Skip to main content
Glama
ailenshen

Apple Notes MCP Server

by ailenshen

Servidor MCP de Notas de Apple

Lee y escribe Notas de Apple, con soporte para formato nativo de Notas de Apple.

servidor MCP apple-notes-mcp

La mayoría de los servidores MCP de Notas de Apple solo pueden escribir texto plano. Este crea notas con formato nativo: los títulos, encabezados, negritas y listas se renderizan como estilos reales de Notas de Apple, no como texto plano. Esto se logra aprovechando la capacidad de importación de Markdown integrada en la aplicación Notas.

Requiere: macOS 26 (Tahoe) o posterior, Node.js 24+

Configuración

1. Añadir a tu cliente MCP

Claude Desktop — edita ~/Library/Application Support/Claude/claude_desktop_config.json:

{
  "mcpServers": {
    "apple-notes": {
      "command": "npx",
      "args": ["-y", "@ailenshen/apple-notes-mcp@latest"]
    }
  }
}

Claude Code — ejecuta en la Terminal:

claude mcp add apple-notes -- npx -y @ailenshen/apple-notes-mcp@latest

2. Conceder permisos

Para admitir el formato nativo, el servidor utiliza la importación de Markdown integrada en la aplicación Notas: abre archivos .md con la aplicación Notas y confirma automáticamente el cuadro de diálogo de importación. Esto requiere dos permisos de macOS para node:

Permiso

Dónde habilitar

Por qué

Acceso total al disco

Ajustes del Sistema > Privacidad y seguridad > Acceso total al disco > habilita node

Leer la base de datos de Notas para listar y buscar

Accesibilidad

Ajustes del Sistema > Privacidad y seguridad > Accesibilidad > habilita node

Confirmar automáticamente el cuadro de diálogo de importación al crear notas

En el primer uso, macOS te pedirá que apruebes; simplemente haz clic en Permitir. Si te perdiste el aviso, ve a los ajustes anteriores y activa node manualmente. Después de conceder los permisos, reinicia tu cliente MCP.

Si falta un permiso, el servidor te dirá exactamente cuál es y cómo solucionarlo.

3. Empieza a usarlo

Simplemente habla con tu IA de forma natural:

  • "Lista todas mis notas en la carpeta Proyectos"

  • "Busca en mis notas 'agenda de reuniones'"

  • "Lee mi nota Lista de la compra"

  • "Crea una nota en Trabajo con los elementos de acción de hoy"

  • "Actualiza mi Lista de la compra con estos nuevos elementos"

  • "Elimina la nota llamada 'Borrador antiguo'"

Related MCP server: Apple Mail MCP

¿Qué puede hacer?

Herramienta

Descripción

list_notes

Explorar notas, opcionalmente filtrar por carpeta

search_notes

Encontrar notas por palabra clave

get_note

Leer el contenido completo como Markdown

create_note

Escribir Markdown → nota con formato nativo

update_note

Reemplazar contenido, conservando la carpeta

delete_note

Mover a Eliminado recientemente

Soporte de Markdown en Notas

Elemento

¿Funciona?

Encabezados, negrita, cursiva, listas, inline code

Sí

Citas en bloque

Contenido conservado, sin estilo de sangría

Enlaces

Texto conservado, URL perdida

Tablas, notas al pie

No

Acceso remoto (modo HTTP)

¿Quieres acceder a tus Notas de Apple desde tu teléfono u otro ordenador?

npx @ailenshen/apple-notes-mcp@latest --http

Esto imprime una URL de punto final con un secreto integrado:

Endpoint: http://localhost:3100/mcp/a3f8b2c9e1d4...

Dirige tu cliente MCP remoto a esta URL. Para acceder a través de Internet, colócalo detrás de HTTPS usando un túnel (ngrok, Cloudflare Tunnel, etc.).

Flag

Predeterminado

Descripción

--port <number>

3100

Número de puerto

--secret <string>

aleatorio

Secreto de URL personalizado

Para mantenerlo en ejecución tras reinicios, consulta la wiki para ver un ejemplo de LaunchAgent.

Cómo funciona

Acción

Método

Velocidad

Listar / Buscar

SQLite (solo lectura)

< 100ms

Leer

AppleScript → Markdown

~1s

Crear

Importación nativa de Markdown

~0.5s

Actualizar

Eliminar + Crear

~1.5s

Eliminar

AppleScript

~1s

  • Leer consulta la base de datos de Notas directamente a través de SQLite: rápido y seguro. El contenido se convierte de HTML de Apple a Markdown mediante turndown.

