home.social

Search

1000 results for “data0”

  1. Move Fast and Don’t Break Things: Shipping the Simplenote MCP

    When Automattic recently launched a month‑long hackathon, engineers Mark Biek and Evan Tobiesen knew exactly what they wanted to work on: the Simplenote Model Context Protocol (MCP) server.

    Neither Mark nor Evan works in data science, so measurement might have been the easy thing to skip. Instead, they shipped a product with built‑in measurement from day one.

    The team faced two difficult design questions. First, how do you give a large language model (LLM) permission to write to a user’s notes without a disaster? Second, how do you know if anyone is using the tool, without ever seeing the contents of their notes?

    Simplenote is a lightweight note‑taking app for iOS, Android, Mac, Windows, Linux, and your browser. It’s been around since 2008, and like many of Automattic’s products, Simplenote is open source and free. Mark launched a read‑only version on April 15. The hackathon was a chance to go further.

    Radical Speed Month (RSM) was a single month where Automattic employees stepped away from their regular work to pair up, build, and ship a passion project. The hackathon started on April 22, and by May 8, Mark and Evan had already shipped a new version of the MCP.  Neither Mark nor Evan works on Simplenote day-to-day. Mark is on domains, Evan on marketing technology.

    “I have been a Simplenote user for 10 years. I’ve always really loved it, and I have a gazillion notes,” explained Mark. “And back in February, I wanted an excuse to write an MCP server because I had never written one before.”

    Designing for Data Safety

    As Mark put it, “The last thing we want is to put a tool out and have an LLM run wild and delete somebody’s notes.”

    At first, the MCP tool was Mac-only and read-only (list, search, get). Opt-in write tools (create, update, trash, restore, revert) were the obvious next step. The MCP spec lets a server tag each tool as either read-only or destructive. 

    Part of the work involved quantifying LLM guardrails, turning vague safety concerns into concrete numeric thresholds.

    Before enabling writes, Mark and Evan added several data safeguards:

    • Discoverability: The MCP write tools are not exposed when the MCP is in read‑only mode, so LLMs can’t discover them by accident. 
    • Content protection: There are also limits to how notes can be updated—text can’t be replaced by large amounts of white space, and updates can’t drastically shrink or blank out a note.
    • Recoverability: Notes may be added to the trash but not deleted, so they can always be restored. 
    • Rate limiting: Bulk operations are blocked, too. If the MCP detects more than five write operations within 30 seconds, it stops.

    “If you have a note that is above a certain length, and that length changes by more than 50%, we block it,” Mark explained. “Let’s say you have a note that’s a dozen paragraphs long, and the LLM does something wacky and tries to wipe it out with just a single sentence… the rate limiting will prevent that.” 

    A shopping list for a traditional Italian risotto, built in Simplenote through the MCP.

    Designing for Telemetry

    The MCP only records two data event types: setup run and tool call. That may look like it wouldn’t be enough. But those two event types answer more questions than you’d expect. The telemetry records data on adoption, stickiness, tool popularity, and connector preference.

    Instrumenting an MCP server without leaking user data was part of the project. 

    “On a technical level, we generate a random or a unique ID,” explained Evan. “It’s just an ID for the install. And then we track very minimal data…. So we can see that this random user ID ran the tool ‘get note.’ While we don’t see which note or anything like that, we still get worthwhile usage stats.”

    One way to use Simplenote is on a Mac with a local install rather than in the browser. This way of using Simplenote can be fully offline, so notes never get to the web. The MCP also works with this setup.

    Users can also opt out of tracking completely with a single command.

    Test data from the Simplenote MCP, gathered before public release. Left: setup runs by platform and connector. Center: tool calls by provider over the last month. Right: how many installs opted into write mode. 

    We both spent a lot of time making sure we understood what the AI was doing and whether it was the right way to do it.

    Mark Biek

    How they built it

    Connecting AI to Simplenote was only half the story. AI also helped build it.

    “We worked really hard at not just vibe coding this, letting the AI crank out whatever and not knowing what it was doing,“ Mark explained. “We both spent a lot of time making sure we understood what the AI was doing and whether it was the right way to do it.”

    The team applied guardrails to their own process, not just to the LLM’s behavior at runtime.

    “We didn’t just say, ‘hey, build me an MCP server,’” added Evan. “We had the documentation and the scope of the project lined up. We used issues in Linear, pull requests, and automated tests, kind of like guardrails around the AI.”

    Working with multiple AI tools created a separate problem: keeping the codebase consistent.

    “The agents’ markdown files, which definitely helped to keep [the project] on track, made it easy to review, and ensured that, in the end, it looks like a uniform code base,” Evan said. “It’s not like parts of it look different depending on which AI agent or which prompts we used.”

