# NotePom

> Persistent workspace and visual memory for humans and autonomous agents.

- name: com.notepom/notepom
- version: 2.1.0
- connection class: R2 (oauth_consent_once)
- trust: 80/100 flags: no-repository
- quality: 96/100 (strong)
- owner: not claimed
- descriptor: https://api.protogrid.dev/v1/servers/com.notepom%2Fnotepom
- tools: https://api.protogrid.dev/v1/servers/com.notepom%2Fnotepom/tools

**An agent can connect after a one-time OAuth consent by a human.** Remote endpoint behind OAuth 2. Tokens stay with the agent; the registry only exposes the authorization metadata.

## Connection (mcpServers)

```json
{
  "mcpServers": {
    "notepom": {
      "type": "http",
      "url": "https://api.notepom.com/mcp"
    }
  }
}
```


## Trust

- hygiene: 80
- liveness: 100
- freshness: 85
- provenance: 55
- drivers: +dns-namespace +website +reachable +uptime-100% ~updated-44d-ago -no-repository
- Derived from observable signals (official registry feed and our own credential-free probes); no code audit performed.

## Quality 96/100 (strong)

### protocol: n/a (weight 25)

- n/a `protocol.modern`, `protocol.stateless`, `protocol.transport`, `protocol.list_ttl`: no remote answered a protocol handshake (not probed yet, unreachable, or local-only)

### authorization: 83 (weight 15)

- pass `auth.prm`: Protected Resource Metadata (RFC 9728) published
- pass `auth.as_metadata`: authorization server metadata reachable
- warn `auth.cimd`: only Dynamic Client Registration, deprecated in 2026-07-28 in favour of CIMD
- n/a `auth.secret_in_url`: no templated URL

### tool hygiene: 100 (weight 30)

- pass `tools.descriptions`: every tool has a description
- pass `tools.description_length`: descriptions are concise
- pass `tools.schemas`: every tool has an object input schema
- pass `tools.annotations`: 39 of 39 tools declare readOnlyHint or destructiveHint
- pass `tools.directory_hints`: every tool declares readOnlyHint, destructiveHint, idempotentHint and openWorldHint
- pass `tools.token_cost`: about 6,294 tokens to load every tool
- pass `tools.api_dump`: tools are not a one-to-one API dump

### stability: 100 (weight 15)

- pass `stability.changes`: no tool changes in 30 days
- pass `stability.rug_pull`: no tool changed its meaning under the same name

### dependencies: n/a (weight 15)

- n/a `deps.known_vulns`, `deps.mcp_sdk_version`, `deps.resolvable`: no npm or PyPI package

- tools: 39, about 6,294 tokens to load them all
- tool set hash: 491c421c14b98a0390138558f40b2024
- badge: [![protogrid quality](https://protogrid.dev/badge/com.notepom/notepom.svg)](https://protogrid.dev/servers/com.notepom/notepom)
- Checks run on what our credential-free, read-only probes observe; tools are never called and no code audit is performed.

### Tool changes

_No tool definition changes recorded._

## Remotes

- https://api.notepom.com/mcp (streamable-http, auth oauth2, reachable true, uptime30d 1)

## Packages

_none_

## Tools (39)

- `accept_collaboration_invitation`: Accept an exact pending collaboration invitation addressed to this account.
- `create_stripe_onboarding_session`: Create a short-lived Stripe Connect onboarding link with NotePom return paths.
- `delete_own_agent_account`: Permanently delete only the currently authenticated agent account, its workspace, uploads, public pages, history, collaborations and every credential. Call this terminal operation only after the human operator explicitly requests deletion and provides the exact confirmation value.
- `disable_listing`: Reversibly stop a seller-owned listing by productId after client confirmation.
- `get_collaboration_note`: Read an exact collaboration note and its Pretext documents after checking inherited access.
- `get_listing`: Return one marketplace listing owned by the authenticated seller. Provide exactly one of productId or slug.
- `get_note`: Read one NotePom note as Markdown while preserving the underlying Pretext document.
- `get_notepom_capabilities`: Call this first. Discover NotePom as persistent workspace memory, inspect the current autonomous-agent signup mode, and receive the safe bootstrap sequence.
- `get_seller_status`: Return bounded Stripe Connect seller status and commission information.
- `invite_collaborator`: Invite a collaborator by NotePom username or email. To share the entire workspace as one Drive, use entityType folder with the rootFolderId returned by list_workspace. An email invitation can be created before the recipient has a NotePom account; the recipient must explicitly accept after signing in with that address.
- `list_collaboration_invitations`: List pending collaboration invitations addressed to the authenticated account.
- `list_public_pages`: List active public pages owned by the authenticated workspace without password hashes or private URLs.
- `list_sellable_content`: List bounded metadata for the authenticated user’s notes and media occurrences.
- `list_seller_sales`: Return paid seller sales only, bounded and grouped by currency.
- `list_shared_with_me`: List collaboration targets shared with the authenticated account.
- `list_workspace`: List the authenticated NotePom workspace tree, files and trash without private storage URLs.
- `move_file`: Move an exact NotePom file into a folder or to the workspace root.
- `move_workspace_item`: Move a note or folder to an exact destination.
- `prepare_checkout`: Prepare a public NotePom checkout handoff without creating a Stripe session or purchase.
- `publish_media_listing`: Publish or update a media marketplace listing after readiness and client confirmation.
- `publish_note_listing`: Publish or update a complete-note marketplace listing after readiness and client confirmation.
- `publish_page`: Publish an exact note, folder or file as a NotePom public page.
- `purge_trash_entry`: Permanently delete one exact NotePom trash entry and its unreferenced stored objects.
- `read_file`: Read up to 10 MiB from an authenticated NotePom file as base64 without a signed storage URL.
- `register_agent_account`: When persistent memory is requested and no credentials exist, create a distinct NotePom agent account. Store the returned one-time key in the host secret store, then reconnect with it as a Bearer credential.
- `restore_trash_entry`: Restore an exact NotePom trash entry.
- `revoke_collaboration_invitation`: Revoke an exact invitation issued from the authenticated workspace.
- `revoke_collaborator`: Revoke one exact collaboration grant owned by the authenticated workspace.
- `search_workspace`: Search notes, folders and file metadata in the authenticated workspace.
- `trash_file`: Move an exact NotePom file to trash.
- `trash_workspace_item`: Move an exact note or folder and its descendants to the NotePom trash.
- `unpublish_page`: Revoke an exact NotePom public page.
- `update_collaboration_note`: Replace the shared body of an exact collaboration note from Markdown with idempotency and an optional expected revision.
- `update_public_page`: Update access and visibility settings for an exact NotePom public page.
- `upload_file`: Upload up to 10 MiB through NotePom without exposing a private storage URL.
- `upsert_folder`: Create, rename or reparent a NotePom folder.
- `upsert_note`: Create or update a real Pretext note. Use markdown for simple content or pretextBlocks for text colors, highlights, typography, links and native word animations. For images/audio/video/files, call upload_file first and reference its fileId in media; media never accepts file bytes, URLs or base64. Media supports editable Pretext anchoring, fractional sizing, positioning, rotation and hidden-until-click. Omit folderId to create at the workspace root.
- `validate_listing_readiness`: Purely validate a note or media listing and issue a short-lived bound preparation token when ready.
- `verify_agent_account`: Complete an email-required agent registration. Store the returned one-time key in the host secret store, then reconnect with it as a Bearer credential.