Apple Notes MCP Server
Apple Notes MCP 서버
Apple Notes 기본 서식을 지원하며 Apple Notes를 읽고 씁니다.
대부분의 Apple Notes MCP 서버는 일반 텍스트만 작성할 수 있습니다. 이 서버는 기본 서식이 적용된 노트를 생성합니다. 제목, 헤딩, 굵게, 목록 등이 일반 텍스트가 아닌 실제 Apple Notes 스타일로 렌더링됩니다. 이는 Notes.app의 내장 Markdown 가져오기 기능을 활용하여 구현되었습니다.
요구 사항: macOS 26 (Tahoe) 이상, Node.js 24 이상
설정
1. MCP 클라이언트에 추가
Claude Desktop — ~/Library/Application Support/Claude/claude_desktop_config.json 파일을 편집하세요:
{
"mcpServers": {
"apple-notes": {
"command": "npx",
"args": ["-y", "@ailenshen/apple-notes-mcp@latest"]
}
}
}Claude Code — 터미널에서 실행하세요:
claude mcp add apple-notes -- npx -y @ailenshen/apple-notes-mcp@latest2. 권한 부여
기본 서식을 지원하기 위해 이 서버는 Notes.app의 내장 Markdown 가져오기 기능을 사용합니다. 즉, .md 파일을 Notes.app으로 열고 가져오기 대화 상자를 자동으로 확인합니다. 이를 위해서는 node에 대해 두 가지 macOS 권한이 필요합니다:
권한 | 활성화 위치 | 이유 |
전체 디스크 접근 권한 | 시스템 설정 > 개인정보 보호 및 보안 > 전체 디스크 접근 권한 > | 목록 및 검색을 위해 Notes 데이터베이스 읽기 |
손쉬운 사용 | 시스템 설정 > 개인정보 보호 및 보안 > 손쉬운 사용 > | 노트 생성 시 가져오기 대화 상자 자동 확인 |
처음 사용할 때 macOS가 승인을 요청하면 '허용'을 클릭하세요. 메시지를 놓쳤다면 위의 설정으로 이동하여 node를 수동으로 켜주세요. 권한을 부여한 후 MCP 클라이언트를 다시 시작하세요.
권한이 누락된 경우, 서버가 정확히 어떤 권한이 필요한지, 어떻게 해결해야 하는지 알려줍니다.
3. 사용 시작
AI와 자연스럽게 대화하세요:
"Projects 폴더에 있는 내 모든 노트 나열해줘"
"내 노트에서 '회의 안건' 검색해줘"
"내 쇼핑 목록 노트 읽어줘"
"Work 폴더에 오늘의 할 일 항목이 포함된 노트 생성해줘"
"내 쇼핑 목록에 이 새로운 항목들을 업데이트해줘"
"'오래된 초안'이라는 이름의 노트 삭제해줘"
Related MCP server: Apple Mail MCP
무엇을 할 수 있나요?
도구 | 설명 |
| 노트 탐색, 폴더별 필터링 가능 |
| 키워드로 노트 찾기 |
| 전체 내용을 Markdown으로 읽기 |
| Markdown 작성 → 기본 서식이 적용된 노트 생성 |
| 폴더를 유지하면서 내용 교체 |
| 최근 삭제된 항목으로 이동 |
Notes에서의 Markdown 지원
요소 | 작동 여부 |
헤딩, 굵게, 기울임꼴, 목록, | 예 |
블록 인용 | 내용은 유지되나 들여쓰기 스타일 없음 |
링크 | 텍스트는 유지되나 URL 손실 |
표, 각주 | 아니요 |
원격 액세스 (HTTP 모드)
휴대폰이나 다른 컴퓨터에서 Apple Notes에 액세스하고 싶으신가요?
npx @ailenshen/apple-notes-mcp@latest --http이 명령은 내장된 비밀 키가 포함된 엔드포인트 URL을 출력합니다:
Endpoint: http://localhost:3100/mcp/a3f8b2c9e1d4...원격 MCP 클라이언트를 이 URL로 지정하세요. 인터넷을 통해 액세스하려면 터널(ngrok, Cloudflare Tunnel 등)을 사용하여 HTTPS 뒤에 배치하세요.
플래그 | 기본값 | 설명 |
| 3100 | 포트 번호 |
| 무작위 | 사용자 지정 URL 비밀 키 |
재부팅 후에도 계속 실행되도록 하려면 위키에서 LaunchAgent 예시를 확인하세요.
