Apple Notes MCP Server
Allows reading, creating, searching, updating, and deleting Apple Notes through direct interaction with the macOS Notes app.
Click on "Install Server".
Wait a few minutes for the server to deploy. Once ready, it will show a "Started" state.
In the chat, type
@followed by the MCP server name and your instructions, e.g., "@Apple Notes MCP ServerList my notes from the Work folder"
That's it! The server will respond to your query, and you can continue using it as needed.
Here is a step-by-step guide with screenshots.
Apple Notes MCP Server
An MCP (Model Context Protocol) server that lets AI assistants like Claude read, create, search, update, and delete your Apple Notes all through natural conversation.
Built with JXA (JavaScript for Automation) to communicate with the Notes app directly.
Requirements
macOS (Apple Notes is macOS-only)
Node.js 18+
An MCP-compatible client (e.g., Claude Code, Claude Desktop)
Related MCP server: Apple Notes MCP Server
Setup
1. Clone and build
git clone https://github.com/RodriguesJohn/applenotesmcp.git
cd applenotesmcp
npm install
npm run build
2. Configure your MCP client
Claude Code
Add to your ~/.mcp.json:
{
"mcpServers": {
"apple-notes": {
"command": "node",
"args": ["/path/to/applenotesmcp/dist/index.js"]
}
}
}Then restart Claude Code.
Claude Desktop
Add to your Claude Desktop config (~/Library/Application Support/Claude/claude_desktop_config.json):
{
"mcpServers": {
"apple-notes": {
"command": "node",
"args": ["/path/to/applenotesmcp/dist/index.js"]
}
}
}Then restart Claude Desktop.
Note: Replace
/path/to/applenotesmcpwith the actual path where you cloned the repo.
3. Grant permissions
The first time a tool runs, macOS will prompt you to allow your terminal (or Claude Desktop) to control the Notes app. Click OK to grant access.
Available Tools
Tool | Description |
| List all folders across all accounts |
| List notes, optionally filtered by folder (default limit: 50) |
| Get full content of a note by title |
| Get full content of a note by its unique ID |
| Search notes by keyword in title or body (max 25 results) |
| Create a new note with a title and body (HTML supported) |
| Update the body content of an existing note |
| Delete a note by title (moves to Recently Deleted) |
Usage Examples
Once connected, just ask Claude naturally:
"List all my notes folders"
"Show me my recent notes"
"Find notes about project ideas"
"Create a note called 'Meeting Notes' with today's action items"
"Update my grocery list note"
License
ISC
Learn building with AI from here - https://www.theaidesignacademy.com/
Available Tools
8 toolscreate_noteB
Create a new note in Apple Notes
| Name | Required | Description | Default |
|---|---|---|---|
| title | Yes | The title of the note | |
| body | Yes | The body content (HTML supported) | |
| folder | No | Folder to create the note in (uses default if omitted) |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
No annotations exist, so description must disclose behavior. It does not mention side effects, authentication requirements, error handling, or outcomes if folder is invalid. Agent lacks crucial cues.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
Single sentence, no redundancy. Efficient but could be expanded slightly without losing conciseness.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
Given no output schema and no annotations, the description should explain return value, default folder behavior, and error cases. It does not, leaving gaps for a creation tool.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema coverage is 100% with descriptions, so baseline is 3. The description adds no extra meaning beyond the schema; folder behavior and body format are already documented.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
Clearly states it creates a new note in Apple Notes, with a distinct verb and resource. Sibling tools like delete_note and update_note have different actions, so this description effectively differentiates.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
No guidance on when to use this tool versus alternatives (e.g., update_note for modifications). No prerequisites or conditions provided.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
delete_noteA
Delete a note by name (moves to Recently Deleted)
| Name | Required | Description | Default |
|---|---|---|---|
| name | Yes | The name/title of the note to delete |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
With no annotations provided, the description carries the full burden. It discloses that deletion moves the note to 'Recently Deleted', implying soft delete behavior. This is valuable context beyond a simple 'delete'. However, it does not mention any side effects on related data or permissions required.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is a single sentence of 7 words, containing no redundancy or unnecessary information. It is maximally concise and front-loaded with the key action and effect.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
Given the tool's simplicity (one required parameter, no output schema, no nested objects), the description is nearly complete. It explains what the tool does and the main effect (soft delete). It could benefit from noting any restrictions (e.g., cannot delete notes in use), but overall it is adequate.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema coverage is 100% with the parameter 'name' described in the schema as 'The name/title of the note to delete'. The description adds no further parameter details beyond the schema, resulting in a baseline score of 3.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly states the action ('delete') and the resource ('note by name'), and includes the behavioral detail 'moves to Recently Deleted'. It effectively distinguishes this tool from siblings like create_note, get_note, update_note, etc.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description implicitly indicates when to use (to delete a note), but provides no explicit guidance on when not to use, prerequisites, or alternatives. For instance, it does not mention that the deletion is reversible (soft delete) or compare to potential permanent delete options.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
get_noteB
Get the full content of a note by its name
| Name | Required | Description | Default |
|---|---|---|---|