    This is especially important because Simplenote MCP and Simperium, the open source sync backend that powers Simplenote, are both publicly available on GitHub.

    “This is available as an open source project,” said Mark. “People could fork it, people could submit their own enhancements or bug fixes to it. And so we wanted to make sure that the project was organized from that perspective as well, in case there are outside contributors who want to add anything.”

    The number of open source contributions the project receives is just one of the metrics the team will watch.

    “I think it’s just going to be: are people using it?” said Mark. “That’s the first level of success. We don’t have a number in mind. But if anybody’s using it at all, I’m going to be excited.”

    He added: “A second layer of success would be if we actually started getting some outside contributions.”

    The Simplenote MCP shows a pattern other teams can copy: Set numeric limits on writes, so an LLM can’t run wild. Record which tools ran on which platform, but never what the user wrote. Let users turn telemetry off with a single command. Apply the same discipline to how the AI writes the code as you do to how it runs at runtime. None of this is technically difficult. It just has to be decided early.

    The new Simplenote MCP currently works with Claude Desktop, Claude Code, Cursor, VS Code (Copilot), Zed, Cline, Windsurf, and anything else that speaks MCP. Give it a try, and, in the comments below, please let us know what you think.

    #ai #Automattic #DataAnalytics #technology
  2. Move Fast and Don’t Break Things: Shipping the Simplenote MCP

    When Automattic recently launched a month‑long hackathon, engineers Mark Biek and Evan Tobiesen knew exactly what they wanted to work on: the Simplenote Model Context Protocol (MCP) server.

    Neither Mark nor Evan works in data science, so measurement might have been the easy thing to skip. Instead, they shipped a product with built‑in measurement from day one.

    The team faced two difficult design questions. First, how do you give a large language model (LLM) permission to write to a user’s notes without a disaster? Second, how do you know if anyone is using the tool, without ever seeing the contents of their notes?

    Simplenote is a lightweight note‑taking app for iOS, Android, Mac, Windows, Linux, and your browser. It’s been around since 2008, and like many of Automattic’s products, Simplenote is open source and free. Mark launched a read‑only version on April 15. The hackathon was a chance to go further.

    Radical Speed Month (RSM) was a single month where Automattic employees stepped away from their regular work to pair up, build, and ship a passion project. The hackathon started on April 22, and by May 8, Mark and Evan had already shipped a new version of the MCP.  Neither Mark nor Evan works on Simplenote day-to-day. Mark is on domains, Evan on marketing technology.

    “I have been a Simplenote user for 10 years. I’ve always really loved it, and I have a gazillion notes,” explained Mark. “And back in February, I wanted an excuse to write an MCP server because I had never written one before.”

    Designing for Data Safety

    As Mark put it, “The last thing we want is to put a tool out and have an LLM run wild and delete somebody’s notes.”

    At first, the MCP tool was Mac-only and read-only (list, search, get). Opt-in write tools (create, update, trash, restore, revert) were the obvious next step. The MCP spec lets a server tag each tool as either read-only or destructive. 

    Part of the work involved quantifying LLM guardrails, turning vague safety concerns into concrete numeric thresholds.

    Before enabling writes, Mark and Evan added several data safeguards:

    • Discoverability: The MCP write tools are not exposed when the MCP is in read‑only mode, so LLMs can’t discover them by accident. 
    • Content protection: There are also limits to how notes can be updated—text can’t be replaced by large amounts of white space, and updates can’t drastically shrink or blank out a note.
    • Recoverability: Notes may be added to the trash but not deleted, so they can always be restored. 
    • Rate limiting: Bulk operations are blocked, too. If the MCP detects more than five write operations within 30 seconds, it stops.

    “If you have a note that is above a certain length, and that length changes by more than 50%, we block it,” Mark explained. “Let’s say you have a note that’s a dozen paragraphs long, and the LLM does something wacky and tries to wipe it out with just a single sentence… the rate limiting will prevent that.” 

    A shopping list for a traditional Italian risotto, built in Simplenote through the MCP.

    Designing for Telemetry

    The MCP only records two data event types: setup run and tool call. That may look like it wouldn’t be enough. But those two event types answer more questions than you’d expect. The telemetry records data on adoption, stickiness, tool popularity, and connector preference.

    Instrumenting an MCP server without leaking user data was part of the project. 

    “On a technical level, we generate a random or a unique ID,” explained Evan. “It’s just an ID for the install. And then we track very minimal data…. So we can see that this random user ID ran the tool ‘get note.’ While we don’t see which note or anything like that, we still get worthwhile usage stats.”

    One way to use Simplenote is on a Mac with a local install rather than in the browser. This way of using Simplenote can be fully offline, so notes never get to the web. The MCP also works with this setup.

    Users can also opt out of tracking completely with a single command.