  • Crear utiliza la importación nativa de Markdown de macOS (open -a Notes), por lo que el formato se conserva de forma nativa. La aplicación Notas aparece brevemente (~0.5s) durante la creación.

  • Actualizar elimina la nota antigua y crea una nueva, conservando automáticamente la carpeta original.

  • Eliminar mueve las notas a Eliminado recientemente, igual que al hacerlo manualmente.

Limitaciones conocidas

  • Edición parcial de notas (p. ej., "corrige solo este párrafo") no es compatible. update_note siempre reemplaza el contenido completo. Esta es una limitación fundamental de cómo Notas expone el contenido: su interfaz de AppleScript devuelve HTML, no el Markdown original, por lo que un ciclo completo de lectura→edición→escritura limpio no es posible hoy en día.

  • Notas aparece brevemente durante la creación de notas. El flujo de importación de Markdown requiere confirmar automáticamente un cuadro de diálogo en la aplicación Notas, lo que puede traerla momentáneamente al primer plano.

Estas limitaciones se eliminarían si Apple añade la importación/exportación de Markdown a AppleScript, o abre una API oficial de Notas; ambas están bajo seguimiento para futuras versiones de macOS.

Visión

Notas de Apple es el lugar más natural para guardar el conocimiento personal en dispositivos Apple: se sincroniza en todas partes, es rápido y es privado. Pero es un jardín vallado sin API.

Este proyecto convierte a Notas de Apple en una fuente de datos de primera clase para la IA. El objetivo a largo plazo: dondequiera que estés hablando con la IA (en tu Mac, en tu teléfono, en la web), tus Notas de Apple siempre sean accesibles, legibles y editables.

Licencia

MIT

Available Tools

6 tools
create_noteA

Create a new note in Apple Notes from Markdown content. The first line becomes the title. Optionally specify a target folder (defaults to 'Notes').

NameRequiredDescriptionDefault
folderNoTarget folder name (e.g. 'Projects'). Defaults to 'Notes'.
markdownYesMarkdown content for the note. First line (with or without #) becomes the title.

TDQS

A3.8/5.0
Behavior2/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

No annotations provided, so the description carries full burden. It discloses title extraction and folder defaults but omits behavioral details like side effects, irreversibility, authentication needs, or what happens on failure. For a mutation tool, this is insufficient.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Two sentences with no wasted words. The first sentence states the core action, the second explains important details (title extraction, folder). Efficient and well-structured.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness4/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

For a simple creation tool with two parameters and no output schema, the description covers the essential behavior and key defaults. It lacks mention of return value or confirmation, but given the simplicity, it is largely sufficient.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters4/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema coverage is 100%, but the description adds value: it explains that the first line of markdown becomes the title, which is not in the schema. The folder parameter default is also reiterated, but schema already includes that. Overall, description enhances parameter understanding.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description clearly states the verb 'create', the resource 'note', and the source 'Markdown content'. It explains that the first line becomes the title and mentions optional folder with default. This distinguishes it from sibling tools like delete_note, get_note, etc.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines3/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

The description does not explicitly guide when to use this tool versus alternatives (e.g., update_note). It implies usage for creating new notes but lacks explicit exclusions or conditions, leaving it to the agent to infer from sibling names.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

delete_noteA

Delete a note from Apple Notes by title. Optionally specify folder to disambiguate. The note is moved to Recently Deleted.

NameRequiredDescriptionDefault
titleYesTitle of the note to delete
folderNoFolder name to scope the search

TDQS

A4.2/5.0
Behavior4/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

With no annotations, the description provides key behavioral context: the note is moved to Recently Deleted (not permanently erased), which is important for decision-making. However, it does not detail side effects, permission requirements, or recovery timeframe.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Extremely concise at two sentences, with the most critical information first. No unnecessary words or repetition.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness4/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

For a delete operation without output schema, the description adequately covers the action and its immediate consequence. It could mention that the note enters a recoverable state, but the core behavior is clear.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters4/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

The schema already describes both parameters (title required, folder optional). The description adds meaning by clarifying that title is the primary identifier and folder is for disambiguation, which is not redundant with schema.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description clearly states the verb (delete), resource (note), and method (by title). It also distinguishes from siblings like update_note by specifying the action and the consequence ('moved to Recently Deleted').

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines3/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

It implies when to use the folder parameter for disambiguation but lacks explicit guidance on when to choose delete_note over other tools like search_notes or update_note. No prerequisites or exclusions are mentioned.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

get_noteA

Get the full content of a note by its title, returned as Markdown. Optionally specify folder to disambiguate.

