mcp-apple-notes
MCP Apple Notizen

Ein Model Context Protocol (MCP)-Server, der semantische Suche und RAG (Retrieval Augmented Generation) für Ihre Apple Notizen ermöglicht. Funktioniert mit jedem MCP-kompatiblen Client — Claude Desktop, Cursor, Windsurf, Cline und anderen.

Funktionen
🔍 Semantische Suche in Apple Notizen mittels
all-MiniLM-L6-v2On-Device-Embeddings-Modell📝 Volltext-Suchfunktionen
📂 Ordnerunterstützung — Ordner auflisten, nach Ordner durchsuchen, Suche nach Ordner filtern
📊 Vektorspeicherung mittels LanceDB
🤖 Funktioniert mit jedem MCP-kompatiblen Client (Claude, Cursor, Windsurf, Cline, etc.)
🍎 Native Apple Notizen-Integration via JXA
🔒 Optionaler Schreibgeschützter Modus für sicheres Erkunden
🏃♂️ Vollständig lokale Ausführung — keine API-Schlüssel erforderlich
Related MCP server: MCP Apple Notes
Sicherheit & Transparenz
Da dieser Server mit Ihren privaten Apple Notizen interagiert, wurde er mit dem Ziel absoluter Transparenz entwickelt. Er läuft zu 100 % lokal auf Ihrem Mac.
Keine Cloud, keine Telemetrie — Keine API-Schlüssel, keine Daten verlassen Ihren Rechner.
Native Apple JXA — Nutzt Apples offizielle JavaScript for Automation-Skriptschnittstelle.
Embeddings auf dem Gerät — Das
all-MiniLM-L6-v2-Modell läuft lokal via@huggingface/transformers.Überprüfbar — Sie werden ausdrücklich dazu ermutigt, jede Zeile des Codes (insbesondere
index.ts) zu lesen, bevor er jemals auf Ihre Notizen zugreift.GitHub-Releases enthalten SHA-256-Prüfsummen, damit Sie die heruntergeladenen Artefakte verifizieren können.
Installation & Einrichtung
Wählen Sie die Installationsmethode, die zu Ihrem Workflow passt.
Methode 1: Installation aus dem Quellcode (empfohlen)
Durch das lokale Klonen des Repositorys können Sie den Quellcode prüfen und genau wissen, was auf Ihrem Rechner ausgeführt wird.
Voraussetzungen: Node.js (v18+) oder Bun
git clone https://github.com/Dan8Oren/mcp-apple-notes && cd mcp-apple-notes && bun install{
"mcpServers": {
"apple-notes": {
"command": "bun",
"args": ["run", "/path/to/mcp-apple-notes/index.ts"]
}
}
}NPM verwenden:
git clone https://github.com/Dan8Oren/mcp-apple-notes && cd mcp-apple-notes && npm installFügen Sie dann den Server zur Konfiguration Ihres MCP-Clients hinzu. Ersetzen Sie /path/to/mcp-apple-notes durch den Pfad, unter dem Sie das Repo geklont haben:
{
"mcpServers": {
"apple-notes": {
"command": "npx",
"args": ["tsx", "/path/to/mcp-apple-notes/index.ts"]
}
}
}Tipp: Möchten Sie es risikofrei ausprobieren? Aktivieren Sie den schreibgeschützten Modus, um alle Schreibvorgänge zu blockieren, während Sie das Tool erkunden.
"env": { "MCP_APPLE_NOTES_READ_ONLY": "1" }
Methode 2: Schnelleinstieg via npx
Wenn Sie einen Zero-Setup-Ansatz bevorzugen und dem veröffentlichten npm-Paket vertrauen, können Sie dies einfach direkt zu Ihrer MCP-Konfiguration hinzufügen:
{
"mcpServers": {
"apple-notes": {
"command": "npx",
"args": ["-y", "@dan8oren/mcp-apple-notes"]
}
}
}Starten Sie nach der Einrichtung Ihren Client neu und bitten Sie Ihren KI-Assistenten, "index my notes" (meine Notizen zu indizieren), um zu beginnen.
