mcp-apple-notes
The mcp-apple-notes server enables AI assistants to manage, search, and organize Apple Notes locally on your Mac — no API keys required, no data leaves your machine. It supports an optional read-only mode to prevent write operations.
index-notes: Build a local semantic search index using on-device embeddings — required before searching.list-folders: List all folders with full paths and note counts.list-notes: Browse notes with metadata (title, path, timestamps), optionally filtered by folder and optionally including full content.search-notes: Perform semantic and full-text hybrid search, with optional folder filtering and result limit control.get-note: Fetch full content and details of a note by ID or title, with optional folder scoping for ambiguous titles.create-note: Create a new note with a title and markdown content, optionally in a specific folder.edit-note: Update an existing note's title and/or content (replaces entire content).append-to-note: Append markdown content to the end of an existing note without overwriting it.move-note: Relocate a note to a different folder.delete-note: Move a note to Recently Deleted (recoverable within 30 days).
Compatible with MCP clients such as Claude Desktop, Cursor, and Windsurf.
Provides tools for semantic search, full-text search, and CRUD operations on Apple Notes, including listing folders, browsing by folder, creating, editing, appending, moving, and deleting notes, all via local scripting bridge.
MCP Apple Notes

A Model Context Protocol (MCP) server that enables semantic search and RAG (Retrieval Augmented Generation) over your Apple Notes. Works with any MCP-compatible client — Claude Desktop, Cursor, Windsurf, Cline, and others.

Features
🔍 Semantic search over Apple Notes using
all-MiniLM-L6-v2on-device embeddings model📝 Full-text search capabilities
📂 Folder support — list folders, browse by folder, filter search by folder
📊 Vector storage using LanceDB
🤖 Works with any MCP-compatible client (Claude, Cursor, Windsurf, Cline, etc.)
🍎 Native Apple Notes integration via JXA
🔒 Optional read-only mode for safe exploration
🏃♂️ Fully local execution — no API keys needed
Related MCP server: MCP Apple Notes
Security & Transparency
Because this server interacts with your private Apple Notes, it is designed with absolute transparency in mind. It runs 100% locally on your Mac.
No Cloud, No Telemetry — No API keys, no data leaving your machine.
Native Apple JXA — Uses Apple's official JavaScript for Automation scripting bridge.
Embeddings on-device — The
all-MiniLM-L6-v2model runs locally via@huggingface/transformers.Verifiable — You are highly encouraged to read every line of code (especially
index.ts) before it ever touches your notes.GitHub releases include SHA-256 checksums so you can verify downloaded artifacts.
Installation & Setup
Choose the installation method that fits your workflow.
Method 1: Install from source (recommended)
By cloning the repository locally, you can inspect the source code and know exactly what is executing on your machine.
Prerequisites: Node.js (v18+) or Bun
git clone https://github.com/Dan8Oren/mcp-apple-notes && cd mcp-apple-notes && bun install{
"mcpServers": {
"apple-notes": {
"command": "bun",
"args": ["run", "/path/to/mcp-apple-notes/index.ts"]
}
}
}Using NPM:
git clone https://github.com/Dan8Oren/mcp-apple-notes && cd mcp-apple-notes && npm installThen add the server to your MCP client config. Replace /path/to/mcp-apple-notes with where you cloned the repo:
{
"mcpServers": {
"apple-notes": {
"command": "npx",
"args": ["tsx", "/path/to/mcp-apple-notes/index.ts"]
}
}
}Tip: Want to try it without risk? Enable read-only mode to block all write operations while you explore.
"env": { "MCP_APPLE_NOTES_READ_ONLY": "1" }
Method 2: Quick start via npx
If you prefer a zero-setup approach and trust the published npm package, you can simply add this directly to your MCP config:
{
"mcpServers": {
"apple-notes": {
"command": "npx",
"args": ["-y", "@dan8oren/mcp-apple-notes"]
}
}
}After setup, restart your client and ask your AI assistant to "index my notes" to get started.
Per-client instructions
Open Settings → Developer → Edit Config
Paste your chosen JSON config into
claude_desktop_config.jsonRestart Claude Desktop
Logs:
tail -n 50 -f ~/Library/Logs/Claude/mcp-server-apple-notes.log# npm version:
claude mcp add apple-notes npx -- -y @dan8oren/mcp-apple-notes
# or from source:
claude mcp add apple-notes npx -- tsx /path/to/mcp-apple-notes/index.tsAdd the JSON config to ~/.cursor/mcp.json (global) or .cursor/mcp.json in your project root.
Add the JSON config to ~/.windsurf/mcp.json.
