zennotes
Keyboard-first local Markdown notes with Vim motions, diagrams, and MCP integration.
No outside reports on file
ZenNotes is relatively safe for local use if your computer is trusted, but the MCP integration means any AI tool connected to it can access all your notes—so avoid storing passwords, secrets, or highly sensitive information in this app.
Based on public adoption and transparency signals as of Oct 23, 2026. Our opinion, not a code audit or security guarantee.
What it can access
- Local filesReads local filesNOTED
- Command executionNo shell command runner notedLOW
- Network reachConnects to outside service APINOTED
- CredentialsNo API token requiredLOW
- Package sourceGitHub (ZenNotes/zennotes)PUBLIC
Inferred from this listing’s public package details and description. Check the project’s source before installing.
Install
No npm or PyPI package is listed. Install from source: github.com/ZenNotes/zennotes ↗
About Zennotes
ZenNotes is a note-taking app that runs on your computer and lets you write notes in Markdown format (plain text with simple formatting). It includes Vim-style keyboard shortcuts (a power-user text editor style) and can draw diagrams. It also works with MCP, which lets AI assistants like Claude read and write your notes.
Who it’s for
People who like writing notes with keyboard shortcuts and want a local (not cloud-based) note system. Developers or technical users who use Vim and want AI to help organize or search their notes.
Alternatives
- Obsidian: Popular local Markdown notes with plugins and AI integration options
- Logseq: Open-source note app with Markdown, Vim keys, and local-first design
- Joplin: Free note-taking with encryption and multiple device sync
- Neovim or Vim with note plugins: For users already comfortable with terminal text editors
Setup
Check these steps against the project’s own instructions before running anything.
Follow the project's README on GitHub for installation steps, as setup details depend on your operating system and whether you want to run it standalone or configure it with Claude Desktop via MCP settings.
Why this grade
Signal-based grade (3/7 points): well starred on GitHub, public source code. This reflects adoption and transparency, not a code review.
Popularity and upkeep
- GitHub stars
- 2.6k
- Listing last refreshed
- 2026-10-29
These are public popularity signals, not a maintenance check. Look at the repository’s commit history and open issues.
Security reports
No reports found for this package in our research (last checked 2026-10-29).
Risks to watch for
- Local file access: The MCP connector can read and write all your Markdown notes on disk; if compromised, an AI could delete or modify sensitive information
- No built-in encryption: Notes are stored as plain text files; anyone with access to your computer can read them
- MCP instruction injection: Tricky note content (like hidden prompts in diagrams or metadata) could potentially trick the AI into doing unintended actions
- Unvetted third-party code: The project has 2,551 GitHub stars but no clear security audit history listed; bugs could expose your notes
- Vim motion complexity: Unfamiliar keyboard commands could accidentally delete notes if misconfigured
How to lower the risk
Least-privilege permissions
- Only enable MCP integration with Claude when you actually need it
- Keep your notes in a folder that only your user account can access
Network isolation
- Run ZenNotes only on your local machine; do not expose it to the internet
- Disable MCP if you're using untrusted AI services
Monitoring
- Review what notes the AI reads before you share them in conversations
- Check your notes folder occasionally for unexpected changes or deletions
Red flags to watch for
- Prompts in your notes that ask the AI to ignore safety rules or run commands
- Large sudden changes to notes you did not make yourself
- Requests from the app to connect to external servers or send data online
Questions
How do I install Zennotes?
Zennotes does not publish a standalone npm or PyPI package. Clone or follow the setup instructions in its source repository at github.com/ZenNotes/zennotes.
Are there security reports about Zennotes?
No reports found for this package in our research (last checked 2026-10-29). Zennotes currently holds Grade C (Moderate risk signals) based on public adoption and transparency signals. Key risk areas to watch include local file access, no built-in encryption, mcp instruction injection.
Is Zennotes actively maintained?
Zennotes has 2.6k GitHub stars. Our directory data was last refreshed on 2026-10-29. Check recent commit activity, release tags, and open issues at github.com/ZenNotes/zennotes before pinning it in production.
What are alternatives to Zennotes?
Notable alternatives to Zennotes include Obsidian (Popular local Markdown notes with plugins and AI integration options), Logseq (Open-source note app with Markdown, Vim keys, and local-first design), Joplin (Free note-taking with encryption and multiple device sync), Neovim or Vim with note plugins (For users already comfortable with terminal text editors). You can also compare Zennotes side by side with other MCP servers in the Related tools section on this page.
README badge and team notes
Maintain or use Zennotes? Show its live grade in your GitHub README, docs site, or run a check from the terminal before you install.
GitHub README Markdown:
[](https://agentarmorhq.com/skills/zennotes-zennotes)HTML embed:
<a href="https://agentarmorhq.com/skills/zennotes-zennotes"><img src="https://agentarmorhq.com/api/badge/zennotes-zennotes" alt="AgentArmorHQ Risk Grade for Zennotes" height="20" /></a>Terminal check:
curl -fsSL https://agentarmorhq.com/api/cli | node --input-type=module - check "zennotes-zennotes"Share with your security lead
Need sign-off to use zennotes? Copy this note for Slack, a ticket or a pull request.
### AgentArmorHQ Security Review Memo: zennotes
- **Listing URL:** https://agentarmorhq.com/skills/zennotes-zennotes
- **Type:** App connector
- **Risk Grade:** Grade C (Moderate risk signals)
- **Outside Security Advisories on File:** 0
- **Public Adoption:** 2.6k GitHub stars
#### Permission & Blast-Radius Signals
- **Local files:** Reads local files
- **Command execution:** No shell command runner noted
- **Network reach:** Connects to outside service API
- **Credentials:** No API token required
- **Package source:** GitHub (ZenNotes/zennotes)
#### Recommended Hardened Setup
- **Source Repo:** https://github.com/ZenNotes/zennotes
- **Controls:** Pin an exact version in `.mcp.json`, scope access to a single workspace folder, and use a least-privilege read-only token where supported.
_Based on public adoption and transparency signals as of Oct 23, 2026. Our opinion, not a code audit or security guarantee._Key facts
- Type
- App connector
- Publisher
- ZenNotes
- Source code
- github.com/ZenNotes/zennotes
- Est. context load
- ~1.2k tokens / turn (~7 tool schemas, 0.6% of 200k context)
- Popularity
- 2.6k GitHub stars
- Last updated
- 2026-10-29
- Last graded
- 2026-10-23
Community
Discussions for Zennotes
Ask questions or share configuration tips. Governed by our Community Rules & Terms.
No posts match this filter yet.
Be the first to ask a question or share a working tip.
Check before you install, in Claude
Your assistant answers Block, Review or No known issues for any package before it installs it.
Get this check inside Claude