// SCAN REPORT

Evernote MCP Server

52 tools. 22 can modify or destroy data without limits.

6 destructive tools with no built-in limits. Policy required.

Last updated: 12 Jun 2026

22 can modify or destroy data

30 read-only

52 tools total

Community server · catalogue entry verified 12/06/2026

How to control Evernote MCP Server ↓

TOOL MAP

What Evernote MCP Server exposes to your agents

Read (30) Write / Execute (16) Destructive / Financial (6)

Running more than one server? Check your whole stack →

MOST DANGEROUS TOOLS

Critical Risk

The most dangerous Evernote MCP Server tools

Destructive · High delete_note Moving a note to trash is a destructive operation that removes user content from active access. Destructive · High delete_notebook This tool destroys a container of data (a notebook) and moves its contents to trash. Destructive · High expunge_note This tool meets the Destructive category definition as it irreversibly deletes data (a note) and the action cannot be undone. Destructive · High expunge_search This tool irreversibly deletes data (a saved search) without the possibility of recovery or reversal.

22 of Evernote MCP Server's 52 tools can modify, destroy, or commit something on every call — and an agent calls them with no built-in limits.

POLICY

How to control Evernote MCP Server

PolicyLayer is an MCP gateway — it sits between your AI agents and Evernote MCP Server, and nothing reaches the server without passing your rules. These are the rules we recommend:

Deny destructive operations

{
  "delete_note": {
    "deny_if": [
      {
        "conditions": [],
        "on_deny": "Blocked by default. Requires approval."
      }
    ]
  }
}

Destructive tools should never be available to autonomous agents without human approval.

Rate limit write operations

{
  "clear_reminder": {
    "limits": [
      {
        "counter": "clear_reminder_per_hour",
        "window": "hour",
        "max": 30,
        "scope": "grant"
      }
    ]
  }
}

Prevents bulk unintended modifications from agents caught in loops.

Cap read operations

{
  "find_note_counts": {
    "limits": [
      {
        "counter": "find_note_counts_per_minute",
        "window": "minute",
        "max": 60,
        "scope": "grant"
      }
    ]
  }
}

Controls API costs and prevents retry loops from exhausting upstream rate limits.

Create a free account and register Evernote MCP Server — nothing to install.
Add these rules — paste them, or build them visually. Tune the limits to your setup.
Point your MCP client (Claude, Cursor, anything) at your gateway URL.

ENFORCE POLICY ON EVERNOTE →

Free to start. No card required.

FULL CATALOGUE

All 52 Evernote MCP Server tools

DESTRUCTIVE 6 tools

Destructive delete_note Move a note to trash. Destructive delete_notebook Delete a notebook (moves notes to trash, permanently deletes notebook). Destructive expunge_note Permanently delete a note. Destructive expunge_search Permanently delete a saved search. Destructive expunge_tag Permanently delete a tag. Destructive unset_resource_application_data_entry Remove application data entry from a resource.

WRITE 16 tools

Write clear_reminder Clear all reminder fields from a note. Write untag_all Remove a tag from all notes. Write complete_reminder Mark a reminder as completed. Write copy_note Copy a note to another notebook. Write create_note create_note Write create_notebook Create a new Evernote notebook. Write create_search Create a new saved search. Write create_tag Create a new tag. Write move_note Move a note to another notebook. Write set_reminder set_reminder Write set_resource_application_data_entry Set application data entry for a resource. Write update_note update_note Write update_notebook Update an existing notebook. Write update_resource update_resource Write update_search Update an existing saved search. Write update_tag Update an existing tag.

READ 30 tools

Read find_note_counts Get note counts for each notebook and tag. Read find_related find_related Read get_default_notebook Get the default notebook for new notes. Read get_note Get note content and metadata. Read get_note_content Get just the ENML content of a note. Read get_note_search_text get_note_search_text Read get_note_tag_names Get tag names for a note. Read get_note_version get_note_version Read get_notebook Get notebook details by GUID. Read get_reminder Get reminder information for a specific note. Read get_resource get_resource Read get_resource_alternate_data Get resource alternate data (e.g., PDF preview of an image). Read get_resource_application_data Get all application data for a resource. Read get_resource_application_data_entry Get a specific application data entry from a resource. Read get_resource_attributes Get resource attributes (metadata about the resource). Read get_resource_by_hash get_resource_by_hash Read get_resource_data Get resource binary data. Read get_resource_recognition Get resource recognition data (OCR/text recognition for images/PDFs). Read get_resource_search_text Get extracted search text from a resource. Read get_search Get saved search details by GUID. Read get_sync_state Get sync state information. Read get_tag Get tag details by GUID. Read list_note_versions List previous versions of a note (Premium only). Read list_notebooks List all notebooks in the Evernote account. Read list_notes List notes in a notebook or all notes. Read list_reminders list_reminders Read list_searches List all saved searches in the Evernote account. Read list_tags_by_notebook List all tags used in a specific notebook. Read search_notes search_notes

EXPLORE

Related servers

Other MCP servers with similar tools — same risk classification, starter policies for each.

FAQ

Questions about Evernote MCP Server

Can an AI agent delete data through the Evernote MCP Server MCP server? +

Yes. The Evernote MCP Server server exposes 6 destructive tools including delete_note, delete_notebook, expunge_note. These permanently remove resources with no undo. PolicyLayer blocks destructive tools by default so they never reach the upstream server.

How do I prevent bulk modifications through Evernote MCP Server? +

The Evernote MCP Server server has 16 write tools including clear_reminder, untag_all, complete_reminder. Set a rate limit in your policy -- for example, 10 calls per hour prevents an agent from making more than 10 modifications per hour. PolicyLayer enforces this at the gateway, before calls reach Evernote MCP Server.

How many tools does the Evernote MCP Server MCP server expose? +

52 tools across 3 categories: Destructive, Read, Write. 30 are read-only. 22 can modify, create, or delete data.

How do I enforce a policy on Evernote MCP Server? +

Register the Evernote MCP Server MCP server in PolicyLayer, apply the suggested rules above (adjust the limits to your use case), and point your AI client at the PolicyLayer proxy URL instead of the server directly. Your agents keep the same tools; PolicyLayer evaluates every call against policy before it executes. Nothing to install, live in minutes.

Enforce policy on every Evernote MCP Server tool call.

Deterministic rules across all 52 Evernote MCP Server tools. Per-identity grants. Full audit log. Live in minutes. Nothing to install.

ENFORCE POLICY ON EVERNOTE →

Free to start. No card required.

52 Evernote MCP Server tools catalogued and risk-classified — across an index of 43,000+ MCP servers.