    Test data from the Simplenote MCP, gathered before public release. Left: setup runs by platform and connector. Center: tool calls by provider over the last month. Right: how many installs opted into write mode. 

    We both spent a lot of time making sure we understood what the AI was doing and whether it was the right way to do it.

    Mark Biek

    How they built it

    Connecting AI to Simplenote was only half the story. AI also helped build it.

    “We worked really hard at not just vibe coding this, letting the AI crank out whatever and not knowing what it was doing,“ Mark explained. “We both spent a lot of time making sure we understood what the AI was doing and whether it was the right way to do it.”

    The team applied guardrails to their own process, not just to the LLM’s behavior at runtime.

    “We didn’t just say, ‘hey, build me an MCP server,’” added Evan. “We had the documentation and the scope of the project lined up. We used issues in Linear, pull requests, and automated tests, kind of like guardrails around the AI.”

    Working with multiple AI tools created a separate problem: keeping the codebase consistent.

    “The agents’ markdown files, which definitely helped to keep [the project] on track, made it easy to review, and ensured that, in the end, it looks like a uniform code base,” Evan said. “It’s not like parts of it look different depending on which AI agent or which prompts we used.”

    This is especially important because Simplenote MCP and Simperium, the open source sync backend that powers Simplenote, are both publicly available on GitHub.

    “This is available as an open source project,” said Mark. “People could fork it, people could submit their own enhancements or bug fixes to it. And so we wanted to make sure that the project was organized from that perspective as well, in case there are outside contributors who want to add anything.”

    The number of open source contributions the project receives is just one of the metrics the team will watch.

    “I think it’s just going to be: are people using it?” said Mark. “That’s the first level of success. We don’t have a number in mind. But if anybody’s using it at all, I’m going to be excited.”

    He added: “A second layer of success would be if we actually started getting some outside contributions.”

    The Simplenote MCP shows a pattern other teams can copy: Set numeric limits on writes, so an LLM can’t run wild. Record which tools ran on which platform, but never what the user wrote. Let users turn telemetry off with a single command. Apply the same discipline to how the AI writes the code as you do to how it runs at runtime. None of this is technically difficult. It just has to be decided early.

    The new Simplenote MCP currently works with Claude Desktop, Claude Code, Cursor, VS Code (Copilot), Zed, Cline, Windsurf, and anything else that speaks MCP. Give it a try, and, in the comments below, please let us know what you think.

    #ai #Automattic #DataAnalytics #technology
  3. Move Fast and Don’t Break Things: Shipping the Simplenote MCP

    When Automattic recently launched a month‑long hackathon, engineers Mark Biek and Evan Tobiesen knew exactly what they wanted to work on: the Simplenote Model Context Protocol (MCP) server.

    Neither Mark nor Evan works in data science, so measurement might have been the easy thing to skip. Instead, they shipped a product with built‑in measurement from day one.

    The team faced two difficult design questions. First, how do you give a large language model (LLM) permission to write to a user’s notes without a disaster? Second, how do you know if anyone is using the tool, without ever seeing the contents of their notes?

    Simplenote is a lightweight note‑taking app for iOS, Android, Mac, Windows, Linux, and your browser. It’s been around since 2008, and like many of Automattic’s products, Simplenote is open source and free. Mark launched a read‑only version on April 15. The hackathon was a chance to go further.

    Radical Speed Month (RSM) was a single month where Automattic employees stepped away from their regular work to pair up, build, and ship a passion project. The hackathon started on April 22, and by May 8, Mark and Evan had already shipped a new version of the MCP.  Neither Mark nor Evan works on Simplenote day-to-day. Mark is on domains, Evan on marketing technology.

    “I have been a Simplenote user for 10 years. I’ve always really loved it, and I have a gazillion notes,” explained Mark. “And back in February, I wanted an excuse to write an MCP server because I had never written one before.”

    Designing for Data Safety

    As Mark put it, “The last thing we want is to put a tool out and have an LLM run wild and delete somebody’s notes.”

    At first, the MCP tool was Mac-only and read-only (list, search, get). Opt-in write tools (create, update, trash, restore, revert) were the obvious next step. The MCP spec lets a server tag each tool as either read-only or destructive. 

    Part of the work involved quantifying LLM guardrails, turning vague safety concerns into concrete numeric thresholds.

    Before enabling writes, Mark and Evan added several data safeguards:

    • Discoverability: The MCP write tools are not exposed when the MCP is in read‑only mode, so LLMs can’t discover them by accident. 
    • Content protection: There are also limits to how notes can be updated—text can’t be replaced by large amounts of white space, and updates can’t drastically shrink or blank out a note.
    • Recoverability: Notes may be added to the trash but not deleted, so they can always be restored. 
    • Rate limiting: Bulk operations are blocked, too. If the MCP detects more than five write operations within 30 seconds, it stops.