Client-spezifische Anweisungen
Öffnen Sie Settings → Developer → Edit Config
Fügen Sie Ihre gewählte JSON-Konfiguration in
claude_desktop_config.jsoneinStarten Sie Claude Desktop neu
Protokolle:
tail -n 50 -f ~/Library/Logs/Claude/mcp-server-apple-notes.log# npm version:
claude mcp add apple-notes npx -- -y @dan8oren/mcp-apple-notes
# or from source:
claude mcp add apple-notes npx -- tsx /path/to/mcp-apple-notes/index.tsFügen Sie die JSON-Konfiguration zu ~/.cursor/mcp.json (global) oder .cursor/mcp.json in Ihrem Projektstammverzeichnis hinzu.
Fügen Sie die JSON-Konfiguration zu ~/.windsurf/mcp.json hinzu.
Verfügbare Tools
Tool | Beschreibung |
| Indiziert alle Notizen für die semantische Suche. Führen Sie dies zuerst aus |
| Listet alle Apple Notizen-Ordner mit vollständigen Pfaden und Notizanzahl auf |
| Listet Notizen mit Metadaten auf. Optionaler |
| Semantische + Volltextsuche mit optionalem Pfadfilter und Limit |
| Ruft den vollständigen Inhalt per noteId oder Titel ab. Gibt bei Mehrdeutigkeit Kandidaten zurück |
| Erstellt eine neue Notiz mit Markdown-Inhalt, optional in einem Ordner |
| Bearbeitet Titel und/oder Inhalt (Markdown) einer bestehenden Notiz |
| Hängt Markdown-Inhalt an eine bestehende Notiz an |
| Verschiebt eine Notiz in einen anderen Ordner |
| Löscht eine Notiz (verschiebt sie in "Zuletzt gelöscht") |
Überprüfung vor dem Vertrauen
Jede Apple Notizen-Operation ist ein JXA-Aufruf, den Sie in index.ts einsehen können. Keine Netzwerkanfragen, keine Hintergrundsynchronisierung — nur lokale Skriptschnittstellen-Aufrufe.
Schreibgeschützter Modus
Benötigen Sie ein Sicherheitsnetz? Aktivieren Sie den schreibgeschützten Modus, um alle Schreibvorgänge zu blockieren — nur Such-, Listen- und Lesetools sind dann verfügbar:
{
"mcpServers": {
"apple-notes": {
"command": "npx",
"args": ["-y", "@dan8oren/mcp-apple-notes"],
"env": { "MCP_APPLE_NOTES_READ_ONLY": "1" }
}
}
}Wenn aktiviert, sind nur diese Tools verfügbar: index-notes, list-folders, list-notes, search-notes, get-note.
Ausführlicher Modus (Verbose)
Aktivieren Sie die ausführliche Protokollierung, um jeden JXA-Aufruf zu sehen, bevor er ausgeführt wird (wird nach stderr protokolliert):
CLI-Flag — fügen Sie --verbose zu Ihren MCP-Client-Konfigurationsargumenten hinzu:
{
"mcpServers": {
"apple-notes": {
"command": "npx",
"args": ["--verbose", "-y", "@dan8oren/mcp-apple-notes"]
}
}
}Umgebungsvariable — für Clients, die env unterstützen:
{
"mcpServers": {
"apple-notes": {
"command": "npx",
"args": ["-y", "@dan8oren/mcp-apple-notes"],
"env": { "MCP_APPLE_NOTES_VERBOSE": "1" }
}
}
}Referenz der JXA-Operationen
Operation | Typ | Was sie bewirkt |
| Lesen | Listet alle Notizen auf (id, Titel, Ordnerpfad) |
| Lesen | Listet alle Ordner mit Pfaden und Notizanzahl auf |
| Lesen | Ruft Notizen in einem bestimmten Ordner ab |
| Lesen | Ruft den vollständigen Inhalt einer Notiz per ID ab |
| Schreiben | Erstellt eine neue Notiz mit Titel und Inhalt |
| Schreiben | Hängt HTML-Inhalt an eine bestehende Notiz an |
| Schreiben | Aktualisiert Titel und/oder Inhalt einer Notiz |
| Schreiben | Verschiebt eine Notiz in einen anderen Ordner |
| Destruktiv | Verschiebt eine Notiz in "Zuletzt gelöscht" |
Alle Operationen laufen über Apples JXA-Skriptschnittstelle (Application('Notes')). Kein direkter Dateisystemzugriff, keine Netzwerkaufrufe. Die delete-Operation ist nicht permanent — Notizen landen in "Zuletzt gelöscht" und können innerhalb von 30 Tagen wiederhergestellt werden.