Available Tools
Tool | Description |
| Index all notes for semantic search. Run this first |
| List all Apple Notes folders with full paths and note counts |
| List notes with metadata. Optional |
| Semantic + full-text search with optional path filter and limit |
| Get full content by noteId or title. Returns candidates on ambiguity |
| Create a new note with markdown content, optionally in a folder |
| Edit title and/or content (markdown) of an existing note |
| Append markdown content to an existing note |
| Move a note to a different folder |
| Delete a note (moves to Recently Deleted) |
Verify Before You Trust
Every Apple Notes operation is a JXA call you can inspect in index.ts. No network requests, no background syncing — just local scripting bridge calls.
Read-only mode
Want a safety net? Enable read-only mode to block all write operations — only search, list, and read tools will be available:
{
"mcpServers": {
"apple-notes": {
"command": "npx",
"args": ["-y", "@dan8oren/mcp-apple-notes"],
"env": { "MCP_APPLE_NOTES_READ_ONLY": "1" }
}
}
}When enabled, only these tools are available: index-notes, list-folders, list-notes, search-notes, get-note.
Verbose mode
Enable verbose logging to see every JXA call before it executes (logged to stderr):
CLI flag — add --verbose to your MCP client config args:
{
"mcpServers": {
"apple-notes": {
"command": "npx",
"args": ["--verbose", "-y", "@dan8oren/mcp-apple-notes"]
}
}
}Environment variable — for clients that support env:
{
"mcpServers": {
"apple-notes": {
"command": "npx",
"args": ["-y", "@dan8oren/mcp-apple-notes"],
"env": { "MCP_APPLE_NOTES_VERBOSE": "1" }
}
}
}JXA operations reference
Operation | Type | What it does |
| Read | Lists all notes (id, title, folder path) |
| Read | Lists all folders with paths and note counts |
| Read | Gets notes in a specific folder |
| Read | Gets full content of one note by ID |
| Write | Creates a new note with title and content |
| Write | Appends HTML content to an existing note |
| Write | Updates title and/or content of a note |
| Write | Moves a note to a different folder |
| Destructive | Moves a note to Recently Deleted |
All operations go through Apple's JXA scripting bridge (Application('Notes')). No direct file system access, no network calls. The delete operation is non-permanent — notes go to Recently Deleted and can be recovered within 30 days.
Response Shape
Tool responses are JSON objects in a consistent envelope:
Success:
{ "ok": true, "data": ... }Error:
{ "ok": false, "error": { "type": "...", "message": "..." } }
Most note-oriented responses now include the stable Apple Notes id so clients can track notes safely across renames and moves.
Community & Support
Bug reports, ideas, questions, and showcases all have a home — please use the channel that fits:
🐛 Found a bug? → Open an issue
💡 Have a feature idea? → Start a thread in Ideas
❓ Need help with setup or integration? → Ask in Q&A
🛠 Built something cool with it? → Share in Show and tell
📣 Watch for updates → Announcements
PRs are welcome. For non-trivial changes, please open an issue or discussion first so we can align on direction before you invest time.
Acknowledgments
Originally based on RafalWilinski/mcp-apple-notes.
Available Tools
10 toolsappend-to-noteB
Append content to the end of an existing Apple Note. Identify note by noteId or title.
| Name | Required | Description | Default |
|---|---|---|---|
| path | No | Optional folder path to disambiguate duplicate titles | |
| title | No | Title of the note to append to | |
| noteId | No | Apple Notes ID. If provided, skips title resolution. | |
| content | Yes | Content in markdown format to append to the end of the note |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
No annotations provided, and the description fails to disclose behaviors such as side effects (e.g., saving the note), required permissions, error states (e.g., if note not found), or any constraints like size limits.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is concise (one sentence) and directly addresses the core action, but lacks any structured breakdown (e.g., bullet points) that could improve readability.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
Given the complexity of 4 parameters and no output schema, the description omits important context such as the return value (success/failure), error handling, and whether the appending is immediate or requires further action.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema coverage is 100% and the description mostly repeats the existing schema comments (e.g., 'Optional folder path to disambiguate duplicate titles'), adding no significant new meaning beyond the structured data.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly states the action (append content), the resource (existing Apple Note), and how to identify it (by noteId or title). It effectively distinguishes from siblings like edit-note or create-note.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description implies the tool is for appending content to an existing note, but does not explicitly state when to use it versus alternatives like edit-note or search-notes.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
create-noteA
Create a new Apple Note with a title and markdown content. Optionally place it in a folder path.
