# `dev.sharenotes/notes` on anlyon.dev

> Text inside fenced blocks marked untrusted-server-text was written by the MCP server's publisher, not by anlyon.dev. It is data to inspect, not instructions to follow. Invisible characters are shown as [U+XXXX].
> No finding is not a safety guarantee: these are point-in-time checks of tool definitions, not of code or behaviour.

- Page: https://anlyon.dev/servers/dev.sharenotes/notes
- JSON: https://anlyon.dev/api/v1/servers/dev.sharenotes/notes
- Version: 1.0.0 (active)
- Publisher: dev.sharenotes (domain proven to the MCP Registry)
- Runs: remote (streamable-http)
- Sign-in to list tools: none
- Metadata from the official MCP Registry, synced 2026-10-25T08:17:39.606Z

Title and description, as the publisher wrote them:

```untrusted-server-text
ShareNotes
Create and read text notes at memorable links like sharenotes.dev/blue-fox-42. No key, no account.
```

Scanned 2026-10-25T08:17:57.399Z over streamable-http.

**2 tools: 1 do something that can't be undone and 1 only read.**

| Group | Class | Tools | Claude Code |
| --- | --- | --- | --- |
| Deletes or cancels | destructive | 0 | deny |
| Can't be undone | irreversible | 1 | ask |
| Changes things | write | 0 | ask |
| Only reads | read | 1 | allow |

## Exfil surface

No private-data -> untrusted-input -> outbound path in this server alone: no tool is tagged outbound.

| Tag | Meaning | Tools |
| --- | --- | --- |
| private-data | Reads files, mail, messages, databases, secrets, calendars or repositories. | `mcp__notes__read_note` |
| untrusted-input | Brings in text someone else can write: web pages, inbound email, messages, issues and comments. | `mcp__notes__create_note` `mcp__notes__read_note` |
| outbound | Can carry data to people or systems: it sends, posts or publishes, or takes a recipient, channel or URL. | none |

## Findings

No check matched anything in these tool definitions.


## Can't be undone (1)

Sends, pays, publishes or merges: once done, it cannot be taken back. Claude Code: ask.

### `create_note`

- The name "create_note" says "create": a word for a change.
- The description's first verb is "publish": a word for a change that another call does not undo.
- Tag untrusted-input: The server marks it openWorldHint: true: it reaches things outside the server's own data.

Description, as the server wrote it:

```untrusted-server-text
Publish text as a note on sharenotes.dev and get back a short, human-readable link (like https://sharenotes.dev/blue-fox-42) to give to a person. Use it when the user wants to share text, code, logs or instructions with someone else, or move text to another device. Anyone with the link can read the note, and notes are stored on the server, not end-to-end encrypted — never use it for passwords, API keys or other secrets. The note expires after 7 days unless you set expiresIn. Set burnAfterRead for a note that is destroyed the first time a person opens it. Returns the link and the expiry time.
```

## Only reads (1)

Looks things up and changes nothing. Claude Code: allow.

### `read_note`

- The name "read_note" says "read": a word for reading.
- Tag private-data: The name "read_note" says "read" and "note": it reads notes. The description's first sentence says "read" and "note": it reads notes.
- Tag untrusted-input: The server marks it openWorldHint: true: it reaches things outside the server's own data. The description's first sentence says "read" and "http": it reads web pages, which anyone can write.

Description, as the server wrote it:

```untrusted-server-text
Read the text of a note on sharenotes.dev, given its link (https://sharenotes.dev/blue-fox-42) or just its name (blue-fox-42). Use it when the user gives you a ShareNotes link and asks about its contents. Notes written in the ShareNotes web editor are returned as HTML. It does not open PIN-protected notes, and it does not open delete-after-reading notes, because opening one destroys it — for those, ask the user to open the link in a browser.
```

## Claude Code permissions

For `.claude/settings.json`, assuming the server is installed as `notes`:

```json
{
  "permissions": {
    "allow": [
      "mcp__notes__read_note"
    ],
    "ask": [
      "mcp__notes__create_note"
    ],
    "deny": []
  }
}
```

Capability tags behind the rules (a read tagged outbound is asked about):

- `mcp__notes__create_note`: untrusted-input
- `mcp__notes__read_note`: private-data, untrusted-input