Antwortformat
Tool-Antworten sind JSON-Objekte in einem konsistenten Umschlag:
Erfolg:
{ "ok": true, "data": ... }Fehler:
{ "ok": false, "error": { "type": "...", "message": "..." } }
Die meisten notizorientierten Antworten enthalten jetzt die stabile Apple Notizen-id, sodass Clients Notizen sicher über Umbenennungen und Verschiebungen hinweg verfolgen können.
Danksagungen
Ursprünglich basierend auf RafalWilinski/mcp-apple-notes.
Available Tools
10 toolsappend-to-noteB
Append content to the end of an existing Apple Note. Identify note by noteId or title.
| Name | Required | Description | Default |
|---|---|---|---|
| path | No | Optional folder path to disambiguate duplicate titles | |
| title | No | Title of the note to append to | |
| noteId | No | Apple Notes ID. If provided, skips title resolution. | |
| content | Yes | Content in markdown format to append to the end of the note |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
No annotations provided, and the description fails to disclose behaviors such as side effects (e.g., saving the note), required permissions, error states (e.g., if note not found), or any constraints like size limits.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is concise (one sentence) and directly addresses the core action, but lacks any structured breakdown (e.g., bullet points) that could improve readability.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
Given the complexity of 4 parameters and no output schema, the description omits important context such as the return value (success/failure), error handling, and whether the appending is immediate or requires further action.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema coverage is 100% and the description mostly repeats the existing schema comments (e.g., 'Optional folder path to disambiguate duplicate titles'), adding no significant new meaning beyond the structured data.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly states the action (append content), the resource (existing Apple Note), and how to identify it (by noteId or title). It effectively distinguishes from siblings like edit-note or create-note.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description implies the tool is for appending content to an existing note, but does not explicitly state when to use it versus alternatives like edit-note or search-notes.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
create-noteA
Create a new Apple Note with a title and markdown content. Optionally place it in a folder path.
| Name | Required | Description | Default |
|---|---|---|---|
| title | Yes | ||
| folder | No | Optional folder path to create the note in (e.g. iCloud/Work/Projects). Use list-folders to get available paths. | |
| content | Yes | Note content in markdown format |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
No annotations are provided, so the description carries full burden for behavioral disclosure. It does not mention error behaviors, overwrite policies, character limits, or markdown restrictions, leaving significant gaps for an AI agent.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is a single sentence with no wasted words. It conveys the essential purpose efficiently.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
Given the tool's simplicity and lack of output schema, the description is minimally viable but lacks details about error conditions, folder existence, or fallback behavior. It does not leverage sibling tools for contextual guidance.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema coverage is 67% (two of three parameters have descriptions). The description adds context by naming 'title and markdown content' and giving a folder path example, but does not substantially enhance understanding beyond the schema for the title parameter.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly states the verb 'Create', resource 'Apple Note', and key aspects: title, markdown content, and optional folder placement. It effectively distinguishes from sibling tools like edit-note or delete-note.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description mentions optional folder placement and references list-folders for paths, but does not explicitly state when to use this tool versus alternatives (e.g., append-to-note or edit-note). No when-not-to-use guidance is provided.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
delete-noteA
Delete an Apple Note (moves to Recently Deleted). Identify note by noteId or title.
