Skip to main content
Glama
Sign In
Notesnook Local MCP Bridge

Notesnook Local MCP Bridge

by shenzhui007
OverviewSchemaSourceRelated ServersDiscussionsAdmin
TypeScript
Local

Notesnook Local MCP Bridge

An unofficial, experimental Notesnook MCP bridge with a Codex desktop plugin for Linux x64. Search authorized notes, inspect text and images, and review proposed changes before applying them.

This community project is not affiliated with or endorsed by Notesnook or Streetwriters.

Before you connect

The bridge runs locally over stdio and uses a separate encrypted profile. It does not open or modify the official desktop app's local database. Account authentication and synchronization use Notesnook's official services through a pinned official core.

Local execution does not mean notes stay on your computer. Note content and images returned by tools are sent to your chosen AI service. Read PRIVACY.md before authorizing access. Passwords, verification codes and unlock keys are entered locally, never in chat.

Start with an isolated test account. This has not received an independent security audit.

Related MCP server: kb-mcp-server

What it can do

  • Search and read ordinary synced notes in locally authorized notebooks, or separately authorized unfiled notes.

  • Read block inventories and supported attached images.

  • Preview and apply title, tag, notebook membership and supported rich-text changes; create notes through a controlled document schema.

  • Preview notebook creation, renaming, hierarchy changes and trash operations when notebook management is enabled locally.

  • Check conflicts and single-use plans, inspect operation status, and prepare recovery previews.

  • Diagnose installation and runtime state, and back up or restore the encrypted profile into a new directory.

There are 19 MCP tools. Locked, local-only, deleted and unauthorized notes remain inaccessible. Selecting a parent notebook does not authorize its children. Recovery has conditions; it is not a substitute for an independent backup.

Install

Use the Linux x64 release archive and its matching .sha256 file once published. Keep the entire extracted delivery at a permanent location, then run:

sh ./install.sh --check
sh ./install.sh --install
sh ./install.sh --verify

Run each command only after the previous one succeeds. The installer prints the installed setup-local.sh path. Open it locally to sign in, synchronize and save the access scope. In a new chat select Notesnook Local MCP Bridge and check notes_status before using notes.

The installation workflow targets a Codex desktop host with compatible local-plugin CLI support. Other MCP clients, browser-only sessions, phones, Windows and macOS have not been validated. Requires Python3, libsecret, flock and a signed-in Linux desktop session with an available unlocked Secret Service. Node and program dependencies are bundled in the binary delivery.

See installation, diagnostics, profile backup and known limitations.

Build and inspect

sh scripts/setup.sh --check
sh scripts/setup.sh --prepare
npm run verify
npm run release
# Use the exact RELEASE.json path printed by the release command:
npm run export -- /absolute/path/to/RELEASE.json

Preparation downloads dependencies and compiles native modules. Read development first. It does not sign into an account. Runtime uses pinned Node 22.20.0 and Notesnook core 8.1.3 at commit 623ceb4b23e23db44bd1e8ab16fbe4a46f1ccfa7, plus the documented sodium interoperability patch.

Builds record a source digest, package digest and build ID. These identify content and detect changes; they do not certify safety, author identity or security. See architecture and validation.

Source and license

GPL-3.0-or-later; see LICENSE and third-party notices. The public source snapshot excludes local profiles, private service deployment scripts, personal note materials, local reports and the author's previous Git history. Synthetic multilingual tests remain intentional.

The protocol adapter modules named private-* are retained for isolated compatibility regression tests. They are not a hosted service, do not include credentials, and are not configured or started by the local plugin installer.

Please read CONTRIBUTING.md and SECURITY.md before sharing reports. Do not attach account databases, credentials, private notes, local setup URLs or raw logs.

Tool Schema Changelog

Recent tool additions, removals, and schema changes observed during successful MCP inspections.

Loading tool schema changelog…

    This server cannot be deployed

    One endpoint for every MCP toolRayrun runs every MCP server behind one URL and holds the credentials. Each call is decided per client, tool, and argument, then recorded.ray.runAd

    Maintenance

    ActivityNo data
    ResponsivenessOutdated data

    Resources

    Related MCP Connectors

    Related MCP Servers

    • kb-mcp-server

      venkateshds2u
      A
      license
      A
      quality
      B
      maintenance
      Enables users to create, retrieve, update, delete, and full-text search a local knowledge base of notes persisted in SQLite with FTS5, exposed over stdio or authenticated Streamable HTTP. It also surfaces recent/single-note resources and prompts for summarizing notes and drafting replies.
      5
      MIT

    • Notesnook MCP

      XDanielPaul
      A
      license
      Not graded
      quality
      C
      maintenance
      Enables AI clients to search, read, and (when writes are explicitly enabled) create, update, and organize notes from a locally synced and decrypted Notesnook account, along with browsing notebooks, tags, and templates. Includes optional import of Tolaria vaults and template-based note creation, with all decryption happening locally on macOS.
      GPL 3.0

    • mac-stickies-mcp

      wangwang0204
      A
      license
      Not graded
      quality
      B
      maintenance
      Enables reading, searching, and safely editing Apple Stickies on macOS through a local MCP client, with version-checked writes, backups, undo, and recoverable delete/restore. Runs entirely on-device over stdio, using Accessibility for live-note edits while refusing to overwrite data on conflicts or missing permissions.
      1
      MIT