MCP server for Anki flashcards that lets Claude review cards, manage decks, create and update notes, handle tags and media, inspect stats, and drive Anki desktop GUI workflows.
Anki MCP Server can create, update, delete, move, tag, rate, and sync cards and notes through AnkiConnect., Destructive tools include note deletion, media deletion, unused-tag clearing, deck moves, tag replacement, model styling changes, and review rating actions that affect scheduling., The server supports read-only mode that blocks exposed write actions, but users should still review tool calls before enabling unrestricted study or collection-management workflows., Media tools can store files from local paths, URLs, or base64 data and can retrieve media as base64 content., GUI tools can open Anki windows, select cards, edit notes, show answers, and undo the last Anki action., Remote tunnel or ngrok-style setups expose local Anki to cloud-hosted AI clients and require careful authentication, origin, and URL-sharing controls.
Privacy notes
Tool calls can expose deck names, note fields, card contents, tags, review history, media filenames, base64 media, selected notes, collection stats, scheduling metadata, and AnkiConnect errors., Flashcards may contain medical, language-learning, school, work, personal, customer, or confidential study material., Sync can send Anki collection changes to AnkiWeb according to the user's Anki account and sync settings., Local media file paths, URLs imported into cards, and GUI-selected note IDs can enter MCP client context and model logs., Remote tunnel providers and hosted clients may process connection metadata or traffic according to their own policies.
Author
AnkiMCP
Submitted by
oktofeesh1
Claim status
unclaimed
Last verified
2026-06-06
Decision playbook
Review trust signals before you adopt
Signals are present but mixed. Use the checklist below to confirm the source and operational safety for your environment.
Compare context
Selected
0
Current score
63
Baseline
—
Delta
No baseline selected
No major trust-signal divergence detected in the current selection.
Source and provenance checks
Needs review
Confirm ownership and provenance before trusting install instructions.
Source link availableRequired
Open the canonical repository and verify ownership.
Done
Source provenance statusRequired
Marked as source-backed.
Done
Metadata reviewed
No reviewed flag detected in metadata.
Pending
Safety and privacy checks
Complete
Validate risk disclosures before installation or API wiring.
Safety notes presentRequired
Review the listed safety guidance before running commands.
Done
Privacy notes presentRequired
Review data handling notes before connecting accounts or secrets.
Done
Trust level risk gateRequired
Trust level does not block evaluation.
Done
Package and install checks
Needs review
Check package metadata and artifact integrity signals.
Install payload available
Install or copy payload is available for review.
Done
Package verification flag
No package verification flag provided.
Pending
Checksum metadata
No checksum provided for downloaded artifact.
Pending
Compare-driven decision checks
Needs review
Use compare context to validate trade-offs before adoption.
Compare tray has multiple entries
Add at least one more entry to compare trust differences.
5 prerequisites to line up before setup. Includes a review or approval gate.
0/5 ready
Install & runtime3Review & approval215 minutes
Safety & privacy surface
Safety & privacy surface
6 safety and 5 privacy notes across 4 risk areas. Review closely: network access.
4 areas
SafetyGeneralAnki MCP Server can create, update, delete, move, tag, rate, and sync cards and notes through AnkiConnect.
SafetyExecution & processesDestructive tools include note deletion, media deletion, unused-tag clearing, deck moves, tag replacement, model styling changes, and review rating actions that affect scheduling.
SafetyGeneralThe server supports read-only mode that blocks exposed write actions, but users should still review tool calls before enabling unrestricted study or collection-management workflows.
SafetyLocal filesMedia tools can store files from local paths, URLs, or base64 data and can retrieve media as base64 content.
SafetyGeneralGUI tools can open Anki windows, select cards, edit notes, show answers, and undo the last Anki action.
SafetyNetwork accessRemote tunnel or ngrok-style setups expose local Anki to cloud-hosted AI clients and require careful authentication, origin, and URL-sharing controls.
PrivacyLocal filesTool calls can expose deck names, note fields, card contents, tags, review history, media filenames, base64 media, selected notes, collection stats, scheduling metadata, and AnkiConnect errors.
PrivacyGeneralFlashcards may contain medical, language-learning, school, work, personal, customer, or confidential study material.
PrivacyGeneralSync can send Anki collection changes to AnkiWeb according to the user's Anki account and sync settings.
