mcp-apple-notes
MCP Apple Notes

Un servidor del Protocolo de Contexto de Modelo (MCP) que permite la búsqueda semántica y RAG (Generación Aumentada por Recuperación) sobre tus notas de Apple. Funciona con cualquier cliente compatible con MCP: Claude Desktop, Cursor, Windsurf, Cline y otros.

Características
🔍 Búsqueda semántica en Apple Notes usando el modelo de embeddings en el dispositivo
all-MiniLM-L6-v2📝 Capacidades de búsqueda de texto completo
📂 Soporte para carpetas: listar carpetas, navegar por carpetas, filtrar búsquedas por carpeta
📊 Almacenamiento vectorial usando LanceDB
🤖 Funciona con cualquier cliente compatible con MCP (Claude, Cursor, Windsurf, Cline, etc.)
🍎 Integración nativa con Apple Notes mediante JXA
🔒 Modo de solo lectura opcional para una exploración segura
🏃♂️ Ejecución totalmente local: no se necesitan claves de API
Related MCP server: MCP Apple Notes
Seguridad y Transparencia
Debido a que este servidor interactúa con tus notas privadas de Apple, está diseñado teniendo en cuenta la transparencia absoluta. Se ejecuta al 100% localmente en tu Mac.
Sin nube, sin telemetría — Sin claves de API, ningún dato sale de tu máquina.
JXA nativo de Apple — Utiliza el puente de scripting oficial de Apple JavaScript for Automation.
Embeddings en el dispositivo — El modelo
all-MiniLM-L6-v2se ejecuta localmente mediante@huggingface/transformers.Verificable — Se recomienda encarecidamente leer cada línea de código (especialmente
index.ts) antes de que toque tus notas.Las versiones de GitHub incluyen sumas de verificación SHA-256 para que puedas verificar los artefactos descargados.
Instalación y Configuración
Elige el método de instalación que se adapte a tu flujo de trabajo.
Método 1: Instalar desde el código fuente (recomendado)
Al clonar el repositorio localmente, puedes inspeccionar el código fuente y saber exactamente qué se está ejecutando en tu máquina.
Requisitos previos: Node.js (v18+) o Bun
git clone https://github.com/Dan8Oren/mcp-apple-notes && cd mcp-apple-notes && bun install{
"mcpServers": {
"apple-notes": {
"command": "bun",
"args": ["run", "/path/to/mcp-apple-notes/index.ts"]
}
}
}Usando NPM:
git clone https://github.com/Dan8Oren/mcp-apple-notes && cd mcp-apple-notes && npm installLuego, añade el servidor a la configuración de tu cliente MCP. Reemplaza /path/to/mcp-apple-notes con la ruta donde clonaste el repositorio:
{
"mcpServers": {
"apple-notes": {
"command": "npx",
"args": ["tsx", "/path/to/mcp-apple-notes/index.ts"]
}
}
}Consejo: ¿Quieres probarlo sin riesgos? Habilita el modo de solo lectura para bloquear todas las operaciones de escritura mientras exploras.
"env": { "MCP_APPLE_NOTES_READ_ONLY": "1" }
Método 2: Inicio rápido mediante npx
Si prefieres un enfoque de configuración cero y confías en el paquete npm publicado, puedes simplemente añadir esto directamente a tu configuración de MCP:
{
"mcpServers": {
"apple-notes": {
"command": "npx",
"args": ["-y", "@dan8oren/mcp-apple-notes"]
}
}
}Después de la configuración, reinicia tu cliente y pídele a tu asistente de IA que "index my notes" (indexe mis notas) para comenzar.
Instrucciones por cliente
Abre Settings → Developer → Edit Config
Pega la configuración JSON elegida en
claude_desktop_config.jsonReinicia Claude Desktop
Registros:
tail -n 50 -f ~/Library/Logs/Claude/mcp-server-apple-notes.log# npm version:
claude mcp add apple-notes npx -- -y @dan8oren/mcp-apple-notes
# or from source:
claude mcp add apple-notes npx -- tsx /path/to/mcp-apple-notes/index.tsAñade la configuración JSON a ~/.cursor/mcp.json (global) o .cursor/mcp.json en la raíz de tu proyecto.
Añade la configuración JSON a ~/.windsurf/mcp.json.
