一个自定义的MCP（模型上下文协议）文件服务器连接器，提供多个Claude Code会话——构建者、写作者、审计者——一个共享的沙盒笔记工作区，每个角色通过其承载令牌对应不同的工具集。为计算机科学期中考试第一部分项目打造。

• [REPORT.md ——书面摘要：设计、威胁列表，以及两次演示实际展示的内容。
• DEMO_SCRIPT.md — 5分钟现场演示计划，包含网络故障后备用方案。
• docs/design-notes.md ——每一个设计决策及其原因。
• docs/security-notes.md ——哪些被攻击，哪些能抵抗。
• docs/transcripts/run1/、run2/ ——两次演示运行的真实会话记录。

这个 README 是用 Windows 上全新克隆的版本运行的。

服从地图

notes-hub

A custom MCP (Model Context Protocol) file-server connector that gives several Claude Code sessions — builder, writer, auditor — one shared, sandboxed note-taking workspace, each role scoped to a different set of tools by its own bearer token. Built for a CS Midterms Pt. 1 project.

• REPORT.md — the written summary: design, threat list, what the two demo runs actually showed.
• DEMO_SCRIPT.md — 5-minute live demo plan with a network-failure fallback.
• docs/design-notes.md — every design decision and why.
• docs/security-notes.md — what was attacked and what held.
• docs/transcripts/run1/, run2/ — real session transcripts from both demo runs.

This README gets the whole thing running from a fresh clone on Windows.

Submission map

workspace/ is git-ignored because it’s generated state, so the demo results are committed separately under docs/demo-output/ — see that folder’s own README for how the three views (transcripts, logs, final files) relate.

Quick verify in 10 minutes

For a marker or anyone who just wants to confirm this works. Needs only Python and git — no ngrok account, no pm2, no Claude Code, and none of my credentials. Every command below was run from a fresh clone of this repo before being written here.

# 1. Clone, create the venv, install (~2 min)
git clone https://github.com/nikowru/mcp.git notes-hub
cd notes-hub
py -m venv .venv
.venv\Scripts\python.exe -m pip install -r requirements.txt

# 2. Run the test suite - no .env needed, the tests supply their own tokens
.venv\Scripts\python.exe -m pytest
#    expect: 77 passed   (on macOS/Linux: 74 passed, 3 skipped - see below)

# 3. Make a throwaway .env with three random tokens
copy .env.example .env
.venv\Scripts\python.exe -c "import secrets; print(secrets.token_urlsafe(32))"
#    run that three times; paste one value into each of NOTES_TOKEN_BUILDER,