PrivacyLocal filesLocal media file paths, URLs imported into cards, and GUI-selected note IDs can enter MCP client context and model logs.
PrivacyNetwork accessRemote tunnel providers and hosted clients may process connection metadata or traffic according to their own policies.
Disclosure: MIT-licensed TypeScript MCP server published as the `@ankimcp/anki-mcp-server` npm package. This entry is distinct from generic note-taking or study tools because it talks to Anki through AnkiConnect and exposes Anki-specific review, deck, tag, media, model, stats, and GUI tools.
Safety notes
Anki MCP Server can create, update, delete, move, tag, rate, and sync cards and notes through AnkiConnect.
Destructive tools include note deletion, media deletion, unused-tag clearing, deck moves, tag replacement, model styling changes, and review rating actions that affect scheduling.
The server supports read-only mode that blocks exposed write actions, but users should still review tool calls before enabling unrestricted study or collection-management workflows.
Media tools can store files from local paths, URLs, or base64 data and can retrieve media as base64 content.
GUI tools can open Anki windows, select cards, edit notes, show answers, and undo the last Anki action.
Remote tunnel or ngrok-style setups expose local Anki to cloud-hosted AI clients and require careful authentication, origin, and URL-sharing controls.
Privacy notes
Tool calls can expose deck names, note fields, card contents, tags, review history, media filenames, base64 media, selected notes, collection stats, scheduling metadata, and AnkiConnect errors.
Flashcards may contain medical, language-learning, school, work, personal, customer, or confidential study material.
Sync can send Anki collection changes to AnkiWeb according to the user's Anki account and sync settings.
Local media file paths, URLs imported into cards, and GUI-selected note IDs can enter MCP client context and model logs.
Remote tunnel providers and hosted clients may process connection metadata or traffic according to their own policies.
Prerequisites
Anki Desktop installed and running.
The AnkiConnect add-on installed in Anki.
Node.js 22.12 or newer for the npm package path.
Review of which decks, cards, tags, media files, and note types the MCP client may access.
Optional read-only mode for exploration before allowing note, deck, tag, model, media, sync, or review-write operations.
Schema details
Install type
cli
Troubleshooting
No
Source repository stats
Scope
Source repo
Collection metadata
Estimated setup
15 minutes
Difficulty
intermediate
Tool listing metadata
Disclosure
MIT-licensed TypeScript MCP server published as the `@ankimcp/anki-mcp-server` npm package. This entry is distinct from generic note-taking or study tools because it talks to Anki through AnkiConnect and exposes Anki-specific review, deck, tag, media, model, stats, and GUI tools.
Anki MCP Server connects Claude and other MCP clients to Anki through the
AnkiConnect add-on. It exposes tools for review sessions, deck management, note
creation, tag operations, media handling, model/template work, statistics, and
Anki desktop GUI workflows.
Use it when a learning workflow needs Claude to help review due cards, create
new notes, update existing flashcards, explain answers, organize decks, or
analyze spaced-repetition history. Start with read-only mode if the assistant
only needs to inspect the collection.
These sources were reviewed on 2026-06-06. Prefer the live repository,
README, npm metadata, license, package metadata, server manifest, AnkiConnect
client, HTTP origin validation guard, and reviewer setup guide for current
setup and operating details.
Features
Sync with AnkiWeb through Anki.
Fetch due, new, learning, suspended, buried, or deck-filtered cards.
Present card fronts and rate answers as Again, Hard, Good, or Easy.
List decks, create decks, move cards, and fetch deck statistics.
Create one note or batch-create up to 100 notes.
Search notes with Anki query syntax and inspect note fields, tags, and CSS.
Update note fields, delete notes, and manage tags.
List, retrieve, store, or delete media files.
List note types, inspect field names and styling, create models, and update
model CSS.
Inspect collection and review statistics.
Drive Anki desktop GUI flows such as browse, add cards, edit notes, show
question, show answer, and undo.
Run over stdio, local HTTP, or an authenticated remote tunnel flow.
Use read-only mode to block exposed write operations during exploration.
Installation
Install Anki Desktop and the AnkiConnect add-on, then configure the npm package:
The project also publishes an MCPB bundle through GitHub Releases for Claude
Desktop users who prefer an extension-style install path.