| Name | Required | Description | Default |
|---|---|---|---|
| title | Yes | ||
| folder | No | Optional folder path to create the note in (e.g. iCloud/Work/Projects). Use list-folders to get available paths. | |
| content | Yes | Note content in markdown format |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
No annotations are provided, so the description carries full burden for behavioral disclosure. It does not mention error behaviors, overwrite policies, character limits, or markdown restrictions, leaving significant gaps for an AI agent.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is a single sentence with no wasted words. It conveys the essential purpose efficiently.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
Given the tool's simplicity and lack of output schema, the description is minimally viable but lacks details about error conditions, folder existence, or fallback behavior. It does not leverage sibling tools for contextual guidance.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema coverage is 67% (two of three parameters have descriptions). The description adds context by naming 'title and markdown content' and giving a folder path example, but does not substantially enhance understanding beyond the schema for the title parameter.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly states the verb 'Create', resource 'Apple Note', and key aspects: title, markdown content, and optional folder placement. It effectively distinguishes from sibling tools like edit-note or delete-note.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description mentions optional folder placement and references list-folders for paths, but does not explicitly state when to use this tool versus alternatives (e.g., append-to-note or edit-note). No when-not-to-use guidance is provided.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
delete-noteA
Delete an Apple Note (moves to Recently Deleted). Identify note by noteId or title.
| Name | Required | Description | Default |
|---|---|---|---|
| path | No | Optional folder path to disambiguate duplicate titles | |
| title | No | Title of the note to delete | |
| noteId | No | Apple Notes ID. If provided, skips title resolution. |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
With no annotations, the description carries the full burden and discloses the key behavioral trait (soft delete to Recently Deleted) and the mechanism (direct resolution with noteId). It does not cover effects of missing identifiers or permissions, but the core behavior is explained.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is a single, well-structured sentence conveying purpose, behavioral detail, and identification options without any extraneous words.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
For a simple delete operation with three optional parameters and no output schema, the description adequately covers purpose, behavior, and identification; it lacks details on error handling or ambiguous matches but is largely complete.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
The input schema already has 100% description coverage, so the description adds minimal extra meaning beyond summarizing the two identification paths; this meets the baseline for parameter semantics.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly states the action ('Delete an Apple Note') with specific behavioral detail (moves to Recently Deleted) and identification methods (noteId or title), distinguishing it from sibling tools which perform other operations.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
While not explicitly contrasting with alternatives, the description implies usage scenarios by offering two identification methods; it provides adequate direction for a single-purpose delete tool without needing to exclude other tools.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
edit-noteA
Edit an existing Apple Note's title and/or content. Identify note by noteId or current title.
| Name | Required | Description | Default |
|---|---|---|---|
| path | No | Optional folder path to disambiguate duplicate titles | |
| title | No | Current title of the note to edit | |
| noteId | No | Apple Notes ID. If provided, skips title resolution. | |
| newTitle | No | New title (optional) | |
| newContent | No | New content in markdown format (optional, replaces entire content) |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
No annotations provided, so description carries full burden. It mentions identification methods but does not disclose that newContent replaces entire content or describe error handling. The behavioral impact is partially covered but not comprehensively.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
Single sentence with no wasted words. The description is concise and front-loaded with the action and key identification method.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
Although minimal, the description covers the basic purpose and identification. However, it omits critical details like replacement behavior of newContent, error handling, and results, which would be expected given no output schema.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema has 100% parameter description coverage. The description adds a high-level summary of identification and edit actions but does not provide significant new semantics beyond the schema.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly states the tool edits an existing Apple Note's title and/or content, and identifies the note by noteId or current title. This distinctly separates it from sibling tools like create-note or delete-note.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description implies use for editing but provides no explicit guidance on when to choose this tool over siblings like append-to-note or when not to use it. No prerequisites or exclusions are mentioned.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
get-noteA
Get a note's full content and details by noteId or title. Optionally scope by folder path. If the title is ambiguous, returns a list of matching candidates — retry with noteId or path to disambiguate.
| Name | Required | Description | Default |
|---|---|---|---|
| path | No | Optional folder path to disambiguate duplicate titles | |
| title | No | ||
| noteId | No | Apple Notes ID. If provided, skips title resolution. |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
With no annotations, the description carries full burden. It discloses the disambiguation behavior (returns candidates for ambiguous titles) and that noteId skips resolution. However, it does not describe behavior when no parameters are given, error handling, or return format details.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is two sentences long, front-loaded with the primary purpose, and contains no superfluous words. Every sentence contributes essential guidance.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
Given the tool's moderate complexity (3 optional parameters, no output schema), the description covers core functionality and disambiguation. However, it omits default behavior when no parameters are provided, which could leave agents uncertain.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
The schema covers two of three parameters with descriptions (path, noteId). The description adds value by explaining the title parameter's role in identification and the disambiguation mechanism, which is not present in the schema's empty title description.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly states 'Get a note's full content and details' using a specific verb and resource. It identifies two identification methods (noteId or title) and distinguishes from sibling tools like create-note, delete-note, etc., which serve different purposes.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description provides clear usage context: retrieves note content by noteId or title, with optional folder path for disambiguation. It hints at when to retry with noteId or path if title is ambiguous, but lacks explicit exclusions or alternatives to other sibling tools.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
index-notesA
Index all Apple Notes for semantic search. Run this first — takes seconds to minutes depending on note count.