| Name | Required | Description | Default |
|---|---|---|---|
| path | No | Optional folder path to disambiguate duplicate titles | |
| title | No | Title of the note to delete | |
| noteId | No | Apple Notes ID. If provided, skips title resolution. |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
With no annotations, the description carries the full burden and discloses the key behavioral trait (soft delete to Recently Deleted) and the mechanism (direct resolution with noteId). It does not cover effects of missing identifiers or permissions, but the core behavior is explained.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is a single, well-structured sentence conveying purpose, behavioral detail, and identification options without any extraneous words.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
For a simple delete operation with three optional parameters and no output schema, the description adequately covers purpose, behavior, and identification; it lacks details on error handling or ambiguous matches but is largely complete.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
The input schema already has 100% description coverage, so the description adds minimal extra meaning beyond summarizing the two identification paths; this meets the baseline for parameter semantics.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly states the action ('Delete an Apple Note') with specific behavioral detail (moves to Recently Deleted) and identification methods (noteId or title), distinguishing it from sibling tools which perform other operations.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
While not explicitly contrasting with alternatives, the description implies usage scenarios by offering two identification methods; it provides adequate direction for a single-purpose delete tool without needing to exclude other tools.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
edit-noteA
Edit an existing Apple Note's title and/or content. Identify note by noteId or current title.
| Name | Required | Description | Default |
|---|---|---|---|
| path | No | Optional folder path to disambiguate duplicate titles | |
| title | No | Current title of the note to edit | |
| noteId | No | Apple Notes ID. If provided, skips title resolution. | |
| newTitle | No | New title (optional) | |
| newContent | No | New content in markdown format (optional, replaces entire content) |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
No annotations provided, so description carries full burden. It mentions identification methods but does not disclose that newContent replaces entire content or describe error handling. The behavioral impact is partially covered but not comprehensively.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
Single sentence with no wasted words. The description is concise and front-loaded with the action and key identification method.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
Although minimal, the description covers the basic purpose and identification. However, it omits critical details like replacement behavior of newContent, error handling, and results, which would be expected given no output schema.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema has 100% parameter description coverage. The description adds a high-level summary of identification and edit actions but does not provide significant new semantics beyond the schema.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly states the tool edits an existing Apple Note's title and/or content, and identifies the note by noteId or current title. This distinctly separates it from sibling tools like create-note or delete-note.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description implies use for editing but provides no explicit guidance on when to choose this tool over siblings like append-to-note or when not to use it. No prerequisites or exclusions are mentioned.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
get-noteA
Get a note's full content and details by noteId or title. Optionally scope by folder path. If the title is ambiguous, returns a list of matching candidates — retry with noteId or path to disambiguate.
| Name | Required | Description | Default |
|---|---|---|---|
| path | No | Optional folder path to disambiguate duplicate titles | |
| title | No | ||
| noteId | No | Apple Notes ID. If provided, skips title resolution. |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
With no annotations, the description carries full burden. It discloses the disambiguation behavior (returns candidates for ambiguous titles) and that noteId skips resolution. However, it does not describe behavior when no parameters are given, error handling, or return format details.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is two sentences long, front-loaded with the primary purpose, and contains no superfluous words. Every sentence contributes essential guidance.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
Given the tool's moderate complexity (3 optional parameters, no output schema), the description covers core functionality and disambiguation. However, it omits default behavior when no parameters are provided, which could leave agents uncertain.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
The schema covers two of three parameters with descriptions (path, noteId). The description adds value by explaining the title parameter's role in identification and the disambiguation mechanism, which is not present in the schema's empty title description.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly states 'Get a note's full content and details' using a specific verb and resource. It identifies two identification methods (noteId or title) and distinguishes from sibling tools like create-note, delete-note, etc., which serve different purposes.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description provides clear usage context: retrieves note content by noteId or title, with optional folder path for disambiguation. It hints at when to retry with noteId or path if title is ambiguous, but lacks explicit exclusions or alternatives to other sibling tools.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
index-notesA
Index all Apple Notes for semantic search. Run this first — takes seconds to minutes depending on note count.
