SkillFoxx

Apple Notes MCP

An MCP server for Apple Notes on Mac: the agent reads, searches, creates, edits and exports notes and manages folders and tags.

  • 187 ★ on the repository
  • Last commit
  • MIT
MCP server

Broad access

Why this level

  • Reads and changes all notes and needs Full Disk Access to read the database.
  • The optional permission broker opens Notes capabilities to every process in the account.
All reasons and checks

sweetrb/apple-notes-mcpAuthor:sweetrb

Install

In your terminal, with SkillFoxx CLI

npx skillfoxx add mcp/apple-notes-mcp

Detects the agents on your machine, shows the access level and pins the version.

Other ways to install

Access and checks

How we review

Broad accessThe tool can change data, run commands or handle secrets.

  • Reads and changes all notes and needs Full Disk Access to read the database.
  • The optional permission broker opens Notes capabilities to every process in the account.

This is third-party code. Review the repository files before installing.

What it does

Apple Notes MCP is a local server that connects an AI assistant to the Notes app on macOS. It runs over stdio on the same Mac that holds the notes library. Through AppleScript, signed Apple Shortcuts and read-only database access it reads, searches, creates, edits, moves and deletes notes and folders, and handles accounts, native tags, checklists, tables, pinned notes, links and attachments. Notes export to Markdown through templates edited in a local web editor. There are batch operations, a `doctor` diagnostic and `get-capabilities`, which reports what works on your macOS version. Claude Code has a plugin with the bundled server and a skill, Codex and Antigravity have separate manifests, and manual registration uses `npx -y apple-notes-mcp@latest`. Password-protected notes are not read by the server.

Who it is for. Mac users who keep their work in Apple Notes and want Claude Code or Codex to search, summarize and tidy notes.

Good fit when

  • A conversation summary is saved as a separate note in the right folder.
  • All notes about a project deadline are found by keyword and summarized.
  • Drafts are moved to an archive folder in a batch.
  • A note is exported to Markdown with a custom template.

Not a fit when

  • Work is not on a Mac: the server uses AppleScript and the Notes app.
  • Notes are password-protected, which the server cannot read or modify.
  • The agent cannot be given Full Disk Access and Notes automation.

Example request

Find notes about the project deadline, write a short summary and save it as a new note in the Work folder.

MCP

Transport
stdio
Authentication
not required

Limitations

macOS with a configured Notes account, Node.js 20 or newer and permission to control Notes.app are needed. Reading from the database needs Full Disk Access, and native tags, checklists and tables work through Shortcuts only from macOS 13. Creating notes from Markdown through the native bridge requires macOS 26 and an iCloud account. The optional permission broker opens Notes capabilities to every process under your user account, so enable it deliberately. The description was checked against version 2.15.1.

How to disable. Remove the plugin through the client's plugin manager or run `claude mcp remove apple-notes`. Revoke the Full Disk Access and automation grants in macOS privacy settings and delete the imported Shortcuts.

FAQ

How do I check what works on my macOS version?

Call `get-capabilities`: for each feature it reports the minimum macOS version and the reason it is unavailable, such as `requires_macos_13`.

Is an Apple ID password or API key needed?

No. The server stores no passwords or tokens and needs only macOS permissions to control Notes and, if required, Full Disk Access.

What is the permission broker?

An optional process that holds Full Disk Access and Notes automation for the server. Every process under your account can use it, so enable it only when needed.

How do I install for Codex?

Run `codex mcp add apple-notes -- npx -y apple-notes-mcp@latest`. Do not register both a plugin and a manual entry, or the servers will duplicate.

Can voice notes be read?

For attached audio there is `transcribe-note-audio` with on-device transcription and `get-audio-transcripts` for stored transcripts. A helper app and Full Disk Access are needed.

Discussion

No questions or reviews yet.

MCP servers
Official

Automattic's official Simplenote MCP server: an agent reads, searches and optionally edits notes, with no sign-in on macOS

MCP serverExtended access33

An MCP server for Apple Mail on macOS: search, reading, drafts, rules and attachments, with confirmation for dangerous steps.

MCP serverBroad access105

A local MCP server for Mac: Claude, Codex and ChatGPT work in apps, files, terminal and browser under your permissions

MCP serverBroad access98
Official

Notes for iPhone and Mac that Claude, Claude Code, Codex and ChatGPT read and edit over MCP, with undo for AI edits

MCP serverExtended access34

An MCP server for the Joplin notes app: an assistant searches, creates, edits, tags and restores notes from the trash.

MCP serverBroad access174

README in short

Covers folders, native tags, checklists, tables and Markdown export, with features matched to the macOS version.

README badge

Report a problem