
Research
/Security News
737 Chrome VPN Extensions Linked to Brand Impersonation and Browser Traffic Redirection
The campaign amassed more than 75,000 installs by targeting Russian-speaking users seeking access to blocked services.
supernote-mcp
Advanced tools
Unofficial MCP server for the Ratta Supernote e-ink tablet: capture the screen, read/render saved notes, and upload files over the LAN.
An MCP server that captures the live screen mirror of a Ratta Supernote e-ink tablet and returns it as an image to an AI agent.
Sketch or handwrite on your Supernote during a planning/whiteboarding session, then ask your agent "what did I just draw?" — it pulls the current canvas in as vision input and reasons over it inline.
Beyond the live screen, it can also browse the device's saved files over its Browse & Access Wi-Fi server. Every tool is lazy — it touches the device only when invoked, so a session that never calls one makes no network calls to the tablet.
[!IMPORTANT] Unofficial, community-built project — not affiliated with, authorised by, or endorsed by Ratta / Supernote. "Supernote" and "Ratta" are trademarks of their respective owner, used here only for identification. It relies on reverse-engineered, undocumented LAN interfaces (screen mirror + Browse & Access) that may change or break with firmware updates. Provided as-is under the MIT license — use at your own risk.
Built on supernote-typescript for screen
capture and .note parsing.
npx install path: Node.js ≥ 18. For bunx: Bun. The standalone
binary needs neither.192.168.1.42. That's the device IP. The mirror serves on
port 8080 (http://<ip>:8080/screencast.mjpeg); the server appends :8080 for you.Set the IP once via the SUPERNOTE_IP environment variable, or pass it per-call as the tool's
ip argument (an explicit argument wins over the env var).
supernote_list_files (and the note tools) use a separate device feature from screen mirroring:
Browse & Access, the built-in Wi-Fi file server on port 8089.
http://192.168.1.42:8089 and stays open while it's active. The
device IP is the same as for mirroring; the tools target port 8089 automatically.Browse & Access and Screen Mirroring are independent toggles — enable whichever the task needs (or both). Discovery probes each port, so the device can be found with only one of them on.
The mirror address is a DHCP lease and can change between sessions. Two ways to stay robust:
SUPERNOTE_IP never goes stale.SUPERNOTE_IP. The scan only runs as a fallback (never on the fast path) and probes
port 8080 across your subnet for the mirror's multipart stream. Disable it with
SUPERNOTE_DISCOVER=0 if you'd rather it fail fast than scan the LAN.Pick whichever distribution suits you — none require this repo to be checked out.
# Recommended: published npm package via Node's npx
claude mcp add supernote --scope user --env SUPERNOTE_IP=192.168.1.42 -- npx -y supernote-mcp
# If you already have Bun
claude mcp add supernote --scope user --env SUPERNOTE_IP=192.168.1.42 -- bunx supernote-mcp
# Standalone binary (no runtime needed) — download the asset for your platform from the
# latest GitHub Release (supernote-mcp-darwin-arm64, -darwin-x64, -linux-x64, -linux-arm64,
# -windows-x64.exe), make it executable, then register its path:
chmod +x ./supernote-mcp-darwin-arm64
claude mcp add supernote --scope user --env SUPERNOTE_IP=192.168.1.42 -- /path/to/supernote-mcp-darwin-arm64
Restart Claude Code, then try: "Snapshot my Supernote and tell me what I drew."
On macOS the downloaded binary is unsigned; the first run may be blocked by Gatekeeper. Right-click → Open once, or run
xattr -d com.apple.quarantine /path/to/supernote-mcp-darwin-arm64.
All tools accept an optional ip (device IP, optionally :port; defaults to SUPERNOTE_IP, else a
LAN scan) and return a clear, actionable message on failure rather than hanging.
| Tool | Needs | Input | Returns |
|---|---|---|---|
supernote_snapshot | Screen Mirroring (8080) | ip? | the live screen as image/png |
supernote_list_files | Browse & Access (8089) | ip?, path? | a listing — name, folder?, size, date, and a path to pass on |
supernote_read_note | Browse & Access (8089) | ip?, path | a note's recognized handwriting/text per page (or a note that recognition hasn't run) |
supernote_render_note | Browse & Access (8089) | ip?, path, pages? | note pages as image/png (all pages, capped at 20, or the pages you pick) |
supernote_upload_file | Browse & Access (8089) | ip?, path, directory?, filename? | uploads a local file to the device (the only tool that writes to it) |
Failures point at the usual causes — wrong IP, the relevant feature turned off, or the host/device not sharing a VPN-free Wi-Fi network — and time out fast (10s) rather than hanging.
All tools except supernote_upload_file are read-only. supernote_upload_file writes a file to
the device (it reads a local file the server can access and POSTs it over Browse & Access).
Bun is used only to run, typecheck, and build — it is not required by end users. This repo ships an optional devbox environment that provides Bun reproducibly; you can equally use a system Bun install.
bun install
# Capture-first verification against a real device (writes a PNG you can open):
bun run src/capture.ts --ip 192.168.1.42 --out frame.png
# Browse & Access (port 8089) — list a directory, download a file, upload a file:
bun run src/browse.ts list --ip 192.168.1.42 --path /Note
bun run src/browse.ts get --ip 192.168.1.42 --path /Note/obsidian/x.note --out x.note
bun run src/browse.ts put --ip 192.168.1.42 --path ./doc.pdf --dir /INBOX
# Run the MCP server over stdio:
bun run src/server.ts
# Inspect the tool interactively:
bunx @modelcontextprotocol/inspector bun run src/server.ts
bun run test # unit tests (bun:test)
bun run typecheck # tsc --noEmit
bun run build # node-compatible bundle -> dist/server.js (the npx/bunx entry)
bun run build:binary # self-contained executable -> dist/supernote-mcp
bun build --compile cross-compiles too, e.g.
bun build --compile --target=bun-linux-x64 src/server.ts --outfile dist/supernote-mcp-linux-x64.
src/capture.ts wraps fetchMirrorFrame(${ip}:8080), which parses the device's
multipart/x-mixed-replace stream, extracts a frame, and decodes it via
image-js. The frame is re-encoded to PNG (sidestepping
PNG-vs-JPEG part-encoding differences across firmwares) and returned as base64. src/browse.ts
is a client for the Browse & Access HTTP file server (port 8089): it lists directories (parsing the
listing page's embedded JSON) and downloads files. src/resolve.ts holds the shared address
resolution + LAN-scan fallback used by both, and src/discover.ts does the subnet scan (probing the
mirror or Browse & Access endpoint to recognise the device). src/server.ts registers the tools on
an McpServer over the stdio transport.
FAQs
Unofficial MCP server for the Ratta Supernote e-ink tablet: capture the screen, read/render saved notes, and upload files over the LAN.
The npm package supernote-mcp receives a total of 51 weekly downloads. As such, supernote-mcp popularity was classified as not popular.
We found that supernote-mcp demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Research
/Security News
The campaign amassed more than 75,000 installs by targeting Russian-speaking users seeking access to blocked services.

Company News
Open source maintainers are under more pressure than ever. We're raising our open source program from the Team plan to the Business plan, free.

Security News
The supply chain control that delays freshly published gems now covers lockfile generation and gem vendoring in Ruby projects.