작동 원리
작업 | 방식 | 속도 |
목록 / 검색 | SQLite (읽기 전용) | < 100ms |
읽기 | AppleScript → Markdown | ~1초 |
생성 | 기본 Markdown 가져오기 | ~0.5초 |
업데이트 | 삭제 + 생성 | ~1.5초 |
삭제 | AppleScript | ~1초 |
읽기는 SQLite를 통해 Notes 데이터베이스를 직접 쿼리하므로 빠르고 안전합니다. 내용은 turndown을 통해 Apple의 HTML에서 Markdown으로 변환됩니다.
생성은 macOS의 기본 Markdown 가져오기(
open -a Notes)를 사용하므로 서식이 기본적으로 유지됩니다. 생성 중에 Notes.app이 잠시(~0.5초) 나타납니다.업데이트는 이전 노트를 삭제하고 새 노트를 생성하며, 원본 폴더를 자동으로 유지합니다.
삭제는 수동으로 삭제하는 것과 동일하게 노트를 '최근 삭제된 항목'으로 이동시킵니다.
알려진 제한 사항
부분 노트 편집(예: "이 단락만 수정해줘")은 지원되지 않습니다.
update_note는 항상 전체 내용을 교체합니다. 이는 Notes가 콘텐츠를 노출하는 방식의 근본적인 제한입니다. AppleScript 인터페이스는 원본 Markdown이 아닌 HTML을 반환하므로, 현재로서는 깔끔한 읽기→편집→쓰기 왕복이 불가능합니다.노트 생성 중 Notes.app이 잠시 나타납니다. Markdown 가져오기 흐름은 Notes.app에서 대화 상자를 자동으로 확인해야 하므로, 잠시 동안 앱이 포그라운드로 나타날 수 있습니다.
이러한 제한 사항은 Apple이 AppleScript에 Markdown 가져오기/내보내기를 추가하거나 공식 Notes API를 공개하면 해결될 것이며, 두 가지 모두 향후 macOS 릴리스를 위해 추적 중입니다.
비전
Apple Notes는 Apple 기기에서 개인 지식을 보관하기에 가장 자연스러운 곳입니다. 어디서나 동기화되고, 빠르며, 비공개적입니다. 하지만 API가 없는 폐쇄적인 환경입니다.
이 프로젝트는 Apple Notes를 AI를 위한 일류 데이터 소스로 만듭니다. 장기적인 목표는 Mac, 휴대폰, 웹 등 어디에서 AI와 대화하든 Apple Notes에 항상 액세스하고, 읽고, 쓸 수 있도록 하는 것입니다.
라이선스
MIT
Available Tools
6 toolscreate_noteA
Create a new note in Apple Notes from Markdown content. The first line becomes the title. Optionally specify a target folder (defaults to 'Notes').
| Name | Required | Description | Default |
|---|---|---|---|
| folder | No | Target folder name (e.g. 'Projects'). Defaults to 'Notes'. | |
| markdown | Yes | Markdown content for the note. First line (with or without #) becomes the title. |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
No annotations provided, so the description carries full burden. It discloses title extraction and folder defaults but omits behavioral details like side effects, irreversibility, authentication needs, or what happens on failure. For a mutation tool, this is insufficient.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
Two sentences with no wasted words. The first sentence states the core action, the second explains important details (title extraction, folder). Efficient and well-structured.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
For a simple creation tool with two parameters and no output schema, the description covers the essential behavior and key defaults. It lacks mention of return value or confirmation, but given the simplicity, it is largely sufficient.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema coverage is 100%, but the description adds value: it explains that the first line of markdown becomes the title, which is not in the schema. The folder parameter default is also reiterated, but schema already includes that. Overall, description enhances parameter understanding.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly states the verb 'create', the resource 'note', and the source 'Markdown content'. It explains that the first line becomes the title and mentions optional folder with default. This distinguishes it from sibling tools like delete_note, get_note, etc.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description does not explicitly guide when to use this tool versus alternatives (e.g., update_note). It implies usage for creating new notes but lacks explicit exclusions or conditions, leaving it to the agent to infer from sibling names.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
delete_noteA
Delete a note from Apple Notes by title. Optionally specify folder to disambiguate. The note is moved to Recently Deleted.
| Name | Required | Description | Default |
|---|---|---|---|
| title | Yes | Title of the note to delete | |
| folder | No | Folder name to scope the search |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
With no annotations, the description provides key behavioral context: the note is moved to Recently Deleted (not permanently erased), which is important for decision-making. However, it does not detail side effects, permission requirements, or recovery timeframe.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
Extremely concise at two sentences, with the most critical information first. No unnecessary words or repetition.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
For a delete operation without output schema, the description adequately covers the action and its immediate consequence. It could mention that the note enters a recoverable state, but the core behavior is clear.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
The schema already describes both parameters (title required, folder optional). The description adds meaning by clarifying that title is the primary identifier and folder is for disambiguation, which is not redundant with schema.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly states the verb (delete), resource (note), and method (by title). It also distinguishes from siblings like update_note by specifying the action and the consequence ('moved to Recently Deleted').
