tools

Destructive delete_note 删除笔记（移入回收站）。需要 note.content.trash scope。 Destructive delete_note_tag 删除笔记的指定标签（系统标签不可删除）。

WRITE 8 tools

Write remove_note_from_topic 将笔记从知识库中移除。 Write follow_topic_live 订阅一个得到 App 直播到知识库。直播结束后经 AI 处理即可通过 list_topic_lives 查看。目前仅支持得到 App 直播链接。需要 topic.live.read scope。 Write share_note 生成笔记的公开分享链接。幂等接口，多次调用返回同一个 share_url。需要 note.content.read scope。 Write add_note_tags 为指定笔记添加标签。 Write batch_add_notes_to_topic 批量将笔记添加到知识库（每批最多 20 个）。 Write create_topic 创建新的知识库。⚠️ 限制：每天最多创建 50 个知识库，北京时间自然日 00:00 重置。 Write update_note 更新已有笔记的标题、内容或标签。⚠️ 仅支持 plain_text 类型笔记，链接笔记、图片笔记等暂不支持更新。至少需要传 title、content、tags 中的一个。tags 是替换操作，会覆盖原有标签。 Write upload_image 上传图片到 OSS。返回 image_url（用于创建图片笔记的 image_urls 参数）。

READ 16 tools

Read get_blogger_content_detail 获取博主内容详情，包含完整原文（post_media_text）。需要 topic.blogger.read scope。 Read get_live_detail 获取直播详情，包含 AI 摘要（post_summary）和完整原文转写（post_media_text）。需要 topic.live.read scope。 Read get_note 获取指定笔记的详细内容，包括正文、标签、附件、音频转录、网页链接等。 Read get_note_task_progress 查询创建笔记任务的处理进度。用于链接笔记（note_type=link）创建后，通过 save_note 返回的 task_id 轮询任务状态，直到 status 变为 success（可获取 note_id）或 fai Read get_quota 查询当前 API Key 的调用配额，包括 read/write/write_note 三类的日/月剩余次数。 Read get_upload_config 获取图片上传配置，包括支持的文件类型、大小限制等。上传图片前先调用此接口了解约束。 Read get_upload_token 获取 OSS 图片上传凭证。返回 accessid/host/policy/signature 等字段，用于 multipart/form-data POST 上传图片到阿里云 OSS。上传成功后获取 image_id， Read list_notes 获取笔记列表（每次固定返回 20 条）。首次请求 since_id 传 0，后续用上一页最后一条笔记的 ID。 Read list_subscribe_topics 获取当前用户订阅的知识库列表（他人公开的，非自己创建）。返回 topics[]、has_more、total。 Read list_topic_blogger_contents 获取知识库中某个博主发布的内容列表（摘要，不含原文）。需要 topic.blogger.read scope。 Read list_topic_bloggers 获取知识库订阅的博主列表。需要 topic.blogger.read scope。 Read list_topic_lives 获取知识库中已完成且 AI 已处理的直播列表。需要 topic.live.read scope。 Read list_topic_notes 获取指定知识库内的笔记列表（每页 20 条）。 Read list_topics 获取知识库列表（每页固定 20 条）。返回 topics[]、has_more、total。每个 topic 包含 topic_id（知识库 ID，后续所有接口的 topic_id 参数均传此值）、name、descri Read recall 全局语义搜索：在所有笔记中进行语义召回。适用场景：「搜一下」「找找我哪些笔记提到了 XX」。返回结果按相关度从高到低排序。需要 note.recall.read scope。 Read recall_knowledge 知识库语义搜索：在指定知识库范围内进行语义召回。适用场景：「在我的 XX 知识库搜一下 XX」。返回结果按相关度从高到低排序。需要 note.topic.recall.read scope。

EXPLORE

Related servers

Other MCP servers with similar tools — same risk classification, starter policies for each.

FAQ

Questions about GetNote MCP Server

Can an AI agent delete data through the GetNote MCP Server MCP server? +

Yes. The GetNote MCP Server server exposes 2 destructive tools including delete_note, delete_note_tag. These permanently remove resources with no undo. PolicyLayer blocks destructive tools by default so they never reach the upstream server.

How do I prevent bulk modifications through GetNote MCP Server? +

The GetNote MCP Server server has 8 write tools including remove_note_from_topic, follow_topic_live, share_note. Set a rate limit in your policy -- for example, 10 calls per hour prevents an agent from making more than 10 modifications per hour. PolicyLayer enforces this at the gateway, before calls reach GetNote MCP Server.

How many tools does the GetNote MCP Server MCP server expose? +

26 tools across 3 categories: Destructive, Read, Write. 16 are read-only. 10 can modify, create, or delete data.

How do I enforce a policy on GetNote MCP Server? +

Register the GetNote MCP Server MCP server in PolicyLayer, apply the suggested rules above (adjust the limits to your use case), and point your AI client at the PolicyLayer proxy URL instead of the server directly. Your agents keep the same tools; PolicyLayer evaluates every call against policy before it executes. Nothing to install, live in minutes.

Enforce policy on every GetNote MCP Server tool call.

Deterministic rules across all 26 GetNote MCP Server tools. Per-identity grants. Full audit log. Live in minutes. Nothing to install.

ENFORCE POLICY ON GETNOTE →

Free to start. No card required.

26 GetNote MCP Server tools catalogued and risk-classified — across an index of 43,000+ MCP servers.