
Security News
Ruby's Bundler 4.0.18 Extends Cooldown to bundle lock and bundle cache
The supply chain control that delays freshly published gems now covers lockfile generation and gem vendoring in Ruby projects.
@noteboxd/mcp
Advanced tools
Model Context Protocol server for Noteboxd. Query fragrances, notes, accords, brands, perfumers, reviews, and charts from your AI assistant.
A Model Context Protocol server that lets an AI assistant (Claude, ChatGPT, Cursor, and other MCP clients) query the Noteboxd fragrance encyclopedia: fragrances, notes, accords, brands, perfumers, community reviews, and charts.
Once connected, you can ask things like:
The assistant answers from Noteboxd's data instead of guessing.
NOTEBOXD_API_KEY=nb_live_your_key npx -y @noteboxd/mcp
Every client uses the same command (npx -y @noteboxd/mcp) with your key in NOTEBOXD_API_KEY.
Add to claude_desktop_config.json:
{
"mcpServers": {
"noteboxd": {
"command": "npx",
"args": ["-y", "@noteboxd/mcp"],
"env": { "NOTEBOXD_API_KEY": "nb_live_your_key" }
}
}
}
Then set your real key. Or add the JSON block above to ~/.cursor/mcp.json.
{
"servers": {
"noteboxd": {
"command": "npx",
"args": ["-y", "@noteboxd/mcp"],
"env": { "NOTEBOXD_API_KEY": "nb_live_your_key" }
}
}
}
Noteboxd also runs a hosted MCP server at https://mcp.noteboxd.com/mcp (Streamable HTTP, with
OAuth sign-in) if you would rather not run anything locally. This package is the local,
open-source option.
All tools are read-only and return JSON. Each call is authenticated with your key and counts against your Noteboxd developer plan (the free tier covers 50 calls/day).
| Tool | Description |
|---|---|
search | Search across fragrances, brands, notes, perfumers, collections |
search_fragrances | Filter fragrances by query, brand, note, family, or price range |
trending | Trending searches and most-worn fragrances |
list_charts, get_chart | Chart rankings and leaderboards |
| Tool | Description |
|---|---|
get_fragrance | Full profile: notes, accords, perfumer, community score |
get_fragrance_reviews | Paginated community reviews |
get_similar_fragrances | Fragrances with a similar accord profile |
get_wearing_stats | Wearing counts over recent windows |
compare_fragrances | Two fragrances compared side by side |
get_review_digest | Short summary of a fragrance's reviews |
batch_get_fragrances | Up to 50 fragrances by id in one call |
enrich_fragrance | Profile plus notes, accords, reviews, and similar in one call |
| Tool | Description |
|---|---|
get_brand, list_brand_fragrances | Brand profile and catalogue |
get_perfumer | Perfumer profile and top creations |
list_notes, get_note | Browse notes and single-note profiles |
list_accords | List accord families |
| Variable | Required | Description |
|---|---|---|
NOTEBOXD_API_KEY | yes | Your nb_live_ key from developers.noteboxd.com |
NOTEBOXD_API_BASE_URL | no | Override the API origin (default https://api.noteboxd.com) |
You can also pass the key with --api-key nb_live_....
This is a thin local server. It speaks MCP to your client over stdio and forwards each tool call
to api.noteboxd.com/v1 using your key. It stores no data and holds no credentials beyond the key
you provide.
AI client --stdio--> noteboxd-mcp --HTTPS + your key--> api.noteboxd.com/v1
See examples/ for runnable code: curl, TypeScript, and Python.
The server is free and open source. API usage follows your Noteboxd developer plan: a free tier (50 calls/day), then pay-as-you-go per call. Most reads are $0.01; the AI tools cost a few cents. See developers.noteboxd.com/#pricing.
FAQs
Fragrance & perfume MCP server and API client: query fragrances, notes, accords, brands, perfumers, reviews, and charts from Noteboxd.
The npm package @noteboxd/mcp receives a total of 679 weekly downloads. As such, @noteboxd/mcp popularity was classified as not popular.
We found that @noteboxd/mcp demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
The supply chain control that delays freshly published gems now covers lockfile generation and gem vendoring in Ruby projects.

Security News
During a UK cyber test, a Mythos 5 agent used sockpuppets, social engineering, and prompt injection to try to get a maintainer to merge malware.

Company News
Socket is now in the AWS Security Hub Extended plan. Adopt it through AWS, apply committed spend, and block malicious open source packages.