Model Context Protocol moderate risk

Kibela

MCP server for Kibela, enabling LLMs to search, retrieve, and manage notes, groups, and users within a Kibela knowledge base, using API token authentication.

Connections & Capabilities

Connects To

GitHubDocker

Capabilities

readwrite

Quickstart

Install

npx @modelcontextprotocol/inspector node ./dist/src/index.js

Config

{
    "mcpServers": {
        "kibela": {
            "command": "npx",
            "args": ["-y", "@kiwamizamurai/mcp-kibela-server"],
            "env": {
                "KIBELA_TEAM": "YOUR_TEAM_NAME",
                "KIBELA_TOKEN": "YOUR_TOKEN"
            }
        }
    }
}

Exposed MCP Tools (12)

safe

kibela_search_notes

Searches Kibela notes based on a given query and optional filters.

Read-only operation; only retrieves information.

safe

kibela_get_my_notes

Retrieves the user's latest notes from Kibela.

Read-only operation; only retrieves information.

safe

kibela_get_note_content

Retrieves the content and comments of a specific note.

Read-only operation; only retrieves information.

safe

kibela_get_groups

Retrieves a list of accessible groups.

Read-only operation; only retrieves information.

safe

kibela_get_group_folders

Retrieves folders within a specific group.

Read-only operation; only retrieves information.

safe

kibela_get_group_notes

Retrieves notes within a group that are not attached to any folder.

Read-only operation; only retrieves information.

safe

kibela_get_folder_notes

Retrieves notes within a specific folder.

Read-only operation; only retrieves information.

safe

kibela_get_users

Retrieves a list of users.

Read-only operation; only retrieves information.

moderate

kibela_like_note

Likes a specific note.

Modifies data by liking a note.

moderate

kibela_unlike_note

Unlikes a specific note.

Modifies data by unliking a note.

safe

kibela_get_recently_viewed_notes

Retrieves the user's recently viewed notes.

Read-only operation; only retrieves information.

safe

kibela_get_note_from_path

Retrieves note content based on its path or URL.

Read-only operation; only retrieves information.

Safety Assessment

This server is relatively safe for read operations, but the ability to like/unlike notes introduces a moderate risk. Storing the API token as an environment variable requires careful handling to prevent unauthorized access. Avoid using this server in untrusted environments.

API token authentication required
Most tools are read-only (search, get)
No direct execution of system commands
Limited scope of write operations (like/unlike notes)

API token stored as environment variable
Write operations available (like/unlike)
Potential for information disclosure if token is compromised
No explicit sandboxing mentioned