Herramientas disponibles
Herramienta | Descripción |
| Indexa todas las notas para búsqueda semántica. Ejecuta esto primero |
| Lista todas las carpetas de Apple Notes con rutas completas y conteo de notas |
| Lista notas con metadatos. Filtro |
| Búsqueda semántica + texto completo con filtro de ruta y límite opcionales |
| Obtiene el contenido completo por noteId o título. Devuelve candidatos si hay ambigüedad |
| Crea una nueva nota con contenido markdown, opcionalmente en una carpeta |
| Edita el título y/o contenido (markdown) de una nota existente |
| Añade contenido markdown a una nota existente |
| Mueve una nota a una carpeta diferente |
| Elimina una nota (la mueve a Eliminados recientemente) |
Verificación antes de confiar
Cada operación de Apple Notes es una llamada a JXA que puedes inspeccionar en index.ts. Sin solicitudes de red, sin sincronización en segundo plano, solo llamadas al puente de scripting local.
Modo de solo lectura
¿Quieres una red de seguridad? Habilita el modo de solo lectura para bloquear todas las operaciones de escritura; solo estarán disponibles las herramientas de búsqueda, listado y lectura:
{
"mcpServers": {
"apple-notes": {
"command": "npx",
"args": ["-y", "@dan8oren/mcp-apple-notes"],
"env": { "MCP_APPLE_NOTES_READ_ONLY": "1" }
}
}
}Cuando está habilitado, solo están disponibles estas herramientas: index-notes, list-folders, list-notes, search-notes, get-note.
Modo detallado (verbose)
Habilita el registro detallado para ver cada llamada JXA antes de que se ejecute (registrado en stderr):
Flag de CLI — añade --verbose a los argumentos de configuración de tu cliente MCP:
{
"mcpServers": {
"apple-notes": {
"command": "npx",
"args": ["--verbose", "-y", "@dan8oren/mcp-apple-notes"]
}
}
}Variable de entorno — para clientes que soportan env:
{
"mcpServers": {
"apple-notes": {
"command": "npx",
"args": ["-y", "@dan8oren/mcp-apple-notes"],
"env": { "MCP_APPLE_NOTES_VERBOSE": "1" }
}
}
}Referencia de operaciones JXA
Operación | Tipo | Qué hace |
| Lectura | Lista todas las notas (id, título, ruta de carpeta) |
| Lectura | Lista todas las carpetas con rutas y conteo de notas |
| Lectura | Obtiene notas en una carpeta específica |
| Lectura | Obtiene el contenido completo de una nota por ID |
| Escritura | Crea una nueva nota con título y contenido |
| Escritura | Añade contenido HTML a una nota existente |
| Escritura | Actualiza el título y/o contenido de una nota |
| Escritura | Mueve una nota a una carpeta diferente |
| Destructiva | Mueve una nota a Eliminados recientemente |
Todas las operaciones pasan por el puente de scripting JXA de Apple (Application('Notes')). Sin acceso directo al sistema de archivos, sin llamadas de red. La operación delete no es permanente: las notas van a Eliminados recientemente y pueden recuperarse en un plazo de 30 días.
Formato de respuesta
Las respuestas de las herramientas son objetos JSON en un sobre consistente:
Éxito:
{ "ok": true, "data": ... }Error:
{ "ok": false, "error": { "type": "...", "message": "..." } }
La mayoría de las respuestas orientadas a notas ahora incluyen el id estable de Apple Notes para que los clientes puedan rastrear las notas de forma segura a través de cambios de nombre y movimientos.
Agradecimientos
Originalmente basado en RafalWilinski/mcp-apple-notes.
Available Tools
10 toolsappend-to-noteB
Append content to the end of an existing Apple Note. Identify note by noteId or title.
| Name | Required | Description | Default |
|---|---|---|---|
| path | No | Optional folder path to disambiguate duplicate titles | |
| title | No | Title of the note to append to | |
| noteId | No | Apple Notes ID. If provided, skips title resolution. | |
| content | Yes | Content in markdown format to append to the end of the note |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
No annotations provided, and the description fails to disclose behaviors such as side effects (e.g., saving the note), required permissions, error states (e.g., if note not found), or any constraints like size limits.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is concise (one sentence) and directly addresses the core action, but lacks any structured breakdown (e.g., bullet points) that could improve readability.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
Given the complexity of 4 parameters and no output schema, the description omits important context such as the return value (success/failure), error handling, and whether the appending is immediate or requires further action.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema coverage is 100% and the description mostly repeats the existing schema comments (e.g., 'Optional folder path to disambiguate duplicate titles'), adding no significant new meaning beyond the structured data.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly states the action (append content), the resource (existing Apple Note), and how to identify it (by noteId or title). It effectively distinguishes from siblings like edit-note or create-note.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description implies the tool is for appending content to an existing note, but does not explicitly state when to use it versus alternatives like edit-note or search-notes.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
create-noteA
Create a new Apple Note with a title and markdown content. Optionally place it in a folder path.
