SilverBullet API
v1.0.0MCP server for SilverBullet note-taking app - read, write, search, and manage markdown pages
⭐ 1· 1.7k·0 current·0 all-time
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
The name, description, SKILL.md examples, and server.py tools all map to SilverBullet REST endpoints (.fs, .ping, .config). Required binaries and tools referenced in SKILL.md (python/uv, mcporter) are appropriate for running an MCP server and the provided pyproject lists expected deps (mcp[cli], httpx).
Instruction Scope
Runtime instructions confine activity to installing the package, configuring mcporter, setting SILVERBULLET_URL, and running the server. The SKILL.md does not direct the agent to read unrelated files, harvest system credentials, or transmit data to third-party endpoints outside the configured SilverBullet URL.
Install Mechanism
This is an instruction-first skill with a script-based install (uv venv + uv pip install -e .). Installing creates a virtualenv and installs from PyPI (mcp, httpx). This is expected for a Python MCP server, but the install writes files locally and runs package installs — review before running. No downloads from unknown hosts or URL shorteners are present.
Credentials
The code reads a single environment variable (SILVERBULLET_URL) to determine the server address, which is proportionate. However, registry metadata lists no required env vars while SKILL.md and README instruct the user to set SILVERBULLET_URL — this mismatch is a minor inconsistency to be aware of.
Persistence & Privilege
The skill does not request always:true and does not modify other skills or system-wide configuration. It suggests writing a mcporter entry (user-level config) which is appropriate for an MCP server integration.
Assessment
This skill appears to do what it says — it performs HTTP calls to a SilverBullet server and exposes standard file/read/write/search tools. Before installing: 1) Verify the SILVERBULLET_URL you will set (prefer a local or trusted host); the skill can read/write any pages accessible at that URL, so pointing it at an untrusted remote host risks exposing your notes. 2) Inspect server.py and the package contents (you already have them) and confirm you are comfortable running uv pip install -e . locally. 3) Be aware the SKILL.md asks you to add a mcporter entry in ~/.mcporter/mcporter.json and to export SILVERBULLET_URL — these are normal but note the registry metadata did not declare the env var (minor inconsistency). 4) If you run the demo or tests, do so against a test or local SilverBullet instance to avoid accidental modification of production notes. If you want greater assurance, run the package install in an isolated environment and review network traffic from the process while testing.Like a lobster shell, security has layers — review code before you run it.
latestvk974as9kzgwy9rvh7n7c014705802pm0
License
MIT-0
Free to use, modify, and redistribute. No attribution required.
Runtime requirements
Binspython3, uv