Use Cases
Run a conversational review session for due cards in a specific deck.
Generate new vocabulary, exam, language-learning, or technical flashcards.
Add tags, reorganize decks, or update note fields after a study session.
Import images or media into selected notes.
Inspect retention, review streaks, deck counts, and collection statistics.
Create custom note types and styling for right-to-left or specialized cards.
Let Claude explain a missed answer while preserving the Anki scheduling flow.
Safety and Privacy
Anki MCP Server can mutate a real Anki collection. Rating cards changes review
scheduling, syncing can push changes to AnkiWeb, and note, tag, deck, model, and
media tools can permanently change or delete study material. Start read-only,
keep Anki backups, and require confirmation for destructive or broad batch
actions.
Flashcards often contain personal learning history, school material, medical
notes, work facts, customer context, screenshots, and private media. Treat MCP
tool results as study data that may enter the model context. Be especially
careful with remote tunnel mode, imported media paths, and any setup that
connects a cloud-hosted assistant to local Anki.
Duplicate Notes
Existing catalog entries cover general note-taking, memory, and productivity
tools. This entry covers the separate ankimcp/anki-mcp-server project and
@ankimcp/anki-mcp-server package for AnkiConnect-backed flashcard review,
collection management, media handling, and Anki GUI workflows.
Show that Anki MCP Server is listed on HeyClaude. Paste this Markdown into your README — it renders the badge and links back to this page.
[](https://heyclau.de/entry/mcp/anki-mcp-server)
How it compares
Anki MCP Server side by side with 3 alternatives on trust, install, platform support, and disclosed safety notes — all from reviewed registry metadata.
MCP server for Anki flashcards that lets Claude review cards, manage decks, create and update notes, handle tags and media, inspect stats, and drive Anki desktop GUI workflows.
MCP server for running AppleScript and JavaScript for Automation on macOS, with a searchable knowledge base of automation recipes for apps, files, browsers, system settings, Terminal, and productivity workflows.
MCP server for Todoist task and project management, with tools for tasks, subtasks, projects, sections, labels, comments, reminders, filters, activity, backups, collaboration, bulk operations, and dry-run testing.
MCP server for Trello boards, cards, lists, comments, checklists, attachments, labels, board activity, workspace selection, and rate-limited Trello API automation from Claude.
✓Anki MCP Server can create, update, delete, move, tag, rate, and sync cards and notes through AnkiConnect.
Destructive tools include note deletion, media deletion, unused-tag clearing, deck moves, tag replacement, model styling changes, and review rating actions that affect scheduling.
The server supports read-only mode that blocks exposed write actions, but users should still review tool calls before enabling unrestricted study or collection-management workflows.
Media tools can store files from local paths, URLs, or base64 data and can retrieve media as base64 content.
GUI tools can open Anki windows, select cards, edit notes, show answers, and undo the last Anki action.
Remote tunnel or ngrok-style setups expose local Anki to cloud-hosted AI clients and require careful authentication, origin, and URL-sharing controls.
✓macOS Automator MCP executes AppleScript or JavaScript for Automation through `osascript`, either from inline script content, an absolute script path, or a knowledge-base script ID.
AppleScript and JXA can control local applications, read and write files, run shell commands through scripting additions, manipulate browser tabs, send keystrokes, change settings, and trigger app-specific actions depending on macOS permissions.
Do not grant broad Automation or Accessibility permissions to the host process unless you trust the MCP client, prompts, and scripts it will run.
Review generated scripts before execution, use short timeouts for untrusted automations, and avoid running scripts against Mail, Messages, Contacts, Calendar, browsers, password managers, terminals, or cloud-sync folders without explicit approval.
Knowledge-base scripts and custom local knowledge-base overrides can change the behavior of reusable script IDs; review local overrides before relying on them.
Use separate macOS user accounts or test machines when experimenting with destructive file, shell, browser, or system-setting automation.
✓Todoist MCP Server can create, update, delete, complete, reopen, reorder, archive, and bulk-modify tasks, subtasks, projects, sections, labels, comments, reminders, filters, shared labels, and collaboration state.
Bulk create, bulk update, bulk delete, bulk complete, project deletion, section deletion, label deletion, reminder changes, and duplicate merge operations can alter many Todoist records at once.
Dry-run mode simulates mutation operations but still queries real Todoist data for validation.
