Skip to content

Google Keep

by mcp-dir · remote · no sign-in to list tools · v0.1.0 · published by GitHub user mcp-dir

Google Keep MCP, read and edit your notes, lists, labels and collaborators. Connect with your Google

Deletes · 6Changes · 15
CompareRegistry entry

30 tools: 6 can delete or cancel things, 15 change things and 9 only read.

Scanned Oct 21, 2026

8 checks matched something in the tool definitions. No finding is not a safety guarantee. How the checks work.

claude mcp add --transport http keep https://api.mcp.ai/p_keep

Findings

Matches of fixed checks, with the text they matched.

6 warn2 info
  • Warnkeep_archive_note

    The server marks "keep_archive_note" not destructive (destructiveHint: false), and its own name, description or input give the class "destructive".

    Matched text

    annotations: {"readOnlyHint":false,"destructiveHint":false,"idempotentHint":false,"openWorldHint":false}; The name "keep_archive_note" says "archive": a word for removing or ending something.

    What this check looks for
  • Warnkeep_delete_note

    The server marks "keep_delete_note" not destructive (destructiveHint: false), and its own name, description or input give the class "destructive".

    Matched text

    annotations: {"readOnlyHint":false,"destructiveHint":false,"idempotentHint":false,"openWorldHint":false}; The name "keep_delete_note" says "delete": a word for removing or ending something.

    What this check looks for
  • Warnkeep_delete_list_item

    The server marks "keep_delete_list_item" not destructive (destructiveHint: false), and its own name, description or input give the class "destructive".

    Matched text

    annotations: {"readOnlyHint":false,"destructiveHint":false,"idempotentHint":false,"openWorldHint":false}; The name "keep_delete_list_item" says "delete": a word for removing or ending something.

    What this check looks for
  • Warnkeep_delete_label

    The server marks "keep_delete_label" not destructive (destructiveHint: false), and its own name, description or input give the class "destructive".

    Matched text

    annotations: {"readOnlyHint":false,"destructiveHint":false,"idempotentHint":false,"openWorldHint":false}; The name "keep_delete_label" says "delete": a word for removing or ending something.

    What this check looks for
  • Warnkeep_remove_label_from_note

    The server marks "keep_remove_label_from_note" not destructive (destructiveHint: false), and its own name, description or input give the class "destructive".

    Matched text

    annotations: {"readOnlyHint":false,"destructiveHint":false,"idempotentHint":false,"openWorldHint":false}; The name "keep_remove_label_from_note" says "remove": a word for removing or ending something.

    What this check looks for
  • Warnkeep_remove_note_collaborator

    The server marks "keep_remove_note_collaborator" not destructive (destructiveHint: false), and its own name, description or input give the class "destructive".

    Matched text

    annotations: {"readOnlyHint":false,"destructiveHint":false,"idempotentHint":false,"openWorldHint":false}; The name "keep_remove_note_collaborator" says "remove": a word for removing or ending something.

    What this check looks for
Show 2 more findings
  • Infoconnect

    The description mentions "credentials".

    Matched text

    description: "...nticated:true and empty pending[]. When credentials are missing, returns connect_url for th..."

    What this check looks for
  • Infomarketplace

    The description mentions "credential".

    Matched text

    description: "...ating the tool list. If the MCP needs a credential/login, invoke returns a connect link; i..."

    What this check looks for

Tools

Open a tool for its reasons and full description. Descriptions are the publisher's own words, shown as they are.

30 tools

Deletes or cancels 6Claude Code: deny
  • keep_archive_noteArquiva ou desarquiva uma nota (`archived`, default true).1 finding

    Why it is in this group

    • The name "keep_archive_note" says "archive": a word for removing or ending something.
    • The server marks it not destructive (destructiveHint: false), but an annotation never lowers a class.

    Findings

    • Warn

      The server marks "keep_archive_note" not destructive (destructiveHint: false), and its own name, description or input give the class "destructive".

      Matched text

      annotations: {"readOnlyHint":false,"destructiveHint":false,"idempotentHint":false,"openWorldHint":false}; The name "keep_archive_note" says "archive": a word for removing or ending something.

      What this check looks for
    Description, as the server wrote it
    Arquiva ou desarquiva uma nota (`archived`, default true). Bulk support: accepts note_ids for batched execution.

    Annotations the server declares

    • title: Archive / Unarchive Note
    • readOnlyHint: false
    • destructiveHint: false
    • idempotentHint: false
    • openWorldHint: false
  • keep_delete_labelApaga uma label pelo nome.1 finding

    Why it is in this group

    • The name "keep_delete_label" says "delete": a word for removing or ending something.
    • The server marks it not destructive (destructiveHint: false), but an annotation never lowers a class.