NameRequiredDescriptionDefault
titleYesNote title (exact match)
folderNoFolder name to scope the search

TDQS

A3.6/5.0
Behavior3/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

No annotations are provided, so the description carries the full burden. It states the output format (Markdown) but does not disclose error behavior (e.g., note not found), authentication requirements, or rate limits. Basic behavioral info is present, but significant gaps remain for a read operation.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is a single sentence with no wasted words. It front-loads the core purpose and output format, then adds the optional parameter. Perfectly concise for a simple tool.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness4/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

Given the tool's simplicity (two params, no output schema, no nested objects), the description covers the essentials: what it does, required input, output format, and optional disambiguation. Missing error handling details, but overall adequate for a straightforward retrieval tool.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema description coverage is 100%, so the schema already documents both parameters. The description adds minimal value: 'by its title' and 'Optionally specify folder to disambiguate' reinforce but don't extend the schema. Baseline 3 is appropriate.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose4/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description clearly states 'Get the full content of a note by its title, returned as Markdown.' It uses a specific verb and resource, and implicitly distinguishes from siblings (create, delete, list, search, update) by focusing on retrieval. Could be improved by noting it returns a single note, not a list.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines3/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

The description mentions 'Optionally specify folder to disambiguate,' providing a clear use case for the folder parameter. However, it offers no guidance on when not to use this tool versus alternatives, nor does it suggest using search_notes when the title is unknown. The sibling context helps but is not integrated.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

list_notesA

List notes, newest first, one line each: "title | folder | modified date | pinned". Returns 50 by default. To find notes by content, use search_notes instead.

NameRequiredDescriptionDefault
limitNoMax number of notes to return (default 50)
folderNoFilter by folder name

TDQS

A4.4/5.0
Behavior4/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

With no annotations, the description carries the full burden and does disclose real behavior: notes come newest-first, the default return size is 50, and each row is a fixed pipe-delimited line. It stops short of covering pagination beyond the default or confirming read-only semantics, but ordering, cardinality, and output format are the traits an agent actually needs here.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Three short sentences, front-loaded with purpose and output format, then the alternative. No filler and every clause is load-bearing.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness4/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

For a two-parameter list tool with no output schema, describing the line format, ordering, and default count covers the essential gaps the schema leaves open. The only omissions are pagination/truncation behavior beyond the default 50 and an explicit statement that this is a read-only operation.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema coverage is 100% and both parameters (limit, folder) are already fully documented in the schema. The description repeats the default of 50 and implies folder scoping but adds no syntax, matching rules, or edge cases beyond that. Baseline 3 applies when the schema does the heavy lifting.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

States a specific verb and resource ('List notes') plus the exact output shape: 'title | folder | modified date | pinned'. It explicitly names search_notes as the tool for a different use case, so an agent can separate it from its siblings without opening any schema.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines5/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

Gives an explicit routing rule: use this tool to enumerate notes, and use search_notes instead when the goal is finding notes by content. That is a clear when/when-not split against a named sibling.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

search_notesA

Full-text search across note titles and bodies. All space-separated words must match (case-insensitive). Each result is "title | folder | modified date" followed by an excerpt around the match, so you often don't need get_note. Returns 20 by default; title matches come first.

NameRequiredDescriptionDefault
limitNoMax number of results (default 20)
queryYesWords to search for

TDQS

A4.5/5.0
Behavior4/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

No annotations are provided, so the description carries the full burden and does well: it discloses the AND-matching rule, case-insensitivity, result ordering (title matches first), default result count, and the exact result shape. It stops short of covering pagination or the absence of folder/tag scoping, which matters for a search tool.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Three tight sentences, front-loaded with what the tool does and the matching rule, then the practical payoff, then ordering/default. Every clause is actionable and none is redundant.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness5/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

With no output schema, the description compensates by describing the return rendering ('title | folder | modified date' plus an excerpt) and result count, which is exactly what an agent needs to decide whether to call get_note afterward. Scope limitations (whether search spans all folders) are the only unaddressed item, a minor gap.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters4/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema coverage is 100%, so the baseline is 3, but the description genuinely enriches the 'query' parameter by spelling out that all space-separated words must match and that matching is case-insensitive — semantics the schema's 'Words to search for' does not convey. 'limit' gets no extra treatment beyond the default already in the schema.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

States a specific verb+resource ('Full-text search across note titles and bodies') and immediately defines the matching model. It also distinguishes itself from the sibling get_note by explaining that the excerpt means 'you often don't need get_note.' An agent can route without opening a schema.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines4/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

Gives a clear use condition: search this instead of calling get_note when you only need a snippet. It does not, however, contrast against list_notes (browse all) or explain when a broad browse is preferable to a search, so the alternative routing is only partly covered.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

update_noteA

Update an existing note in Apple Notes. Deletes the old note and creates a new one with the given Markdown content, preserving the original folder.