    “If you have a note that is above a certain length, and that length changes by more than 50%, we block it,” Mark explained. “Let’s say you have a note that’s a dozen paragraphs long, and the LLM does something wacky and tries to wipe it out with just a single sentence… the rate limiting will prevent that.” 

    A shopping list for a traditional Italian risotto, built in Simplenote through the MCP.

    Designing for Telemetry

    The MCP only records two data event types: setup run and tool call. That may look like it wouldn’t be enough. But those two event types answer more questions than you’d expect. The telemetry records data on adoption, stickiness, tool popularity, and connector preference.

    Instrumenting an MCP server without leaking user data was part of the project. 

    “On a technical level, we generate a random or a unique ID,” explained Evan. “It’s just an ID for the install. And then we track very minimal data…. So we can see that this random user ID ran the tool ‘get note.’ While we don’t see which note or anything like that, we still get worthwhile usage stats.”

    One way to use Simplenote is on a Mac with a local install rather than in the browser. This way of using Simplenote can be fully offline, so notes never get to the web. The MCP also works with this setup.

    Users can also opt out of tracking completely with a single command.

    Test data from the Simplenote MCP, gathered before public release. Left: setup runs by platform and connector. Center: tool calls by provider over the last month. Right: how many installs opted into write mode. 

    We both spent a lot of time making sure we understood what the AI was doing and whether it was the right way to do it.

    Mark Biek

    How they built it

    Connecting AI to Simplenote was only half the story. AI also helped build it.

    “We worked really hard at not just vibe coding this, letting the AI crank out whatever and not knowing what it was doing,“ Mark explained. “We both spent a lot of time making sure we understood what the AI was doing and whether it was the right way to do it.”

    The team applied guardrails to their own process, not just to the LLM’s behavior at runtime.

    “We didn’t just say, ‘hey, build me an MCP server,’” added Evan. “We had the documentation and the scope of the project lined up. We used issues in Linear, pull requests, and automated tests, kind of like guardrails around the AI.”

    Working with multiple AI tools created a separate problem: keeping the codebase consistent.

    “The agents’ markdown files, which definitely helped to keep [the project] on track, made it easy to review, and ensured that, in the end, it looks like a uniform code base,” Evan said. “It’s not like parts of it look different depending on which AI agent or which prompts we used.”

    This is especially important because Simplenote MCP and Simperium, the open source sync backend that powers Simplenote, are both publicly available on GitHub.

    “This is available as an open source project,” said Mark. “People could fork it, people could submit their own enhancements or bug fixes to it. And so we wanted to make sure that the project was organized from that perspective as well, in case there are outside contributors who want to add anything.”

    The number of open source contributions the project receives is just one of the metrics the team will watch.

    “I think it’s just going to be: are people using it?” said Mark. “That’s the first level of success. We don’t have a number in mind. But if anybody’s using it at all, I’m going to be excited.”

    He added: “A second layer of success would be if we actually started getting some outside contributions.”

    The Simplenote MCP shows a pattern other teams can copy: Set numeric limits on writes, so an LLM can’t run wild. Record which tools ran on which platform, but never what the user wrote. Let users turn telemetry off with a single command. Apply the same discipline to how the AI writes the code as you do to how it runs at runtime. None of this is technically difficult. It just has to be decided early.

    The new Simplenote MCP currently works with Claude Desktop, Claude Code, Cursor, VS Code (Copilot), Zed, Cline, Windsurf, and anything else that speaks MCP. Give it a try, and, in the comments below, please let us know what you think.

    #ai #Automattic #DataAnalytics #technology
  4. Move Fast and Don’t Break Things: Shipping the Simplenote MCP

    When Automattic recently launched a month‑long hackathon, engineers Mark Biek and Evan Tobiesen knew exactly what they wanted to work on: the Simplenote Model Context Protocol (MCP) server.

    Neither Mark nor Evan works in data science, so measurement might have been the easy thing to skip. Instead, they shipped a product with built‑in measurement from day one.

    The team faced two difficult design questions. First, how do you give a large language model (LLM) permission to write to a user’s notes without a disaster? Second, how do you know if anyone is using the tool, without ever seeing the contents of their notes?

    Simplenote is a lightweight note‑taking app for iOS, Android, Mac, Windows, Linux, and your browser. It’s been around since 2008, and like many of Automattic’s products, Simplenote is open source and free. Mark launched a read‑only version on April 15. The hackathon was a chance to go further.

    Radical Speed Month (RSM) was a single month where Automattic employees stepped away from their regular work to pair up, build, and ship a passion project. The hackathon started on April 22, and by May 8, Mark and Evan had already shipped a new version of the MCP.  Neither Mark nor Evan works on Simplenote day-to-day. Mark is on domains, Evan on marketing technology.