    Findings

    • Warn

      The server marks "keep_delete_label" not destructive (destructiveHint: false), and its own name, description or input give the class "destructive".

      Matched text

      annotations: {"readOnlyHint":false,"destructiveHint":false,"idempotentHint":false,"openWorldHint":false}; The name "keep_delete_label" says "delete": a word for removing or ending something.

      What this check looks for
    Description, as the server wrote it
    Apaga uma label pelo nome.

    Annotations the server declares

    • title: Delete Label
    • readOnlyHint: false
    • destructiveHint: false
    • idempotentHint: false
    • openWorldHint: false
  • keep_delete_list_itemRemove um item de checklist por item_id.1 finding

    Why it is in this group

    • The name "keep_delete_list_item" says "delete": a word for removing or ending something.
    • The server marks it not destructive (destructiveHint: false), but an annotation never lowers a class.

    Findings

    • Warn

      The server marks "keep_delete_list_item" not destructive (destructiveHint: false), and its own name, description or input give the class "destructive".

      Matched text

      annotations: {"readOnlyHint":false,"destructiveHint":false,"idempotentHint":false,"openWorldHint":false}; The name "keep_delete_list_item" says "delete": a word for removing or ending something.

      What this check looks for
    Description, as the server wrote it
    Remove um item de checklist por item_id. Bulk support: accepts item_ids for batched execution.

    Annotations the server declares

    • title: Delete List Item
    • readOnlyHint: false
    • destructiveHint: false
    • idempotentHint: false
    • openWorldHint: false
  • keep_delete_noteApaga uma nota permanentemente (não dá pra desfazer).1 finding

    Why it is in this group

    • The name "keep_delete_note" says "delete": a word for removing or ending something.
    • The server marks it not destructive (destructiveHint: false), but an annotation never lowers a class.

    Findings

    • Warn

      The server marks "keep_delete_note" not destructive (destructiveHint: false), and its own name, description or input give the class "destructive".

      Matched text

      annotations: {"readOnlyHint":false,"destructiveHint":false,"idempotentHint":false,"openWorldHint":false}; The name "keep_delete_note" says "delete": a word for removing or ending something.

      What this check looks for
    Description, as the server wrote it
    Apaga uma nota permanentemente (não dá pra desfazer). Bulk support: accepts note_ids for batched execution.

    Annotations the server declares

    • title: Delete Note
    • readOnlyHint: false
    • destructiveHint: false
    • idempotentHint: false
    • openWorldHint: false
  • keep_remove_label_from_noteRemove uma label (por nome) de uma nota.1 finding

    Why it is in this group

    • The name "keep_remove_label_from_note" says "remove": a word for removing or ending something.
    • The server marks it not destructive (destructiveHint: false), but an annotation never lowers a class.

    Findings

    • Warn

      The server marks "keep_remove_label_from_note" not destructive (destructiveHint: false), and its own name, description or input give the class "destructive".

      Matched text

      annotations: {"readOnlyHint":false,"destructiveHint":false,"idempotentHint":false,"openWorldHint":false}; The name "keep_remove_label_from_note" says "remove": a word for removing or ending something.

      What this check looks for
    Description, as the server wrote it
    Remove uma label (por nome) de uma nota. Bulk support: accepts note_ids for batched execution.

    Annotations the server declares

    • title: Remove Label from Note
    • readOnlyHint: false
    • destructiveHint: false
    • idempotentHint: false
    • openWorldHint: false
  • keep_remove_note_collaboratorRemove um colaborador (por email) de uma nota.1 finding

    Why it is in this group

    • The name "keep_remove_note_collaborator" says "remove": a word for removing or ending something.
    • The server marks it not destructive (destructiveHint: false), but an annotation never lowers a class.

    Findings

    • Warn

      The server marks "keep_remove_note_collaborator" not destructive (destructiveHint: false), and its own name, description or input give the class "destructive".

      Matched text

      annotations: {"readOnlyHint":false,"destructiveHint":false,"idempotentHint":false,"openWorldHint":false}; The name "keep_remove_note_collaborator" says "remove": a word for removing or ending something.

      What this check looks for
    Description, as the server wrote it
    Remove um colaborador (por email) de uma nota. Bulk support: accepts note_ids for batched execution.

