AI Extensions: Safari control, Markdown vaults and biomedical queries
Three MCP projects checked September 27 for setup, license, activity and privacy. Community counts are observations, not quality ratings.
AI EXTENSIONS · DAILY DIGEST · 27 SEP 2026
Today's three tools each hold a different key. One drives a browser where you are already signed in. One opens a local vault of your notes. One reaches out to public biomedical databases. A repository star is a dated sign of interest and nothing more about quality or security. I did not install any of them.
Today’s projects
- safari-mcp: Drives Safari, possibly in sessions where you are already signed in.
- markdown-vault-mcp: Search over your notes, plus write tools that can edit them.
- BioMCP: Pulls biomedical sources together. A cited abstract is evidence to inspect, not clinical advice.
safari-mcp
Why it matters
This MCP server uses AppleScript to automate Safari on macOS. Browser control can read pages and interact with sessions; its README describes the capability, not a verified safety guarantee.
Setup from official docs
The README lists npx safari-mcp and a Claude MCP registration command: claude mcp add safari -- npx safari-mcp. macOS and Safari automation permission are prerequisites. Review the repository and package before running it.
License, maintenance and observed community
MIT at repository root. Last push 27 Sep 2026 10:51 UTC. 205 stars and 29 forks observed 27 Sep 2026.
Security and privacy
Treat logged-in browser tabs, cookies, account actions and page contents as sensitive. Grant only needed OS automation access; use an isolated profile and do not let page instructions choose actions.
markdown-vault-mcp
Why it matters
A Markdown-vault MCP server combines keyword and semantic search with optional embedding providers. Its write tools mean retrieval can become editing if permissions are left broad.
Setup from official docs
README: pip install markdown-vault-mcp[mcp]. Configure a vault path and select local or API embedding providers deliberately. Read-only mode should be enabled when edits are unnecessary; write tools are otherwise enabled by default.
License, maintenance and observed community
MIT at repository root. Last push 27 Sep 2026 10:49 UTC. 34 stars and 14 forks observed 27 Sep 2026.
Security and privacy
The indexed vault may contain private notes. Check indexing scope, provider transfers, write permissions, backup and deletion before connecting a real vault.
BioMCP
Why it matters
A biomedical MCP/CLI aggregates source queries for research. A cited abstract is evidence to inspect, not a clinical conclusion. It is not a substitute for a clinician or source appraisal.
Setup from official docs
Official README gives uv tool install biomcp-cli. The project warns that biomcp-cli is its package, not the similarly named biomcp package on PyPI. Configure the MCP integration against the trusted installed command and inspect upstream services.
License, maintenance and observed community
MIT at repository root. Last push 27 Sep 2026 10:49 UTC. 643 stars and 116 forks observed 27 Sep 2026. Upstream databases may have separate data-use terms.
Security and privacy
Avoid sending patient identifiers or confidential cases to external queries. Check source freshness, citations, provider terms and downstream medical review; do not treat generated summaries as diagnoses.
Analysis: a safe trial
Try each tool with a disposable browser profile, a fabricated vault or a synthetic biomedical question. Inspect tool permissions, file writes, outbound requests and provider terms before connecting real data. Keep human review at any action boundary. These are source reviews, not functional or security audits.
Sources and method: safari-mcp · markdown-vault-mcp · BioMCP. MIT license, last push, stars and forks checked at official GitHub repositories on 27 Sep 2026; project claims were not independently tested.