Pro and Business features such as reminders, filters, shared labels, collaboration, backups, and workspace operations may expose or modify team data.
Require confirmation before deleting tasks or projects, changing due dates in bulk, completing groups of tasks, modifying shared projects, creating reminders, downloading backups, or changing collaboration state.
✓Trello MCP Server can create, read, update, move, archive, and delete board data depending on token permissions and requested tools.
Card, checklist, label, due-date, start-date, comment, attachment, board, list, workspace, and active-board changes can affect real team workflows.
File attachments are added from URLs; review source URLs and destination cards before allowing an agent to attach files.
Use `TRELLO_ALLOWED_WORKSPACES` to limit workspace access, especially when a token can see personal, client, or production boards.
Require confirmation before creating boards, adding attachments, deleting or archiving cards, changing due dates, moving cards between lists, or posting comments on behalf of a user.
Privacy notes
✓Tool calls can expose deck names, note fields, card contents, tags, review history, media filenames, base64 media, selected notes, collection stats, scheduling metadata, and AnkiConnect errors.
Flashcards may contain medical, language-learning, school, work, personal, customer, or confidential study material.
Sync can send Anki collection changes to AnkiWeb according to the user's Anki account and sync settings.
Local media file paths, URLs imported into cards, and GUI-selected note IDs can enter MCP client context and model logs.
Remote tunnel providers and hosted clients may process connection metadata or traffic according to their own policies.
✓Scripts can expose local file paths, file contents, clipboard data, browser URLs and page data, email subjects, contacts, calendar events, messages, app state, system settings, shell output, and account-specific metadata.
Error responses and optional debugging settings can include attempted script content, script paths, substitution logs, stderr, and execution details.
The local knowledge base defaults to `~/.macos-automator/knowledge_base` when configured and may contain private automation recipes or paths.
MCP clients, model providers, terminal history, and application logs may retain script inputs and outputs, including data read from local apps.
✓Todoist API tokens, task IDs, project IDs, section IDs, label IDs, reminder IDs, comment IDs, user IDs, collaborator details, activity logs, completed tasks, backups, and productivity statistics can be exposed to the MCP client.
Task names, descriptions, comments, due dates, deadlines, labels, reminders, attachments, project notes, and completed-task history can contain private work or personal planning data.
Bulk and filter tools may reveal larger slices of a Todoist workspace than a single-task request.
Backup download tools can expose a broad historical snapshot of Todoist data.
Keep Todoist tokens in local MCP configuration only, and avoid sharing MCP logs, dry-run traces, or transcripts that include private task or project data.
✓Trello API keys, tokens, board IDs, workspace IDs, card IDs, member names, labels, comments, checklists, attachments, due dates, and activity logs can be exposed to the MCP client.
Active board and workspace selections may persist locally in Trello MCP configuration.
Card descriptions, comments, attachments, and activity histories can contain private customer, roadmap, incident, or operational data.
Proxy settings, Trello credentials, and workspace allowlists should be kept out of shared MCP configs, logs, screenshots, and transcripts.
Response previews reduce some large card-description exposure, but full-card and activity tools can still return sensitive Trello content.
Prerequisites
Anki Desktop installed and running.
The AnkiConnect add-on installed in Anki.
Node.js 22.12 or newer for the npm package path.
Review of which decks, cards, tags, media files, and note types the MCP client may access.
macOS on the machine running the MCP server.
Node.js 24 or newer for the published npm package.
Automation permissions for the terminal, editor, or app that launches the MCP server.
Accessibility permissions when scripts need UI scripting, clicks, keystrokes, or System Events access.
Todoist API token from Todoist integrations developer settings.
Node.js 18 or newer for the npm stdio server.
Review of whether the token has access to personal, shared, Pro, Business, or workspace features.
Optional `DRYRUN=true` for simulating mutation tools while still validating against real Todoist data.
Trello API key and token with access to the boards and workspaces Claude may use.
Bun-compatible published package runtime or an MCP client that can launch the packaged stdio server through npx.
Optional `TRELLO_BOARD_ID` or `TRELLO_WORKSPACE_ID` when a default board or workspace should be selected at startup.
Optional `TRELLO_ALLOWED_WORKSPACES` to constrain the token to specific approved Trello workspaces.