
Security News
/Research
Popular node-ipc npm Package Infected with Credential Stealer
Socket detected malicious node-ipc versions with obfuscated stealer/backdoor behavior in a developing npm supply chain attack.
heptabase-cli
Advanced tools
CLI for your personal Heptabase knowledge base — search, read, and write notes from the terminal
A standalone CLI that wraps the Heptabase MCP server into a command-line tool, built with mcporter.
Heptabase exposes an MCP server at https://api.heptabase.com/mcp with OAuth authentication. The key insight is using mcp-remote as a stdio adapter — it handles the OAuth browser flow and token caching, then mcporter wraps the resulting stdio MCP server into a CLI.
# 1. Authenticate with Heptabase (opens browser for OAuth)
npx mcp-remote@latest https://api.heptabase.com/mcp --transport http-only
# 2. Generate and compile the CLI
npx mcporter@latest generate-cli \
--command 'npx -y mcp-remote@latest https://api.heptabase.com/mcp --transport http-only' \
--output heptabase-cli.ts \
--compile heptabase \
--description "Heptabase knowledge base CLI"
~/.mcp-auth/ and auto-refreshrm -rf ~/.mcp-auth/Install as a skill for Claude Code, Cursor, Codex, and other agents:
npx skills add madeyexz/heptabase-cli
This makes /heptabase-cli available as a slash command in your agent.
Requires Bun.
bunx heptabase-cli search-whiteboards --keywords "project"
curl -L https://github.com/madeyexz/heptabase-cli/releases/latest/download/heptabase -o heptabase
chmod +x heptabase
sudo mv heptabase /usr/local/bin/
# 1. Authenticate with Heptabase (opens browser for OAuth)
npx mcp-remote@latest https://api.heptabase.com/mcp --transport http-only
# 2. Generate and compile
npx mcporter@latest generate-cli \
--command 'npx -y mcp-remote@latest https://api.heptabase.com/mcp --transport http-only' \
--output ./heptabase-cli.ts \
--compile ./heptabase \
--description "Heptabase knowledge base CLI"
# 3. Add to PATH
sudo ln -sf "$(pwd)/heptabase" /usr/local/bin/heptabase
heptabase --help
# Search
heptabase search-whiteboards --keywords "topic1,topic2"
heptabase semantic-search-objects --queries "machine learning" --result-object-types card
# Read
heptabase get-object --object-id <id> --object-type card
heptabase get-whiteboard-with-objects --whiteboard-id <id>
heptabase get-journal-range --start-date 2026-01-01 --end-date 2026-02-21
# Write
heptabase save-to-note-card --content "# Title\n\nBody text"
heptabase append-to-journal --content "Some entry"
# PDF
heptabase search-pdf-content --pdf-card-id <id> --keywords "term1,term2"
heptabase get-pdf-pages --pdf-card-id <id> --start-page-number 1 --end-page-number 5
# Output formats: text (default), json, markdown, raw
heptabase search-whiteboards --keywords "project" --output json
For MCP setup with Claude Code, Cursor, ChatGPT, etc., see the official Heptabase MCP docs.
| Command | Description |
|---|---|
search-whiteboards | Search whiteboards by keywords |
semantic-search-objects | Hybrid full-text + semantic search across cards, journals, PDFs, highlights |
get-object | Get full content of a card, journal, media, highlight, etc. |
get-whiteboard-with-objects | Get all objects and connections on a whiteboard |
get-journal-range | Fetch journal entries for a date range (max 92 days per call) |
save-to-note-card | Create a new note card in your Inbox |
append-to-journal | Append content to today's journal |
search-pdf-content | BM25 keyword search within a PDF (up to 80 ranked chunks) |
get-pdf-pages | Get specific page ranges from a PDF card |
heptabase-cli/
├── heptabase # Compiled standalone binary (bun)
├── heptabase-cli.ts # Generated TypeScript source
├── package.json # npm package config (for bunx heptabase-cli)
├── SKILL.md # Agent skill definition (skills.sh)
├── config/
│ └── mcporter.json # mcporter server configuration
└── README.md
FAQs
CLI for your personal Heptabase knowledge base — search, read, and write notes from the terminal
The npm package heptabase-cli receives a total of 7 weekly downloads. As such, heptabase-cli popularity was classified as not popular.
We found that heptabase-cli demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
/Research
Socket detected malicious node-ipc versions with obfuscated stealer/backdoor behavior in a developing npm supply chain attack.

Security News
TeamPCP and BreachForums are promoting a Shai-Hulud supply chain attack contest with a $1,000 prize for the biggest package compromise.

Security News
Packagist urges PHP projects to update Composer after a GitHub token format change exposed some GitHub Actions tokens in CI logs.