    “I have been a Simplenote user for 10 years. I’ve always really loved it, and I have a gazillion notes,” explained Mark. “And back in February, I wanted an excuse to write an MCP server because I had never written one before.”

    Designing for Data Safety

    As Mark put it, “The last thing we want is to put a tool out and have an LLM run wild and delete somebody’s notes.”

    At first, the MCP tool was Mac-only and read-only (list, search, get). Opt-in write tools (create, update, trash, restore, revert) were the obvious next step. The MCP spec lets a server tag each tool as either read-only or destructive. 

    Part of the work involved quantifying LLM guardrails, turning vague safety concerns into concrete numeric thresholds.

    Before enabling writes, Mark and Evan added several data safeguards:

    • Discoverability: The MCP write tools are not exposed when the MCP is in read‑only mode, so LLMs can’t discover them by accident. 
    • Content protection: There are also limits to how notes can be updated—text can’t be replaced by large amounts of white space, and updates can’t drastically shrink or blank out a note.
    • Recoverability: Notes may be added to the trash but not deleted, so they can always be restored. 
    • Rate limiting: Bulk operations are blocked, too. If the MCP detects more than five write operations within 30 seconds, it stops.

    “If you have a note that is above a certain length, and that length changes by more than 50%, we block it,” Mark explained. “Let’s say you have a note that’s a dozen paragraphs long, and the LLM does something wacky and tries to wipe it out with just a single sentence… the rate limiting will prevent that.” 

    A shopping list for a traditional Italian risotto, built in Simplenote through the MCP.

    Designing for Telemetry

    The MCP only records two data event types: setup run and tool call. That may look like it wouldn’t be enough. But those two event types answer more questions than you’d expect. The telemetry records data on adoption, stickiness, tool popularity, and connector preference.

    Instrumenting an MCP server without leaking user data was part of the project. 

    “On a technical level, we generate a random or a unique ID,” explained Evan. “It’s just an ID for the install. And then we track very minimal data…. So we can see that this random user ID ran the tool ‘get note.’ While we don’t see which note or anything like that, we still get worthwhile usage stats.”

    One way to use Simplenote is on a Mac with a local install rather than in the browser. This way of using Simplenote can be fully offline, so notes never get to the web. The MCP also works with this setup.

    Users can also opt out of tracking completely with a single command.

    Test data from the Simplenote MCP, gathered before public release. Left: setup runs by platform and connector. Center: tool calls by provider over the last month. Right: how many installs opted into write mode. 

    We both spent a lot of time making sure we understood what the AI was doing and whether it was the right way to do it.

    Mark Biek

    How they built it

    Connecting AI to Simplenote was only half the story. AI also helped build it.

    “We worked really hard at not just vibe coding this, letting the AI crank out whatever and not knowing what it was doing,“ Mark explained. “We both spent a lot of time making sure we understood what the AI was doing and whether it was the right way to do it.”

    The team applied guardrails to their own process, not just to the LLM’s behavior at runtime.

    “We didn’t just say, ‘hey, build me an MCP server,’” added Evan. “We had the documentation and the scope of the project lined up. We used issues in Linear, pull requests, and automated tests, kind of like guardrails around the AI.”

    Working with multiple AI tools created a separate problem: keeping the codebase consistent.

    “The agents’ markdown files, which definitely helped to keep [the project] on track, made it easy to review, and ensured that, in the end, it looks like a uniform code base,” Evan said. “It’s not like parts of it look different depending on which AI agent or which prompts we used.”

    This is especially important because Simplenote MCP and Simperium, the open source sync backend that powers Simplenote, are both publicly available on GitHub.

    “This is available as an open source project,” said Mark. “People could fork it, people could submit their own enhancements or bug fixes to it. And so we wanted to make sure that the project was organized from that perspective as well, in case there are outside contributors who want to add anything.”

    The number of open source contributions the project receives is just one of the metrics the team will watch.

    “I think it’s just going to be: are people using it?” said Mark. “That’s the first level of success. We don’t have a number in mind. But if anybody’s using it at all, I’m going to be excited.”

    He added: “A second layer of success would be if we actually started getting some outside contributions.”

    The Simplenote MCP shows a pattern other teams can copy: Set numeric limits on writes, so an LLM can’t run wild. Record which tools ran on which platform, but never what the user wrote. Let users turn telemetry off with a single command. Apply the same discipline to how the AI writes the code as you do to how it runs at runtime. None of this is technically difficult. It just has to be decided early.

    The new Simplenote MCP currently works with Claude Desktop, Claude Code, Cursor, VS Code (Copilot), Zed, Cline, Windsurf, and anything else that speaks MCP. Give it a try, and, in the comments below, please let us know what you think.