    Annotations the server declares

    • title: Remove Note Collaborator
    • readOnlyHint: false
    • destructiveHint: false
    • idempotentHint: false
    • openWorldHint: false
Changes things 15Claude Code: ask
  • authenticateMCP.AI for IDE agents (Cursor, etc.): log in in the browser, copy the access token.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    MCP.AI for IDE agents (Cursor, etc.): log in in the browser, copy the access token. Best: add it to this server's config as a header `Authorization: Bearer <token>` for a permanent, non-expiring connection. Or paste it here for a session-only login: call with { token: "<jwt>" } after the user pastes, or with no args to get the link.

    Annotations the server declares

    • title: Authenticate
    • readOnlyHint: false
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • keep_add_label_to_noteAnexa uma label (por nome, criada se não existir) a uma nota.No findings

    Why it is in this group

    • The name "keep_add_label_to_note" says "add": a word for a change.
    Description, as the server wrote it
    Anexa uma label (por nome, criada se não existir) a uma nota. Bulk support: accepts note_ids for batched execution.

    Annotations the server declares

    • title: Add Label to Note
    • readOnlyHint: false
    • destructiveHint: false
    • idempotentHint: false
    • openWorldHint: false
  • keep_add_list_itemAdiciona um item a uma checklist.No findings

    Why it is in this group

    • The name "keep_add_list_item" says "add": a word for a change.
    Description, as the server wrote it
    Adiciona um item a uma checklist. Bulk support: accepts note_ids for batched execution.

    Annotations the server declares

    • title: Add List Item
    • readOnlyHint: false
    • destructiveHint: false
    • idempotentHint: false
    • openWorldHint: false
  • keep_add_note_collaboratorCompartilha uma nota com um colaborador (por email).No findings

    Why it is in this group

    • The name "keep_add_note_collaborator" says "add": a word for a change.
    Description, as the server wrote it
    Compartilha uma nota com um colaborador (por email). Bulk support: accepts note_ids for batched execution.

    Annotations the server declares

    • title: Add Note Collaborator
    • readOnlyHint: false
    • destructiveHint: false
    • idempotentHint: false
    • openWorldHint: false
  • keep_create_labelCria uma nova label.No findings

    Why it is in this group

    • The name "keep_create_label" says "create": a word for a change.
    Description, as the server wrote it
    Cria uma nova label.

    Annotations the server declares

    • title: Create Label
    • readOnlyHint: false
    • destructiveHint: false
    • idempotentHint: false
    • openWorldHint: false
  • keep_create_listCria uma checklist no Google Keep.No findings

    Why it is in this group

    • The name "keep_create_list" says "create": a word for a change.
    Description, as the server wrote it
    Cria uma checklist no Google Keep. `items` = array de { text, checked }. Recebe a label 'keep-mcp' automaticamente.

    Annotations the server declares

    • title: Create Checklist
    • readOnlyHint: false
    • destructiveHint: false
    • idempotentHint: false
    • openWorldHint: false
  • keep_create_noteCria uma nota de texto no Google Keep.No findings

    Why it is in this group

    • The name "keep_create_note" says "create": a word for a change.
    Description, as the server wrote it
    Cria uma nota de texto no Google Keep. Recebe a label 'keep-mcp' automaticamente pra poder ser gerida depois.

    Annotations the server declares

    • title: Create Note
    • readOnlyHint: false
    • destructiveHint: false
    • idempotentHint: false
    • openWorldHint: false
  • keep_pin_noteFixa ou desafixa uma nota (`pinned`, default true).No findings

    Why it is in this group

    • The name "keep_pin_note" says "pin": a word for a change.
    Description, as the server wrote it
    Fixa ou desafixa uma nota (`pinned`, default true). Bulk support: accepts note_ids for batched execution.

    Annotations the server declares

    • title: Pin / Unpin Note
    • readOnlyHint: false
    • destructiveHint: false
    • idempotentHint: false
    • openWorldHint: false
  • keep_restore_noteRestaura uma nota da lixeira.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    Restaura uma nota da lixeira. Bulk support: accepts note_ids for batched execution.

    Annotations the server declares

    • title: Restore Note
    • readOnlyHint: false
    • destructiveHint: false
    • idempotentHint: false
    • openWorldHint: false
  • keep_set_note_colorDefine a cor de uma nota.No findings

    Why it is in this group

    • The name "keep_set_note_color" says "set": a word for a change.
    Description, as the server wrote it
    Define a cor de uma nota. Uma de: DEFAULT, RED, ORANGE, YELLOW, GREEN, TEAL, BLUE, CERULEAN, PURPLE, PINK, BROWN, GRAY. Bulk support: accepts note_ids for batched execution.