| Name | Required | Description | Default |
|---|---|---|---|
| title | Yes | ||
| folder | No | Optional folder path to create the note in (e.g. iCloud/Work/Projects). Use list-folders to get available paths. | |
| content | Yes | Note content in markdown format |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
No annotations are provided, so the description carries full burden for behavioral disclosure. It does not mention error behaviors, overwrite policies, character limits, or markdown restrictions, leaving significant gaps for an AI agent.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is a single sentence with no wasted words. It conveys the essential purpose efficiently.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
Given the tool's simplicity and lack of output schema, the description is minimally viable but lacks details about error conditions, folder existence, or fallback behavior. It does not leverage sibling tools for contextual guidance.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema coverage is 67% (two of three parameters have descriptions). The description adds context by naming 'title and markdown content' and giving a folder path example, but does not substantially enhance understanding beyond the schema for the title parameter.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly states the verb 'Create', resource 'Apple Note', and key aspects: title, markdown content, and optional folder placement. It effectively distinguishes from sibling tools like edit-note or delete-note.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description mentions optional folder placement and references list-folders for paths, but does not explicitly state when to use this tool versus alternatives (e.g., append-to-note or edit-note). No when-not-to-use guidance is provided.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
delete-noteA
Delete an Apple Note (moves to Recently Deleted). Identify note by noteId or title.
| Name | Required | Description | Default |
|---|---|---|---|
| path | No | Optional folder path to disambiguate duplicate titles | |
| title | No | Title of the note to delete | |
| noteId | No | Apple Notes ID. If provided, skips title resolution. |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
With no annotations, the description carries the full burden and discloses the key behavioral trait (soft delete to Recently Deleted) and the mechanism (direct resolution with noteId). It does not cover effects of missing identifiers or permissions, but the core behavior is explained.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is a single, well-structured sentence conveying purpose, behavioral detail, and identification options without any extraneous words.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
For a simple delete operation with three optional parameters and no output schema, the description adequately covers purpose, behavior, and identification; it lacks details on error handling or ambiguous matches but is largely complete.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
The input schema already has 100% description coverage, so the description adds minimal extra meaning beyond summarizing the two identification paths; this meets the baseline for parameter semantics.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly states the action ('Delete an Apple Note') with specific behavioral detail (moves to Recently Deleted) and identification methods (noteId or title), distinguishing it from sibling tools which perform other operations.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
While not explicitly contrasting with alternatives, the description implies usage scenarios by offering two identification methods; it provides adequate direction for a single-purpose delete tool without needing to exclude other tools.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
edit-noteA
Edit an existing Apple Note's title and/or content. Identify note by noteId or current title.
| Name | Required | Description | Default |
|---|---|---|---|
| path | No | Optional folder path to disambiguate duplicate titles | |
| title | No | Current title of the note to edit | |
| noteId | No | Apple Notes ID. If provided, skips title resolution. | |
| newTitle | No | New title (optional) | |
| newContent | No | New content in markdown format (optional, replaces entire content) |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
No annotations provided, so description carries full burden. It mentions identification methods but does not disclose that newContent replaces entire content or describe error handling. The behavioral impact is partially covered but not comprehensively.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
Single sentence with no wasted words. The description is concise and front-loaded with the action and key identification method.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
Although minimal, the description covers the basic purpose and identification. However, it omits critical details like replacement behavior of newContent, error handling, and results, which would be expected given no output schema.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema has 100% parameter description coverage. The description adds a high-level summary of identification and edit actions but does not provide significant new semantics beyond the schema.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly states the tool edits an existing Apple Note's title and/or content, and identifies the note by noteId or current title. This distinctly separates it from sibling tools like create-note or delete-note.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description implies use for editing but provides no explicit guidance on when to choose this tool over siblings like append-to-note or when not to use it. No prerequisites or exclusions are mentioned.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
get-noteA
Get a note's full content and details by noteId or title. Optionally scope by folder path. If the title is ambiguous, returns a list of matching candidates — retry with noteId or path to disambiguate.