    #ai #Automattic #DataAnalytics #technology
  5. Move Fast and Don’t Break Things: Shipping the Simplenote MCP

    When Automattic recently launched a month‑long hackathon, engineers Mark Biek and Evan Tobiesen knew exactly what they wanted to work on: the Simplenote Model Context Protocol (MCP) server.

    Neither Mark nor Evan works in data science, so measurement might have been the easy thing to skip. Instead, they shipped a product with built‑in measurement from day one.

    The team faced two difficult design questions. First, how do you give a large language model (LLM) permission to write to a user’s notes without a disaster? Second, how do you know if anyone is using the tool, without ever seeing the contents of their notes?

    Simplenote is a lightweight note‑taking app for iOS, Android, Mac, Windows, Linux, and your browser. It’s been around since 2008, and like many of Automattic’s products, Simplenote is open source and free. Mark launched a read‑only version on April 15. The hackathon was a chance to go further.

    Radical Speed Month (RSM) was a single month where Automattic employees stepped away from their regular work to pair up, build, and ship a passion project. The hackathon started on April 22, and by May 8, Mark and Evan had already shipped a new version of the MCP.  Neither Mark nor Evan works on Simplenote day-to-day. Mark is on domains, Evan on marketing technology.

    “I have been a Simplenote user for 10 years. I’ve always really loved it, and I have a gazillion notes,” explained Mark. “And back in February, I wanted an excuse to write an MCP server because I had never written one before.”

    Designing for Data Safety

    As Mark put it, “The last thing we want is to put a tool out and have an LLM run wild and delete somebody’s notes.”

    At first, the MCP tool was Mac-only and read-only (list, search, get). Opt-in write tools (create, update, trash, restore, revert) were the obvious next step. The MCP spec lets a server tag each tool as either read-only or destructive. 

    Part of the work involved quantifying LLM guardrails, turning vague safety concerns into concrete numeric thresholds.

    Before enabling writes, Mark and Evan added several data safeguards:

    • Discoverability: The MCP write tools are not exposed when the MCP is in read‑only mode, so LLMs can’t discover them by accident. 
    • Content protection: There are also limits to how notes can be updated—text can’t be replaced by large amounts of white space, and updates can’t drastically shrink or blank out a note.
    • Recoverability: Notes may be added to the trash but not deleted, so they can always be restored. 
    • Rate limiting: Bulk operations are blocked, too. If the MCP detects more than five write operations within 30 seconds, it stops.

    “If you have a note that is above a certain length, and that length changes by more than 50%, we block it,” Mark explained. “Let’s say you have a note that’s a dozen paragraphs long, and the LLM does something wacky and tries to wipe it out with just a single sentence… the rate limiting will prevent that.” 

    A shopping list for a traditional Italian risotto, built in Simplenote through the MCP.

    Designing for Telemetry

    The MCP only records two data event types: setup run and tool call. That may look like it wouldn’t be enough. But those two event types answer more questions than you’d expect. The telemetry records data on adoption, stickiness, tool popularity, and connector preference.

    Instrumenting an MCP server without leaking user data was part of the project. 

    “On a technical level, we generate a random or a unique ID,” explained Evan. “It’s just an ID for the install. And then we track very minimal data…. So we can see that this random user ID ran the tool ‘get note.’ While we don’t see which note or anything like that, we still get worthwhile usage stats.”

    One way to use Simplenote is on a Mac with a local install rather than in the browser. This way of using Simplenote can be fully offline, so notes never get to the web. The MCP also works with this setup.

    Users can also opt out of tracking completely with a single command.

    Test data from the Simplenote MCP, gathered before public release. Left: setup runs by platform and connector. Center: tool calls by provider over the last month. Right: how many installs opted into write mode. 

    We both spent a lot of time making sure we understood what the AI was doing and whether it was the right way to do it.

    Mark Biek

    How they built it

    Connecting AI to Simplenote was only half the story. AI also helped build it.

    “We worked really hard at not just vibe coding this, letting the AI crank out whatever and not knowing what it was doing,“ Mark explained. “We both spent a lot of time making sure we understood what the AI was doing and whether it was the right way to do it.”

    The team applied guardrails to their own process, not just to the LLM’s behavior at runtime.

    “We didn’t just say, ‘hey, build me an MCP server,’” added Evan. “We had the documentation and the scope of the project lined up. We used issues in Linear, pull requests, and automated tests, kind of like guardrails around the AI.”

    Working with multiple AI tools created a separate problem: keeping the codebase consistent.

    “The agents’ markdown files, which definitely helped to keep [the project] on track, made it easy to review, and ensured that, in the end, it looks like a uniform code base,” Evan said. “It’s not like parts of it look different depending on which AI agent or which prompts we used.”

    This is especially important because Simplenote MCP and Simperium, the open source sync backend that powers Simplenote, are both publicly available on GitHub.