    Annotations the server declares

    • title: Set Note Color
    • readOnlyHint: false
    • destructiveHint: false
    • idempotentHint: false
    • openWorldHint: false
  • keep_trash_noteMove uma nota pra lixeira.No findings

    Why it is in this group

    • The description's first verb is "move": a word for a change.
    Description, as the server wrote it
    Move uma nota pra lixeira. Bulk support: accepts note_ids for batched execution.

    Annotations the server declares

    • title: Trash Note
    • readOnlyHint: false
    • destructiveHint: false
    • idempotentHint: false
    • openWorldHint: false
  • keep_update_list_itemAtualiza texto e/ou estado (checked) de um item de checklist (por item_id).No findings

    Why it is in this group

    • The name "keep_update_list_item" says "update": a word for a change.
    Description, as the server wrote it
    Atualiza texto e/ou estado (checked) de um item de checklist (por item_id). Bulk support: accepts item_ids for batched execution.

    Annotations the server declares

    • title: Update List Item
    • readOnlyHint: false
    • destructiveHint: false
    • idempotentHint: false
    • openWorldHint: false
  • keep_update_noteAtualiza título e/ou texto de uma nota.No findings

    Why it is in this group

    • The name "keep_update_note" says "update": a word for a change.
    Description, as the server wrote it
    Atualiza título e/ou texto de uma nota. Pra listas, edite os itens com os tools de list item. Bulk support: accepts note_ids for batched execution.

    Annotations the server declares

    • title: Update Note
    • readOnlyHint: false
    • destructiveHint: false
    • idempotentHint: false
    • openWorldHint: false
  • marketplaceThe official mcp.ai marketplace — the in-platform catalog of every MCP/tool, AND the way to run them.1 finding

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.

    Findings

    • Info

      The description mentions "credential".

      Matched text

      description: "...ating the tool list. If the MCP needs a credential/login, invoke returns a connect link; i..."

      What this check looks for
    Description, as the server wrote it
    The official mcp.ai marketplace — the in-platform catalog of every MCP/tool, AND the way to run them. Covers capability requests like "find an MCP that does X", "consulta um CPF", "is there a tool for Y". Core flow: action=search discovers MCPs by intent → describe returns one MCP's full profile (every tool with its id + params, pricing, auth) so you pick the right tool_id → invoke RUNS that tool. KEY: invoke works even when the MCP is NOT installed — it runs the tool pontualmente (one-off), without adding the MCP to the toolkit and without bloating the tool list. If the MCP needs a credential/login, invoke returns a connect link; if it is paid and the wallet is empty, invoke returns a checkout/top-up link (the user opens it, then you retry). Use install only to make an MCP PERMANENT in the active toolkit (its tools then show up natively in future sessions); prefer invoke for a single/occasional use. list_tools lists what is callable right now. subscribe/cancel handle per-MCP billing; report_bug sends feedback; request_mcp asks us to build a NEW MCP when nothing fits. Search/describe flag installed_in_toolkit vs installed_in_workspace. Writes (install/uninstall/subscribe/cancel and the one-off install behind invoke) require workspace owner/admin. It also carries the mcp.ai PROMPT LIBRARY, which is about ready-made prompt TEXT rather than MCPs: search_prompts finds one, get_prompt returns its full text with {{variables}} filled, and publish_prompt saves a prompt and returns a shareable mcp.ai/p/<slug> link that opens without login.

    Annotations the server declares

    • title: Marketplace
    • readOnlyHint: false
    • destructiveHint: false
    • idempotentHint: false
    • openWorldHint: true
  • report_bugReport a bug, missing feature, or send feedback.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    Report a bug, missing feature, or send feedback. Include the conversation array with recent messages for reproduction.

    Annotations the server declares

    • title: Report Bug
    • readOnlyHint: false
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
Only reads 9Claude Code: allow
  • connectReturns connection status and URLs.1 finding

    Why it is in this group

    • The description's first verb is "return": a word for reading.

    Findings

    • Info

      The description mentions "credentials".

      Matched text

      description: "...nticated:true and empty pending[]. When credentials are missing, returns connect_url for th..."

      What this check looks for
    Description, as the server wrote it
    Returns connection status and URLs. When all providers are connected, returns authenticated:true and empty pending[]. When credentials are missing, returns connect_url for the toolkit and per-install URLs.

    Annotations the server declares

    • title: Connection Status
    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • keep_findBusca notas no Google Keep.No findings

    Why it is in this group

    • The name "keep_find" says "find": a word for reading.
    Description, as the server wrote it
    Busca notas no Google Keep. Filtros opcionais: query (título/texto), labels, colors, pinned, archived, trashed (default false).

