github Python re-analysis due

VBlackJack/Datacron

v2026.913.2
github

Local-first MCP server to query and maintain a Markdown vault from Claude, Cursor, Gemini, Codex & other AI clients - no cloud, no context dump. Guided setup + standalone binaries.

maintainer
VBlackJack
licence
NOASSERTION
first seen
2026-07-14
last seen
2026-09-15
releases · 30d
41
short id

VBlackJack/Datacron is an MCP server distributed on github, maintained by VBlackJack, tracked here since July 2026. It has shipped 67 releases (currently 2026.913.2) and exposes 21 tools. Tools include append_journal, apply_organization_manifest, audit_query, contradiction_scan, create_note_ai, delete_note_section, and 15 more. Its composite risk grade is A — an inferred review prompt computed from observed signals, not a verdict.

what we found

Reading the source raised one review prompt — dangerous code — each a pattern worth a human look rather than a finding of fault.

Its 21 tools appear to reach filesystem and database, inferred from tool names, descriptions and input schemas rather than from observed behaviour.

Since the previous scan on 2026-09-13: 21 tools added and 17 tools removed.

full security breakdown →
tools 20 of 21
  • append_journal adds a Markdown entry under a heading, with confinement, exact history, and atomic write
  • apply_organization_manifest validates a local content-addressed bundle containing at least one exact note operation and/or an exact organization configuration replacem…
  • audit_query queries operation metadata by period, tool, or note without modifying the journal or the vault
  • contradiction_scan live, deterministic, bounded scan of contradictions/refinements between sections; proposes and confirms an explicit CAS call read-only, wit…
  • create_note_ai creates a new typed _memory note, confined to allowed paths, without overwrite and with a durable journal
  • delete_note_section explicitly deletes an H2-H6 section (ATX or Setext) and its subtree, with optional CAS and exact history
  • get_backlinks returns chunks whose wikilinks target a ULID or a resolved alias
  • get_follow_up Latest structured follow-up revisions with snapshot-bound pagination.
  • get_health returns the real state of index freshness, integrity, checksum, durability, and invariants
  • get_note reads a note by ULID, chunk id, or relative path, as paginated content, chunk, or heading outline
  • get_note_history lists the committed operation metadata of a note without reading historical content or modifying the journal
  • list_notes returns a paginated list, filterable by folder, tags, and frontmatter key/value pairs, with ULID, title, tags, aliases, and dates
  • patch_note_preamble replaces or removes the preamble before the first recognized Markdown heading (ATX or Setext), with mandatory CAS and suffix preservation
  • patch_note_section replaces the content of an existing heading with CAS, exact history, and preservation of other sections
  • prepare_follow_up Prepare sourced follow-up plans without writing.
  • rename_note_section renames the title of an H2-H6 section (ATX or Setext) without modifying its content or subtree
  • revert_note restores a note from its content-addressed history; the operation stays durable, reversible, and audited
  • search_regex runs a regex search via ripgrep and resolves the found lines to indexed chunks
  • search_text runs a BM25 search on the FTS5 index with ranked snippets and stale notes demoted by default
  • session_context Bounded session context and versioned common protocol.
All 21 tools →
release cadence · 90d 67 releases
06-18 00:00 08-01 00:00 now
recent releases last 10
version date src
v2026.0913.02 2026-09-13 github
2026.913.2 2026-09-13 pypi
2026.913.1 2026-09-13 pypi
v2026.0913.01 2026-09-13 github
v2026.0913.00 2026-09-13 github
2026.913.0 2026-09-13 pypi
2026.912.3 2026-09-12 pypi
v2026.0912.03 2026-09-12 github
2026.912.2 2026-09-12 pypi
v2026.0912.02 2026-09-12 github

view all →