    “This is available as an open source project,” said Mark. “People could fork it, people could submit their own enhancements or bug fixes to it. And so we wanted to make sure that the project was organized from that perspective as well, in case there are outside contributors who want to add anything.”

    The number of open source contributions the project receives is just one of the metrics the team will watch.

    “I think it’s just going to be: are people using it?” said Mark. “That’s the first level of success. We don’t have a number in mind. But if anybody’s using it at all, I’m going to be excited.”

    He added: “A second layer of success would be if we actually started getting some outside contributions.”

    The Simplenote MCP shows a pattern other teams can copy: Set numeric limits on writes, so an LLM can’t run wild. Record which tools ran on which platform, but never what the user wrote. Let users turn telemetry off with a single command. Apply the same discipline to how the AI writes the code as you do to how it runs at runtime. None of this is technically difficult. It just has to be decided early.

    The new Simplenote MCP currently works with Claude Desktop, Claude Code, Cursor, VS Code (Copilot), Zed, Cline, Windsurf, and anything else that speaks MCP. Give it a try, and, in the comments below, please let us know what you think.

    #ai #Automattic #DataAnalytics #technology
  6. Data Centers for AI Are Unpopular. Could They Tilt the Midterms?

    Hundreds of billions of dollars are flowing through the artificial intelligence industry and new AI tools seem to…
    #NewsBeep #News #Artificialintelligence #AI #ArtificialIntelligence #CA #Canada #controversy #DataCenters #Technology
    newsbeep.com/ca/693923/

  7. Data center battles started in states – moving to Congress

    Higher electric rates? Massive data centers looming over neighborhoods? Ugly political fights over what to do about them?…
    #NewsBeep #News #US #USA #UnitedStates #UnitedStatesOfAmerica #America #Congress #datacenter #electricrates #Law #states #UnitedStatesofAmerica
    newsbeep.com/us/664599/

  8. Data center battles started in states – moving to Congress

    Higher electric rates? Massive data centers looming over neighborhoods? Ugly political fights over what to do about them?…
    #NewsBeep #News #US #USA #UnitedStates #UnitedStatesOfAmerica #America #Congress #datacenter #electricrates #Law #states #UnitedStatesofAmerica
    newsbeep.com/us/664599/

  9. Data Centers Are Outgrowing Europe’s Clean Power Deals

    European data center power purchase agreement (PPA) volumes fell from 4.2 gigawatts (GW) in 2024 to 2.6 GW…
    #Europe #EU #AI #datacenters #European #grid #hyperscalers #nuclear #offshorewind #PPAs #renewables #solar
    europesays.com/europe/52222/

  10. 𝐔𝐧𝐢𝐯𝐞𝐫𝐬𝐢𝐭𝐚𝐭 𝐝𝐞 𝐕𝐚𝐥𝐞̀𝐧𝐜𝐢𝐚 𝐓𝐚𝐫𝐠𝐞𝐭𝐞𝐝 𝐛𝐲 𝐍𝐨𝐯𝐚 𝐆𝐫𝐨𝐮𝐩: 𝟑𝟎𝟎𝐆𝐁 𝐃𝐚𝐭𝐚 𝐄𝐱𝐟𝐢𝐥𝐭𝐫𝐚𝐭𝐢𝐨𝐧 𝐂𝐥𝐚𝐢𝐦𝐞𝐝, 𝐈𝐧𝐢𝐭𝐢𝐚𝐥 $𝟓𝟎𝟎,𝟎𝟎𝟎 𝐑𝐚𝐧𝐬𝐨𝐦 𝐃𝐞𝐦𝐚𝐧𝐝 𝐑𝐞𝐯𝐞𝐚𝐥𝐞𝐝

    News of the attack was initially reported by the online newspaper Escudo Digital in an article by journalist Alberto Payo, which included statements attributed to a member of the university’s IT team. These details are now complemented by statements provided exclusively to SuspectFile.com directly by the Nova group, introducing additional information that had not previously emerged publicly, including an alleged initial ransom demand of $500,000.

    suspectfile.com/universitat-de

    #Data_Breach #Data_Exfiltration #Nova #Ransomoware #Universitat_de_València

  11. 𝐔𝐧𝐢𝐯𝐞𝐫𝐬𝐢𝐭𝐚𝐭 𝐝𝐞 𝐕𝐚𝐥𝐞̀𝐧𝐜𝐢𝐚 𝐓𝐚𝐫𝐠𝐞𝐭𝐞𝐝 𝐛𝐲 𝐍𝐨𝐯𝐚 𝐆𝐫𝐨𝐮𝐩: 𝟑𝟎𝟎𝐆𝐁 𝐃𝐚𝐭𝐚 𝐄𝐱𝐟𝐢𝐥𝐭𝐫𝐚𝐭𝐢𝐨𝐧 𝐂𝐥𝐚𝐢𝐦𝐞𝐝, 𝐈𝐧𝐢𝐭𝐢𝐚𝐥 $𝟓𝟎𝟎,𝟎𝟎𝟎 𝐑𝐚𝐧𝐬𝐨𝐦 𝐃𝐞𝐦𝐚𝐧𝐝 𝐑𝐞𝐯𝐞𝐚𝐥𝐞𝐝

