<p align="center">
  <img src="assets/logo.svg" alt="aNotepad" width="220" />
</p>

<h1 align="center">aNotepad MCP Server</h1>

<p align="center">
  Connect your <a href="https://anotepad.com">aNotepad</a> online notes to Claude, ChatGPT, and Cursor
  through the <a href="https://modelcontextprotocol.io">Model Context Protocol</a>.
  Read, search, write, and organize your notes through natural conversation.
</p>

<p align="center">
  <a href="https://anotepad.com/mcp-access">Documentation</a> ·
  <a href="https://anotepad.com">anotepad.com</a> ·
  <a href="mailto:support@anotepad.com">Support</a>
</p>

---

> **Note:** This is the public home for the aNotepad MCP server. aNotepad is a **remote, hosted** MCP
> server — there's nothing to install or run. You connect your AI client straight to the hosted
> endpoint below and sign in with your aNotepad account. The server source lives in the private
> aNotepad codebase; this repo holds the registry manifest, docs, and branding.

## Connection

| | |
|---|---|
| **Endpoint** | `https://api.anotepad.com/mcp` |
| **Transport** | Streamable HTTP |
| **Auth** | OAuth 2.1 (PKCE) + Dynamic Client Registration (RFC 7591) — no API key setup |
| **Required plan** | aNotepad **Pro** or **Max** |

## Quick start

1. Make sure your aNotepad account is on the **Pro** or **Max** plan.
2. In your AI client's settings, add an MCP server with URL `https://api.anotepad.com/mcp`.
3. The client opens a browser window to sign in to aNotepad and approve access.
4. Ask things like *"summarize my recipe collection"* or *"find the note where I saved that GitHub link."*

### Client setup

<details>
<summary><strong>Claude Desktop</strong></summary>

1. **Settings → Connectors** (or **Settings → Developer → Edit Config** on older versions).
2. **Add custom connector**, paste `https://api.anotepad.com/mcp`.
3. Sign in to aNotepad in the browser window and approve.
4. The aNotepad tools appear under the connectors list.
</details>

<details>
<summary><strong>ChatGPT</strong> (Plus / Pro / Team / Enterprise)</summary>

1. Your name (bottom left) → **Settings → Connectors → Connect more**.
2. **Add custom connector**, paste `https://api.anotepad.com/mcp`.
3. Approve the OAuth flow.
</details>

<details>
<summary><strong>Cursor</strong></summary>

1. **Settings → MCP** → **Add new MCP server**.
2. Transport **HTTP / SSE**, URL `https://api.anotepad.com/mcp`.
3. Save, then sign in and approve in the browser window.
</details>

<details>
<summary><strong>MCP Inspector</strong> (testing)</summary>

```bash
npx @modelcontextprotocol/inspector
```
Set transport to **Streamable HTTP**, URL `https://api.anotepad.com/mcp`, then **Connect**.
</details>

## Tools

22 tools across six groups.

| Group | Tools |
|---|---|
| **Notes** | `list_notes`, `get_note`, `search_notes`, `create_note`, `update_note`, `delete_note` |
| **Versions** | `list_note_versions`, `get_note_version`, `restore_note_version` |
| **Export & email** | `get_note_download_url`, `email_note` |
| **Collections** | `list_collections`, `create_collection`, `move_note_to_collection`, `delete_collection` |
| **Comments** | `list_comments`, `list_recent_comments`, `create_comment`, `delete_comment` |
| **Files & bookmarks** | `list_note_files`, `get_note_file_download_url`, `delete_note_file`, `list_bookmarks_in_note`, `add_bookmark`, `remove_bookmark` |

## What's *not* exposed

Some operations stay on the web app, by design:

- **Setting note passwords** — removing a password is fine; setting a new value via AI is blocked (it would land in chat transcripts).
- **File uploads** — AI can list, download, and delete attachments, but new uploads go through the web app.
- **Account / billing changes** — plan changes, payment methods, etc. are web-app only.
- **Creator wallet setup** — switching a note to `Paid` is supported, but the one-time wallet/email verification must be done in the web app first.

## Privacy & security

- The AI sees **only your own notes** and their comments — never other users' notes or your account/billing data.
- Comments on public notes are wrapped in `<untrusted-comment>` markers in tool responses, signaling to the AI that the text is data, not instructions — a defense against prompt injection.
- Destructive tools (delete, change access, send email) are marked destructive, so most clients require an extra approval prompt.
- Note content and passwords are **never** written to server logs.

## Rate limits

| Plan | Tool calls / min | New notes / day | Emails / hour |
|---|---|---|---|
| Pro | 60 | 1,000 | 10 |
| Max | 300 | 5,000 | 10 |

Limits are per user, shared across all connected clients.

## Links

- 📖 Full documentation — https://anotepad.com/mcp-access
- 🔌 REST API — https://anotepad.com/api-access
- ✉️ Support — support@anotepad.com

## License

Documentation and manifest in this repository are released under the [MIT License](LICENSE).
The hosted aNotepad service and its source code are proprietary.