| Name | Required | Description | Default |
|---|---|---|---|
| path | No | Optional folder path to disambiguate duplicate titles | |
| title | No | ||
| noteId | No | Apple Notes ID. If provided, skips title resolution. |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
With no annotations, the description carries full burden. It discloses the disambiguation behavior (returns candidates for ambiguous titles) and that noteId skips resolution. However, it does not describe behavior when no parameters are given, error handling, or return format details.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is two sentences long, front-loaded with the primary purpose, and contains no superfluous words. Every sentence contributes essential guidance.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
Given the tool's moderate complexity (3 optional parameters, no output schema), the description covers core functionality and disambiguation. However, it omits default behavior when no parameters are provided, which could leave agents uncertain.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
The schema covers two of three parameters with descriptions (path, noteId). The description adds value by explaining the title parameter's role in identification and the disambiguation mechanism, which is not present in the schema's empty title description.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly states 'Get a note's full content and details' using a specific verb and resource. It identifies two identification methods (noteId or title) and distinguishes from sibling tools like create-note, delete-note, etc., which serve different purposes.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description provides clear usage context: retrieves note content by noteId or title, with optional folder path for disambiguation. It hints at when to retry with noteId or path if title is ambiguous, but lacks explicit exclusions or alternatives to other sibling tools.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
index-notesA
Index all Apple Notes for semantic search. Run this first — takes seconds to minutes depending on note count.
| Name | Required | Description | Default |
|---|---|---|---|
No parameters | |||
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Without annotations, the description must disclose behavioral traits. It only mentions time duration, but does not state if the operation is read-only or has side effects (e.g., creating a database), or any authorization requirements. The safety profile is unclear.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
Two sentences, front-loaded with the verb and resource, and every word earns its place. No wasted text.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
For a zero-parameter tool with no output schema, the description is nearly complete. It could mention that search-notes depends on this index, but given the simplicity, it's adequate.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
The tool has zero parameters, so the schema covers all. The description adds value by explaining the purpose and timing, which is consistent with the baseline of 4 for no parameters.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly states the action 'Index all Apple Notes' with a specific purpose 'for semantic search', and distinguishes from sibling tools by positioning it as a preliminary step ('Run this first').
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description gives clear usage guidance: 'Run this first' and provides a time estimate. It does not explicitly exclude any scenarios, but with no alternative indexing tools among siblings, the context is sufficient.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
list-foldersA
List all Apple Notes folders with full paths and note counts
| Name | Required | Description | Default |
|---|---|---|---|
No parameters | |||
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
With no annotations, the description is the sole source of behavioral info. It adequately states the tool is a read-only list operation, but it does not disclose potential limitations, authentication needs, or any other behaviors beyond the obvious.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
A single, concise sentence that front-loads the action and output. No unnecessary words or structures.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
Given the simple nature (no parameters, no output schema), the description provides essential info: what it lists and what is included. Missing usage context slightly lowers completeness.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
The tool has zero parameters and schema description coverage is 100%, so the baseline is 4. The description does not need to add param info and correctly omits it.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly states the action ('list') and resource ('all Apple Notes folders'), including what is returned ('full paths and note counts'). This distinctively separates it from sibling tools like list-notes and search-notes.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
No guidance is provided on when to use this tool versus alternatives. The description simply states what it does without any contextual usage advice or exclusion criteria.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
list-notesA
List Apple Notes with title, path, and timestamps. Optionally filter by folder path and include note content.
| Name | Required | Description | Default |
|---|---|---|---|
| path | No | Optional folder path to filter notes (e.g. iCloud/Work/Projects). Use list-folders to get available paths. | |
| includeContent | No | If true, include note content in the response (default: false) |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
No annotations are provided, so the description must fully disclose behavior. It notes basic output fields but omits details on pagination, ordering, or rate limits.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
A single, concise sentence that front-loads the main action and optional features, with no extraneous words.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
Given no output schema and multiple sibling tools, the description should mention ordering, pagination, or when to use list-notes vs search-notes; it lacks these details.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema description coverage is 100%, but the description adds context by listing return fields (title, path, timestamps) and clarifying the path parameter's purpose beyond the schema.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly states the tool lists Apple Notes with specific attributes (title, path, timestamps), distinguishing it from sibling tools like get-note (single note) and search-notes (searching).
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description mentions optional filtering by folder path and references list-folders for available paths, but does not explicitly contrast with alternatives like search-notes for advanced queries.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
move-noteA
Move a note to a different folder. Identify note by noteId or title. Use list-folders to get available paths.