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
It implies when to use the folder parameter for disambiguation but lacks explicit guidance on when to choose delete_note over other tools like search_notes or update_note. No prerequisites or exclusions are mentioned.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
get_noteA
Get the full content of a note by its title, returned as Markdown. Optionally specify folder to disambiguate.
| Name | Required | Description | Default |
|---|---|---|---|
| title | Yes | Note title (exact match) | |
| folder | No | Folder name to scope the search |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
No annotations are provided, so the description carries the full burden. It states the output format (Markdown) but does not disclose error behavior (e.g., note not found), authentication requirements, or rate limits. Basic behavioral info is present, but significant gaps remain for a read operation.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is a single sentence with no wasted words. It front-loads the core purpose and output format, then adds the optional parameter. Perfectly concise for a simple tool.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
Given the tool's simplicity (two params, no output schema, no nested objects), the description covers the essentials: what it does, required input, output format, and optional disambiguation. Missing error handling details, but overall adequate for a straightforward retrieval tool.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema description coverage is 100%, so the schema already documents both parameters. The description adds minimal value: 'by its title' and 'Optionally specify folder to disambiguate' reinforce but don't extend the schema. Baseline 3 is appropriate.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly states 'Get the full content of a note by its title, returned as Markdown.' It uses a specific verb and resource, and implicitly distinguishes from siblings (create, delete, list, search, update) by focusing on retrieval. Could be improved by noting it returns a single note, not a list.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description mentions 'Optionally specify folder to disambiguate,' providing a clear use case for the folder parameter. However, it offers no guidance on when not to use this tool versus alternatives, nor does it suggest using search_notes when the title is unknown. The sibling context helps but is not integrated.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
list_notesA
List notes, newest first, one line each: "title | folder | modified date | pinned". Returns 50 by default. To find notes by content, use search_notes instead.
| Name | Required | Description | Default |
|---|---|---|---|
| limit | No | Max number of notes to return (default 50) | |
| folder | No | Filter by folder name |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
With no annotations, the description carries the full burden and does disclose real behavior: notes come newest-first, the default return size is 50, and each row is a fixed pipe-delimited line. It stops short of covering pagination beyond the default or confirming read-only semantics, but ordering, cardinality, and output format are the traits an agent actually needs here.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
Three short sentences, front-loaded with purpose and output format, then the alternative. No filler and every clause is load-bearing.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
For a two-parameter list tool with no output schema, describing the line format, ordering, and default count covers the essential gaps the schema leaves open. The only omissions are pagination/truncation behavior beyond the default 50 and an explicit statement that this is a read-only operation.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema coverage is 100% and both parameters (limit, folder) are already fully documented in the schema. The description repeats the default of 50 and implies folder scoping but adds no syntax, matching rules, or edge cases beyond that. Baseline 3 applies when the schema does the heavy lifting.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
States a specific verb and resource ('List notes') plus the exact output shape: 'title | folder | modified date | pinned'. It explicitly names search_notes as the tool for a different use case, so an agent can separate it from its siblings without opening any schema.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
Gives an explicit routing rule: use this tool to enumerate notes, and use search_notes instead when the goal is finding notes by content. That is a clear when/when-not split against a named sibling.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
search_notesA
Full-text search across note titles and bodies. All space-separated words must match (case-insensitive). Each result is "title | folder | modified date" followed by an excerpt around the match, so you often don't need get_note. Returns 20 by default; title matches come first.
| Name | Required | Description | Default |
|---|---|---|---|
| limit | No | Max number of results (default 20) | |
| query | Yes | Words to search for |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
No annotations are provided, so the description carries the full burden and does well: it discloses the AND-matching rule, case-insensitivity, result ordering (title matches first), default result count, and the exact result shape. It stops short of covering pagination or the absence of folder/tag scoping, which matters for a search tool.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
Three tight sentences, front-loaded with what the tool does and the matching rule, then the practical payoff, then ordering/default. Every clause is actionable and none is redundant.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
With no output schema, the description compensates by describing the return rendering ('title | folder | modified date' plus an excerpt) and result count, which is exactly what an agent needs to decide whether to call get_note afterward. Scope limitations (whether search spans all folders) are the only unaddressed item, a minor gap.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema coverage is 100%, so the baseline is 3, but the description genuinely enriches the 'query' parameter by spelling out that all space-separated words must match and that matching is case-insensitive — semantics the schema's 'Words to search for' does not convey. 'limit' gets no extra treatment beyond the default already in the schema.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
States a specific verb+resource ('Full-text search across note titles and bodies') and immediately defines the matching model. It also distinguishes itself from the sibling get_note by explaining that the excerpt means 'you often don't need get_note.' An agent can route without opening a schema.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
Gives a clear use condition: search this instead of calling get_note when you only need a snippet. It does not, however, contrast against list_notes (browse all) or explain when a broad browse is preferable to a search, so the alternative routing is only partly covered.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
update_noteA
Update an existing note in Apple Notes. Deletes the old note and creates a new one with the given Markdown content, preserving the original folder.