    Annotations the server declares

    • title: Find Notes
    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • keep_get_noteRetorna uma nota (ou lista) do Google Keep pelo id.No findings

    Why it is in this group

    • The name "keep_get_note" says "get": a word for reading.
    Description, as the server wrote it
    Retorna uma nota (ou lista) do Google Keep pelo id. Bulk support: accepts note_ids for batched execution.

    Annotations the server declares

    • title: Get Note
    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • keep_list_accountsLista as contas Google Keep vinculadas a este install (id/email, label).No findings

    Why it is in this group

    • The name "keep_list_accounts" says "list": a word for reading.
    Description, as the server wrote it
    Lista as contas Google Keep vinculadas a este install (id/email, label). Use pra descobrir o `account` quando há várias.

    Annotations the server declares

    • title: List Linked Google Keep Accounts
    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • keep_list_labelsLista todas as labels da conta.No findings

    Why it is in this group

    • The name "keep_list_labels" says "list": a word for reading.
    Description, as the server wrote it
    Lista todas as labels da conta.

    Annotations the server declares

    • title: List Labels
    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • keep_list_note_collaboratorsLista os colaboradores (emails) com quem a nota é compartilhada.No findings

    Why it is in this group

    • The name "keep_list_note_collaborators" says "list": a word for reading.
    Description, as the server wrote it
    Lista os colaboradores (emails) com quem a nota é compartilhada. Bulk support: accepts note_ids for batched execution.

    Annotations the server declares

    • title: List Note Collaborators
    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • keep_list_note_mediaLista os blobs de mídia (imagens/áudio/desenhos) de uma nota, com links.No findings

    Why it is in this group

    • The name "keep_list_note_media" says "list": a word for reading.
    Description, as the server wrote it
    Lista os blobs de mídia (imagens/áudio/desenhos) de uma nota, com links. Bulk support: accepts note_ids for batched execution.

    Annotations the server declares

    • title: List Note Media
    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • show_versionShow the current MCP platform and adapter versions.No findings

    Why it is in this group

    • The name "show_version" says "show": a word for reading.
    Description, as the server wrote it
    Show the current MCP platform and adapter versions.

    Annotations the server declares

    • title: Show Version
    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • toolkit_infoReturns the current toolkit state: installed MCPs, their connection status, the accounts connected to each one, and how many catalog tools each exposes.No findings

    Why it is in this group

    • The description's first verb is "return": a word for reading.
    Description, as the server wrote it
    Returns the current toolkit state: installed MCPs, their connection status, the accounts connected to each one, and how many catalog tools each exposes.

    Annotations the server declares

    • title: Toolkit Info
    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false

This is not a safety rating, and no finding is not a safety guarantee. The groups and findings come from fixed checks of the tool definitions the server returned on the date shown, not from its code or what it does when called. How the checks work.

Install

Pinned to version 0.1.0. Values in angle brackets are yours to fill in.

claude mcp add --transport http keep https://api.mcp.ai/p_keep

Run in a terminal.

Claude Code permissions

Allow the reads, ask before a change, deny the deletes. Paste into .claude/settings.json.

.claude/settings.json
{
  "permissions": {
    "allow": [
      "mcp__keep__keep_list_accounts",
      "mcp__keep__keep_find",
      "mcp__keep__keep_get_note",
      "mcp__keep__keep_list_labels",
      "mcp__keep__keep_list_note_collaborators",
      "mcp__keep__keep_list_note_media",
      "mcp__keep__show_version",
      "mcp__keep__connect",
      "mcp__keep__toolkit_info"
    ],
    "ask": [
      "mcp__keep__keep_create_note",
      "mcp__keep__keep_create_list",
      "mcp__keep__keep_update_note",
      "mcp__keep__keep_pin_note",
      "mcp__keep__keep_set_note_color",
      "mcp__keep__keep_trash_note",
      "mcp__keep__keep_restore_note",
      "mcp__keep__keep_add_list_item",
      "mcp__keep__keep_update_list_item",
      "mcp__keep__keep_create_label",
      "mcp__keep__keep_add_label_to_note",
      "mcp__keep__keep_add_note_collaborator",
      "mcp__keep__report_bug",
      "mcp__keep__marketplace",
      "mcp__keep__authenticate"
    ],
    "deny": [
      "mcp__keep__keep_archive_note",
      "mcp__keep__keep_delete_note",
      "mcp__keep__keep_delete_list_item",
      "mcp__keep__keep_delete_label",
      "mcp__keep__keep_remove_label_from_note",
      "mcp__keep__keep_remove_note_collaborator"
    ]
  }
}

Tools that only read are allowed, tools that change things ask first, tools that delete or cancel are denied. It assumes the server is installed as keep. Review it before you use it.