NameRequiredDescriptionDefault
titleYesTitle of the existing note to update
folderNoFolder name to scope the search for the existing note
markdownYesNew Markdown content for the note. First line (with or without #) becomes the title.

TDQS

A4.4/5.0
Behavior5/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

The description explicitly discloses the critical behavioral trait: 'Deletes the old note and creates a new one', which is essential because a user might assume in-place modification. This transparency is high. No annotations are present to conflict.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is only two sentences, front-loading the main action and then adding the important behavioral detail. Every part is informative, with no redundancy or extraneous text.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness4/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

Given the straightforward nature (3 parameters, no output schema), the description covers the core functionality and behavioral change. It lacks mention of error conditions or prerequisites (e.g., note must exist), but is otherwise sufficient for usage.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters4/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema description coverage is 100%, but the description adds value by clarifying that the first line of markdown becomes the title (with or without #), which is not in the schema. This extends understanding beyond the parameter descriptions.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description clearly states 'Update an existing note in Apple Notes', specifying the verb (update), resource (note), and system (Apple Notes). It distinguishes from siblings like create_note and delete_note by describing that this tool deletes the old note and creates a new one, making it a unique replacement operation.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines3/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

The description implies when to use the tool (to update content while preserving folder) but does not explicitly state when not to use it or mention alternative tools. Sibling tools are provided in context but not referenced in the description.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

Tool Schema Changelog

Recent tool additions, removals, and schema changes observed during successful MCP inspections.

  1. 6 tool updatesv1.4.1
    • Addedcreate_note
    • Addeddelete_note
    • Addedget_note
    • Addedlist_notes
    • Addedsearch_notes
    • Addedupdate_note
  2. 6 tool updatesv1.2.5
    • Removedcreate_note
    • Removeddelete_note
    • Removedget_note
    • Removedlist_notes
    • Removedsearch_notes
    • Removedupdate_note
  3. 6 tool updatesv1.3.1
    • Addedcreate_note
    • Addeddelete_note
    • Addedget_note
    • Addedlist_notes
    • Addedsearch_notes
    • Addedupdate_note
  4. 6 tool updatesv1.2.3
    • Removedcreate_note
    • Removeddelete_note
    • Removedget_note
    • Removedlist_notes
    • Removedsearch_notes
    • Removedupdate_note
  5. 6 tool updatesv0.1.0
    • First observedcreate_note
    • First observeddelete_note
    • First observedget_note
    • First observedlist_notes
    • First observedsearch_notes
    • First observedupdate_note

TDQS

A4.3/5.0

Scored across 6 tools

Disambiguation5/5

Each tool targets a distinct action (create/get/list/search/delete/update) on a single resource, the note. The descriptions explicitly clarify the potentially confusable pair list_notes vs search_notes (list by recency, search by content), leaving no misselection risk.

Naming Consistency5/5

Every tool follows the same verb_noun snake_case pattern (create_note, get_note, list_notes, search_notes, delete_note, update_note). The convention is fully predictable throughout.

Tool Count5/5

Six tools is well-scoped for a note-taking domain, covering the full CRUD lifecycle plus list and search without redundancy. Every tool earns its place.

Completeness5/5

The surface covers the complete note lifecycle: create, get, list, search, update, and delete, with sensible optional folder handling. No obvious dead ends for core note workflows remain.

Maintenance

ActivityMaintained
ResponsivenessNo issues

Related MCP Connectors

Related MCP Servers

  • A
    license
    A
    quality
    A
    maintenance
    A high-performance MCP server for Apple Mail that uses optimized JavaScript for Automation (JXA) to search and manage emails. It enables users to list accounts, fetch mailboxes, and retrieve today's, unread, or flagged messages with significantly improved speed through batch property fetching.
    7
    210 PyPI
    74
    GPL 3.0
  • A
    license
    A
    quality
    D
    maintenance
    Enables AI assistants to save well-organized technical articles to Apple Notes and local Markdown files simultaneously.
    5
    5,375 npm
    MIT
  • F
    license
    Not graded
    quality
    D
    maintenance
    Enables LLMs to read, write, and manage Apple Notes directly via markdown, including listing, fetching, creating, and appending notes.
    71 npm
    -