| Name | Required | Description | Default |
|---|---|---|---|
| title | Yes | Title of the existing note to update | |
| folder | No | Folder name to scope the search for the existing note | |
| markdown | Yes | New Markdown content for the note. First line (with or without #) becomes the title. |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
The description explicitly discloses the critical behavioral trait: 'Deletes the old note and creates a new one', which is essential because a user might assume in-place modification. This transparency is high. No annotations are present to conflict.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is only two sentences, front-loading the main action and then adding the important behavioral detail. Every part is informative, with no redundancy or extraneous text.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
Given the straightforward nature (3 parameters, no output schema), the description covers the core functionality and behavioral change. It lacks mention of error conditions or prerequisites (e.g., note must exist), but is otherwise sufficient for usage.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema description coverage is 100%, but the description adds value by clarifying that the first line of markdown becomes the title (with or without #), which is not in the schema. This extends understanding beyond the parameter descriptions.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly states 'Update an existing note in Apple Notes', specifying the verb (update), resource (note), and system (Apple Notes). It distinguishes from siblings like create_note and delete_note by describing that this tool deletes the old note and creates a new one, making it a unique replacement operation.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description implies when to use the tool (to update content while preserving folder) but does not explicitly state when not to use it or mention alternative tools. Sibling tools are provided in context but not referenced in the description.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
Tool Schema Changelog
Recent tool additions, removals, and schema changes observed during successful MCP inspections.
6 tool updates
v1.4.1- Added
create_note - Added
delete_note - Added
get_note - Added
list_notes - Added
search_notes - Added
update_note
6 tool updates
v1.2.5- Removed
create_note - Removed
delete_note - Removed
get_note - Removed
list_notes - Removed
search_notes - Removed
update_note
6 tool updates
v1.3.1- Added
create_note - Added
delete_note - Added
get_note - Added
list_notes - Added
search_notes - Added
update_note
6 tool updates
v1.2.3- Removed
create_note - Removed
delete_note - Removed
get_note - Removed
list_notes - Removed
search_notes - Removed
update_note
6 tool updates
v0.1.0- First observed
create_note - First observed
delete_note - First observed
get_note - First observed
list_notes - First observed
search_notes - First observed
update_note
TDQS
Scored across 6 tools
Each tool targets a distinct action (create/get/list/search/delete/update) on a single resource, the note. The descriptions explicitly clarify the potentially confusable pair list_notes vs search_notes (list by recency, search by content), leaving no misselection risk.
Every tool follows the same verb_noun snake_case pattern (create_note, get_note, list_notes, search_notes, delete_note, update_note). The convention is fully predictable throughout.
Six tools is well-scoped for a note-taking domain, covering the full CRUD lifecycle plus list and search without redundancy. Every tool earns its place.
The surface covers the complete note lifecycle: create, get, list, search, update, and delete, with sensible optional folder handling. No obvious dead ends for core note workflows remain.
Maintenance
Related MCP Connectors
Convert documents to Markdown and back, keep them, and share them as a page with one link.
PDF, Word, PowerPoint, Excel, HTML, EPUB to Markdown: OCR, page ranges, tables, RAG chunking
Convert PDF, Word, Excel, PowerPoint, e-mails and web pages to clean Markdown for LLMs.
Documents to Markdown: PDF, DOCX, PPTX, XLSX, HTML. Scanned PDF pages read by AI.
Related MCP Servers
- MIT
- AlicenseAqualityAmaintenanceA high-performance MCP server for Apple Mail that uses optimized JavaScript for Automation (JXA) to search and manage emails. It enables users to list accounts, fetch mailboxes, and retrieve today's, unread, or flagged messages with significantly improved speed through batch property fetching.7210 PyPI74GPL 3.0
- AlicenseAqualityDmaintenanceEnables AI assistants to save well-organized technical articles to Apple Notes and local Markdown files simultaneously.55,375 npmMIT
- FlicenseNot gradedqualityDmaintenanceEnables LLMs to read, write, and manage Apple Notes directly via markdown, including listing, fetching, creating, and appending notes.71 npm-