| Name | Required | Description | Default |
|---|---|---|---|
No parameters | |||
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Without annotations, the description must disclose behavioral traits. It only mentions time duration, but does not state if the operation is read-only or has side effects (e.g., creating a database), or any authorization requirements. The safety profile is unclear.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
Two sentences, front-loaded with the verb and resource, and every word earns its place. No wasted text.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
For a zero-parameter tool with no output schema, the description is nearly complete. It could mention that search-notes depends on this index, but given the simplicity, it's adequate.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
The tool has zero parameters, so the schema covers all. The description adds value by explaining the purpose and timing, which is consistent with the baseline of 4 for no parameters.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly states the action 'Index all Apple Notes' with a specific purpose 'for semantic search', and distinguishes from sibling tools by positioning it as a preliminary step ('Run this first').
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description gives clear usage guidance: 'Run this first' and provides a time estimate. It does not explicitly exclude any scenarios, but with no alternative indexing tools among siblings, the context is sufficient.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
list-foldersA
List all Apple Notes folders with full paths and note counts
| Name | Required | Description | Default |
|---|---|---|---|
No parameters | |||
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
With no annotations, the description is the sole source of behavioral info. It adequately states the tool is a read-only list operation, but it does not disclose potential limitations, authentication needs, or any other behaviors beyond the obvious.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
A single, concise sentence that front-loads the action and output. No unnecessary words or structures.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
Given the simple nature (no parameters, no output schema), the description provides essential info: what it lists and what is included. Missing usage context slightly lowers completeness.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
The tool has zero parameters and schema description coverage is 100%, so the baseline is 4. The description does not need to add param info and correctly omits it.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly states the action ('list') and resource ('all Apple Notes folders'), including what is returned ('full paths and note counts'). This distinctively separates it from sibling tools like list-notes and search-notes.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
No guidance is provided on when to use this tool versus alternatives. The description simply states what it does without any contextual usage advice or exclusion criteria.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
list-notesA
List Apple Notes with title, path, and timestamps. Optionally filter by folder path and include note content.
| Name | Required | Description | Default |
|---|---|---|---|
| path | No | Optional folder path to filter notes (e.g. iCloud/Work/Projects). Use list-folders to get available paths. | |
| includeContent | No | If true, include note content in the response (default: false) |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
No annotations are provided, so the description must fully disclose behavior. It notes basic output fields but omits details on pagination, ordering, or rate limits.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
A single, concise sentence that front-loads the main action and optional features, with no extraneous words.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
Given no output schema and multiple sibling tools, the description should mention ordering, pagination, or when to use list-notes vs search-notes; it lacks these details.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema description coverage is 100%, but the description adds context by listing return fields (title, path, timestamps) and clarifying the path parameter's purpose beyond the schema.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly states the tool lists Apple Notes with specific attributes (title, path, timestamps), distinguishing it from sibling tools like get-note (single note) and search-notes (searching).
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description mentions optional filtering by folder path and references list-folders for available paths, but does not explicitly contrast with alternatives like search-notes for advanced queries.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
move-noteA
Move a note to a different folder. Identify note by noteId or title. Use list-folders to get available paths.
| Name | Required | Description | Default |
|---|---|---|---|
| path | No | Optional current folder path to disambiguate duplicate titles | |
| title | No | Title of the note to move | |
| noteId | No | Apple Notes ID. If provided, skips title resolution. | |
| targetPath | Yes | Full folder path to move the note to (e.g. iCloud/Work/Projects) |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
No annotations are provided, so the description bears the full burden. It implies mutation (moving a note) and describes identification methods, but lacks details on side effects, error conditions, or behavior for ambiguous titles.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
Two sentences: first states core purpose, second covers identification and a helpful hint. No wasted words, front-loaded.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
Given 4 parameters and no output schema, the description covers identification and references list-folders for paths. It could mention what happens if targetPath doesn't exist, but overall adequate for a move operation.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema coverage is 100%, baseline 3. The description adds value by explaining the relationship between noteId and title as alternative identifiers, and notes the path parameter's role in disambiguation.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly states the verb 'move' and the resource 'note' with destination 'folder', distinguishing it from sibling tools like create-note, delete-note, etc.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description explains how to identify the note (by noteId or title) and suggests using list-folders to get available paths, providing clear context for usage. However, it doesn't explicitly state when not to use this tool or alternatives.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
search-notesB
Semantic and full-text search over notes. Optionally filter by folder path.