| Name | Required | Description | Default |
|---|---|---|---|
| path | No | Optional current folder path to disambiguate duplicate titles | |
| title | No | Title of the note to move | |
| noteId | No | Apple Notes ID. If provided, skips title resolution. | |
| targetPath | Yes | Full folder path to move the note to (e.g. iCloud/Work/Projects) |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
No annotations are provided, so the description bears the full burden. It implies mutation (moving a note) and describes identification methods, but lacks details on side effects, error conditions, or behavior for ambiguous titles.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
Two sentences: first states core purpose, second covers identification and a helpful hint. No wasted words, front-loaded.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
Given 4 parameters and no output schema, the description covers identification and references list-folders for paths. It could mention what happens if targetPath doesn't exist, but overall adequate for a move operation.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema coverage is 100%, baseline 3. The description adds value by explaining the relationship between noteId and title as alternative identifiers, and notes the path parameter's role in disambiguation.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly states the verb 'move' and the resource 'note' with destination 'folder', distinguishing it from sibling tools like create-note, delete-note, etc.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description explains how to identify the note (by noteId or title) and suggests using list-folders to get available paths, providing clear context for usage. However, it doesn't explicitly state when not to use this tool or alternatives.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
search-notesB
Semantic and full-text search over notes. Optionally filter by folder path.
| Name | Required | Description | Default |
|---|---|---|---|
| path | No | Optional: filter results to a specific folder path (e.g. iCloud/Work) | |
| limit | No | Max results to return (default: 50) | |
| query | Yes |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
With no annotations, the description must disclose behavioral traits. It only mentions search type (semantic/full-text) and an optional filter, but omits details like whether this is read-only, how results are ordered, pagination behavior, or content indexing status. This is insufficient for safe invocation.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
Two sentences, front-loaded with the core action and one key option. Every word contributes meaning. No redundancy or excess.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
Given the lack of output schema and annotations, the description is too sparse. It does not explain return format, what 'semantic' search entails, or potential limitations. For a search tool with multiple siblings, more context is needed for effective selection and use.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema description coverage is 67% (query lacks description). The description adds 'Optionally filter by folder path' which echoes the schema. It does not clarify the query parameter's syntax or semantics, nor does it explain limit behavior beyond the schema's default. Overall minimal added value beyond the schema.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description 'Semantic and full-text search over notes' clearly identifies the tool's action (search) and resource (notes), and the optional folder path filter adds specificity. It effectively distinguishes from sibling tools like list-notes and get-note by emphasizing content-based search.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description states the tool's capabilities but does not explicitly guide when to use it versus alternatives. No mention of when-not-to-use or suggestions for other tools like list-notes for browsing or get-note for a specific note.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
Tool Schema Changelog
Recent tool additions, removals, and schema changes observed during successful MCP inspections.
10 tool updates
v1.0.1- First observed
append-to-note - First observed
create-note - First observed
delete-note - First observed
edit-note - First observed
get-note - First observed
index-notes - First observed
list-folders - First observed
list-notes - First observed
move-note - First observed
search-notes
TDQS
Scored across 10 tools
Each tool targets a distinct action and resource: indexing, listing folders, listing notes, searching, getting, creating, editing, appending, moving, and deleting. While list-notes with content and get-note overlap slightly, the descriptions clearly differentiate listing summaries versus fetching full details.
All tools follow a consistent snake_case verb_noun pattern: index-notes, list-folders, search-notes, get-note, create-note, etc. This makes the tool set predictable and easy to navigate for an agent.
With 10 tools, the server is well-scoped for Apple Notes management. Each tool covers a necessary operation without bloat, and the count feels appropriate for the domain.
The surface covers the full note lifecycle: index, list, search, get, create, edit, append, move, and delete. Folder listing supports scoping operations, leaving no obvious dead ends for common workflows.
Maintenance
Related MCP Connectors
Search, read, and write your Apple Notes from ChatGPT/Claude via a local Mac agent + MCP relay.
Google Keep-style notes app with an MCP server for AI agents to read/write notes.
Agent-native notes, tasks, dev-docs, vaults, sync & handoffs. MCP + OpenAPI dual surface.
- TaprootOAuthcom.taproothq
Persistent memory layer for AI tools. Save and recall notes across Claude and other MCP clients.
Related MCP Servers
- AlicenseDqualityBmaintenanceEnables interaction with Apple Notes via natural language, supporting note creation, search, and retrieval with iCloud integration for seamless note management.320 npm25MIT
- AlicenseNot gradedqualityDmaintenanceA Model Context Protocol server that enables semantic search and retrieval of Apple Notes content, allowing AI assistants to access, search, and create notes using on-device embeddings.4,781 npm2MIT
- FlicenseAqualityDmaintenanceEnables interaction with Apple Notes on macOS through AppleScript, allowing users to list, search, read, create, update, and delete notes across accounts and folders.71-
- FlicenseAqualityDmaintenanceA local-only server that enables AI agents to create, read, search, and organize Apple Notes directly on macOS. It supports folder management, note formatting, and checklists using native automation to ensure data remains private and local.2410 npm-