    News of the attack was initially reported by the online newspaper Escudo Digital in an article by journalist Alberto Payo, which included statements attributed to a member of the university’s IT team. These details are now complemented by statements provided exclusively to SuspectFile.com directly by the Nova group, introducing additional information that had not previously emerged publicly, including an alleged initial ransom demand of $500,000.

    suspectfile.com/universitat-de

    #Data_Breach #Data_Exfiltration #Nova #Ransomoware #Universitat_de_València

  12. 𝐔𝐧𝐢𝐯𝐞𝐫𝐬𝐢𝐭𝐚𝐭 𝐝𝐞 𝐕𝐚𝐥𝐞̀𝐧𝐜𝐢𝐚 𝐓𝐚𝐫𝐠𝐞𝐭𝐞𝐝 𝐛𝐲 𝐍𝐨𝐯𝐚 𝐆𝐫𝐨𝐮𝐩: 𝟑𝟎𝟎𝐆𝐁 𝐃𝐚𝐭𝐚 𝐄𝐱𝐟𝐢𝐥𝐭𝐫𝐚𝐭𝐢𝐨𝐧 𝐂𝐥𝐚𝐢𝐦𝐞𝐝, 𝐈𝐧𝐢𝐭𝐢𝐚𝐥 $𝟓𝟎𝟎,𝟎𝟎𝟎 𝐑𝐚𝐧𝐬𝐨𝐦 𝐃𝐞𝐦𝐚𝐧𝐝 𝐑𝐞𝐯𝐞𝐚𝐥𝐞𝐝

    News of the attack was initially reported by the online newspaper Escudo Digital in an article by journalist Alberto Payo, which included statements attributed to a member of the university’s IT team. These details are now complemented by statements provided exclusively to SuspectFile.com directly by the Nova group, introducing additional information that had not previously emerged publicly, including an alleged initial ransom demand of $500,000.

    suspectfile.com/universitat-de

    #Data_Breach #Data_Exfiltration #Nova #Ransomoware #Universitat_de_València

  13. 𝐔𝐧𝐢𝐯𝐞𝐫𝐬𝐢𝐭𝐚𝐭 𝐝𝐞 𝐕𝐚𝐥𝐞̀𝐧𝐜𝐢𝐚 𝐓𝐚𝐫𝐠𝐞𝐭𝐞𝐝 𝐛𝐲 𝐍𝐨𝐯𝐚 𝐆𝐫𝐨𝐮𝐩: 𝟑𝟎𝟎𝐆𝐁 𝐃𝐚𝐭𝐚 𝐄𝐱𝐟𝐢𝐥𝐭𝐫𝐚𝐭𝐢𝐨𝐧 𝐂𝐥𝐚𝐢𝐦𝐞𝐝, 𝐈𝐧𝐢𝐭𝐢𝐚𝐥 $𝟓𝟎𝟎,𝟎𝟎𝟎 𝐑𝐚𝐧𝐬𝐨𝐦 𝐃𝐞𝐦𝐚𝐧𝐝 𝐑𝐞𝐯𝐞𝐚𝐥𝐞𝐝

    News of the attack was initially reported by the online newspaper Escudo Digital in an article by journalist Alberto Payo, which included statements attributed to a member of the university’s IT team. These details are now complemented by statements provided exclusively to SuspectFile.com directly by the Nova group, introducing additional information that had not previously emerged publicly, including an alleged initial ransom demand of $500,000.

    suspectfile.com/universitat-de

    #Data_Breach #Data_Exfiltration #Nova #Ransomoware #Universitat_de_València

  14. Help #Data #GeoData

    Tu bidouilles des la data et des cartes ?

    J'ai cette carte avec les données risques innondations
    agdvp.brgm.fr/#/context/georis

    Je n'arrive pas du tout à partir des données exportées à faire un fichier .shp ou .geojson ou gpkg pour avoir un rendu similaire sur la carte que je travaille (Rennes intra rocade + 10 km autour.

    Je ne comprends rien de rien. Ni si les données exportées depuis le brgm ne sont pas celles représentées sur le rendu carto, ni si je rate quelque chose lorsque je converti en geojson

    mon but : approché par le risque inondation (lui issu de nombreuses études et interprétations) d'une représentation du lit majeur du fleuve (même approximative) .

    d'autres data pour contexte
    georisques.gouv.fr/mes-risques

    todon.eu/@XavCC/11662009936622