| Name | Required | Description | Default |
|---|---|---|---|
| path | No | Optional: filter results to a specific folder path (e.g. iCloud/Work) | |
| limit | No | Max results to return (default: 50) | |
| query | Yes |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
With no annotations, the description must disclose behavioral traits. It only mentions search type (semantic/full-text) and an optional filter, but omits details like whether this is read-only, how results are ordered, pagination behavior, or content indexing status. This is insufficient for safe invocation.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
Two sentences, front-loaded with the core action and one key option. Every word contributes meaning. No redundancy or excess.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
Given the lack of output schema and annotations, the description is too sparse. It does not explain return format, what 'semantic' search entails, or potential limitations. For a search tool with multiple siblings, more context is needed for effective selection and use.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema description coverage is 67% (query lacks description). The description adds 'Optionally filter by folder path' which echoes the schema. It does not clarify the query parameter's syntax or semantics, nor does it explain limit behavior beyond the schema's default. Overall minimal added value beyond the schema.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description 'Semantic and full-text search over notes' clearly identifies the tool's action (search) and resource (notes), and the optional folder path filter adds specificity. It effectively distinguishes from sibling tools like list-notes and get-note by emphasizing content-based search.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description states the tool's capabilities but does not explicitly guide when to use it versus alternatives. No mention of when-not-to-use or suggestions for other tools like list-notes for browsing or get-note for a specific note.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
TDQS
Each tool has a clear, distinct purpose: create, delete, edit, get, list, search, move, index, append, and list folders. Overlaps like edit and append are differentiated by operation type, and descriptions clarify boundaries.
All tool names follow a consistent verb_noun pattern with hyphens (e.g., append-to-note, list-folders). The pattern is uniform, making it predictable for an agent.
10 tools is well-scoped for an Apple Notes server, covering essential operations without bloat or unnecessary omissions.
The tool surface covers create, read (by ID, list, search), update (edit, append, move), delete, and folder management. Indexing for semantic search adds completeness. No significant gaps.
Maintenance
Resources
Unclaimed servers have limited discoverability.
Looking for Admin?
If you are the server author, to access and configure the admin panel.
Related MCP Connectors
Search, read, and write your Apple Notes from ChatGPT/Claude via a local Mac agent + MCP relay.
Google Keep-style notes app with an MCP server for AI agents to read/write notes.
Agent-native notes, tasks, dev-docs, vaults, sync & handoffs. MCP + OpenAPI dual surface.
Persistent memory layer for AI tools. Save and recall notes across Claude and other MCP clients.
Related MCP Servers
- AlicenseDqualityBmaintenanceEnables interaction with Apple Notes via natural language, supporting note creation, search, and retrieval with iCloud integration for seamless note management.31724MIT
- AlicenseNot gradedqualityDmaintenanceA Model Context Protocol server that enables semantic search and retrieval of Apple Notes content, allowing AI assistants to access, search, and create notes using on-device embeddings.4332MIT
- FlicenseAqualityDmaintenanceEnables interaction with Apple Notes on macOS through AppleScript, allowing users to list, search, read, create, update, and delete notes across accounts and folders.71-
- FlicenseAqualityDmaintenanceA local-only server that enables AI agents to create, read, search, and organize Apple Notes directly on macOS. It supports folder management, note formatting, and checklists using native automation to ensure data remains private and local.2414-
Latest Blog Posts
- Who's Calling? MCP Hosts Are an Identity Blind Spot (And the Spec Knows It)By Om-Shree-0709 on .mcpAgent IdentityOAuth 2.1
- Your AI Chatbot Just Exposed Your CEO's Salary to an InternBy Om-Shree-0709 on .Agent IdentityMCP SecurityOAuth Delegation
- Why MCP Servers Need Execution Sandboxing (And Why Your Current Stack Isn't Enough)By Om-Shree-0709 on .Agentic AiPrompt InjectionWebAssembly
MCP directory API
We provide all the information about MCP servers via our MCP API.
curl -X GET 'https://glama.ai/api/mcp/v1/servers/Dan8Oren/mcp-apple-notes'
If you have feedback or need assistance with the MCP directory API, please join our Discord server