| Name | Required | Description | Default |
|---|---|---|---|
No parameters | |||
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Without annotations, the description must disclose behavioral traits. It only mentions time duration, but does not state if the operation is read-only or has side effects (e.g., creating a database), or any authorization requirements. The safety profile is unclear.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
Two sentences, front-loaded with the verb and resource, and every word earns its place. No wasted text.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
For a zero-parameter tool with no output schema, the description is nearly complete. It could mention that search-notes depends on this index, but given the simplicity, it's adequate.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
The tool has zero parameters, so the schema covers all. The description adds value by explaining the purpose and timing, which is consistent with the baseline of 4 for no parameters.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly states the action 'Index all Apple Notes' with a specific purpose 'for semantic search', and distinguishes from sibling tools by positioning it as a preliminary step ('Run this first').
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description gives clear usage guidance: 'Run this first' and provides a time estimate. It does not explicitly exclude any scenarios, but with no alternative indexing tools among siblings, the context is sufficient.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
list-foldersA
List all Apple Notes folders with full paths and note counts
| Name | Required | Description | Default |
|---|---|---|---|
No parameters | |||
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
With no annotations, the description is the sole source of behavioral info. It adequately states the tool is a read-only list operation, but it does not disclose potential limitations, authentication needs, or any other behaviors beyond the obvious.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
A single, concise sentence that front-loads the action and output. No unnecessary words or structures.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
Given the simple nature (no parameters, no output schema), the description provides essential info: what it lists and what is included. Missing usage context slightly lowers completeness.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
The tool has zero parameters and schema description coverage is 100%, so the baseline is 4. The description does not need to add param info and correctly omits it.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly states the action ('list') and resource ('all Apple Notes folders'), including what is returned ('full paths and note counts'). This distinctively separates it from sibling tools like list-notes and search-notes.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
No guidance is provided on when to use this tool versus alternatives. The description simply states what it does without any contextual usage advice or exclusion criteria.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
list-notesA
List Apple Notes with title, path, and timestamps. Optionally filter by folder path and include note content.
| Name | Required | Description | Default |
|---|---|---|---|
| path | No | Optional folder path to filter notes (e.g. iCloud/Work/Projects). Use list-folders to get available paths. | |
| includeContent | No | If true, include note content in the response (default: false) |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
No annotations are provided, so the description must fully disclose behavior. It notes basic output fields but omits details on pagination, ordering, or rate limits.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
A single, concise sentence that front-loads the main action and optional features, with no extraneous words.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
Given no output schema and multiple sibling tools, the description should mention ordering, pagination, or when to use list-notes vs search-notes; it lacks these details.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema description coverage is 100%, but the description adds context by listing return fields (title, path, timestamps) and clarifying the path parameter's purpose beyond the schema.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly states the tool lists Apple Notes with specific attributes (title, path, timestamps), distinguishing it from sibling tools like get-note (single note) and search-notes (searching).
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description mentions optional filtering by folder path and references list-folders for available paths, but does not explicitly contrast with alternatives like search-notes for advanced queries.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
move-noteA
Move a note to a different folder. Identify note by noteId or title. Use list-folders to get available paths.
| Name | Required | Description | Default |
|---|---|---|---|
| path | No | Optional current folder path to disambiguate duplicate titles | |
| title | No | Title of the note to move | |
| noteId | No | Apple Notes ID. If provided, skips title resolution. | |
| targetPath | Yes | Full folder path to move the note to (e.g. iCloud/Work/Projects) |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
No annotations are provided, so the description bears the full burden. It implies mutation (moving a note) and describes identification methods, but lacks details on side effects, error conditions, or behavior for ambiguous titles.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
Two sentences: first states core purpose, second covers identification and a helpful hint. No wasted words, front-loaded.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
Given 4 parameters and no output schema, the description covers identification and references list-folders for paths. It could mention what happens if targetPath doesn't exist, but overall adequate for a move operation.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema coverage is 100%, baseline 3. The description adds value by explaining the relationship between noteId and title as alternative identifiers, and notes the path parameter's role in disambiguation.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly states the verb 'move' and the resource 'note' with destination 'folder', distinguishing it from sibling tools like create-note, delete-note, etc.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description explains how to identify the note (by noteId or title) and suggests using list-folders to get available paths, providing clear context for usage. However, it doesn't explicitly state when not to use this tool or alternatives.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
search-notesB
Semantic and full-text search over notes. Optionally filter by folder path.
| Name | Required | Description | Default |
|---|---|---|---|
| path | No | Optional: filter results to a specific folder path (e.g. iCloud/Work) | |
| limit | No | Max results to return (default: 50) | |
| query | Yes |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
With no annotations, the description must disclose behavioral traits. It only mentions search type (semantic/full-text) and an optional filter, but omits details like whether this is read-only, how results are ordered, pagination behavior, or content indexing status. This is insufficient for safe invocation.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
Two sentences, front-loaded with the core action and one key option. Every word contributes meaning. No redundancy or excess.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
Given the lack of output schema and annotations, the description is too sparse. It does not explain return format, what 'semantic' search entails, or potential limitations. For a search tool with multiple siblings, more context is needed for effective selection and use.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema description coverage is 67% (query lacks description). The description adds 'Optionally filter by folder path' which echoes the schema. It does not clarify the query parameter's syntax or semantics, nor does it explain limit behavior beyond the schema's default. Overall minimal added value beyond the schema.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description 'Semantic and full-text search over notes' clearly identifies the tool's action (search) and resource (notes), and the optional folder path filter adds specificity. It effectively distinguishes from sibling tools like list-notes and get-note by emphasizing content-based search.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description states the tool's capabilities but does not explicitly guide when to use it versus alternatives. No mention of when-not-to-use or suggestions for other tools like list-notes for browsing or get-note for a specific note.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
Tool Schema Changelog
Recent tool additions, removals, and schema changes observed during successful MCP inspections.
10 tool updates
v1.0.1- First observed
append-to-note - First observed
create-note - First observed
delete-note - First observed
edit-note - First observed
get-note - First observed
index-notes - First observed
list-folders - First observed
list-notes - First observed
move-note - First observed
search-notes
TDQS
Scored across 10 tools
Each tool targets a distinct action and resource: indexing, listing folders, listing notes, searching, getting, creating, editing, appending, moving, and deleting. While list-notes with content and get-note overlap slightly, the descriptions clearly differentiate listing summaries versus fetching full details.
All tools follow a consistent snake_case verb_noun pattern: index-notes, list-folders, search-notes, get-note, create-note, etc. This makes the tool set predictable and easy to navigate for an agent.
With 10 tools, the server is well-scoped for Apple Notes management. Each tool covers a necessary operation without bloat, and the count feels appropriate for the domain.
The surface covers the full note lifecycle: index, list, search, get, create, edit, append, move, and delete. Folder listing supports scoping operations, leaving no obvious dead ends for common workflows.
Maintenance
Related MCP Connectors
Search, read, and write your Apple Notes from ChatGPT/Claude via a local Mac agent + MCP relay.
Google Keep-style notes app with an MCP server for AI agents to read/write notes.
Agent-native notes, tasks, dev-docs, vaults, sync & handoffs. MCP + OpenAPI dual surface.
- TaprootOAuthcom.taproothq
Persistent memory layer for AI tools. Save and recall notes across Claude and other MCP clients.
Related MCP Servers
- AlicenseDqualityBmaintenanceEnables interaction with Apple Notes via natural language, supporting note creation, search, and retrieval with iCloud integration for seamless note management.320 npm25MIT
- AlicenseNot gradedqualityDmaintenanceA Model Context Protocol server that enables semantic search and retrieval of Apple Notes content, allowing AI assistants to access, search, and create notes using on-device embeddings.4,781 npm2MIT
- FlicenseAqualityDmaintenanceEnables interaction with Apple Notes on macOS through AppleScript, allowing users to list, search, read, create, update, and delete notes across accounts and folders.71-
- FlicenseAqualityDmaintenanceA local-only server that enables AI agents to create, read, search, and organize Apple Notes directly on macOS. It supports folder management, note formatting, and checklists using native automation to ensure data remains private and local.2410 npm-