| name | Yes | The name/title of the note |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Description implies a read-only operation but does not disclose behavioral traits such as errors, authorization needs, or side effects. With no annotations, more detail is warranted.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
Single sentence conveys the essential purpose concisely with no wasted words.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
The description is adequate for a simple read operation but lacks details about return format or error handling. No output schema to compensate.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
The only parameter 'name' already has a description in the schema, so the tool description adds no new meaning. Schema coverage is 100%, baseline score applies.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly states the verb 'Get', the resource 'full content of a note', and the identifier 'by its name'. It distinguishes this tool from sibling tools like get_note_by_id and create_note.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
No guidance on when to use this tool vs alternatives. No context about prerequisites or conditions for use.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
get_note_by_idC
Get the full content of a note by its unique ID
| Name | Required | Description | Default |
|---|---|---|---|
| id | Yes | The unique ID of the note |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
With no annotations, the description must disclose behavioral traits. It mentions 'full content' but does not state whether the operation is read-only, what errors occur for invalid IDs, or any permission requirements.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is very short and to the point, with no unnecessary words. However, it could be slightly more informative without sacrificing conciseness.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
The tool lacks an output schema, so the description should explain what 'full content' entails. It does not, leaving the return format unclear. Additionally, there is no guidance on usage or limitations.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
The input schema has 100% coverage and clearly documents the 'id' parameter. The description adds little new meaning, only calling it 'unique ID', which is redundant. The baseline score is appropriate.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly states the tool retrieves the full content of a note using its unique ID. It is specific enough to distinguish from list_notes and search_notes, but does not differentiate from the sibling get_note, which could cause ambiguity.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
No guidance is provided on when to use this tool versus alternatives like get_note or search_notes. The description does not indicate scenarios, prerequisites, or exclusions.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
list_foldersA
List all folders in Apple Notes
| Name | Required | Description | Default |
|---|---|---|---|
No parameters | |||
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
No annotations provided, so description must fully disclose behavior. It only states 'list all folders', lacking details on authentication, permission requirements, folder hierarchy, or whether folders are flat or nested. Does not describe effects or side effects.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
Single sentence with no extraneous information. Efficient and to the point.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
Given the simplicity (no parameters, no output schema), the description is minimally adequate. However, it does not explain what constitutes a folder, whether the list returns metadata or full objects, or if any ordering or filtering applies.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
No parameters in schema (0 params), so description does not need to add param info. Per rules, 0 params yields baseline 4. Description correctly mentions no parameters.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
Description clearly states verb 'List' and resource 'all folders in Apple Notes'. It is distinct from sibling tools which operate on notes (create, delete, get, list, search, update notes). No ambiguity.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
No guidance on when to use this tool versus alternatives. While siblings are all note-related, there is no mention of prerequisites, limitations, or comparisons. The agent must infer usage from context.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
list_notesC
List notes in Apple Notes, optionally filtered by folder
| Name | Required | Description | Default |
|---|---|---|---|
| folder | No | Folder name to filter by | |
| limit | No | Max notes to return (default 50) |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
No annotations exist, and the description fails to disclose behavioral traits like whether notes are returned with full content or only metadata, pagination behavior, or that it's a read operation. The minimal description does not compensate for the lack of annotations.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is a single concise sentence that is efficiently front-loaded with the purpose. It is not verbose, but slightly more explanatory text could improve clarity without losing conciseness.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
Given the lack of output schema and no information about what is returned (e.g., note titles, snippets, dates), the description is incomplete for an agent to understand the tool's full behavior. It does not cover sorting or default ordering.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema coverage is 100%, so baseline is 3. The description adds minimal value by mentioning optional folder filtering, but does not elaborate on parameter formats or constraints beyond the schema.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly states the tool lists notes in Apple Notes with optional folder filtering, which is specific and distinguishes it from search or retrieval tools. However, it doesn't explicitly differentiate from sibling tools like search_notes.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
No guidance is provided on when to use this tool versus alternatives such as search_notes or get_note. The description lacks any context about prerequisites or exclusions.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
search_notesA
Search notes by keyword in title or body
| Name | Required | Description | Default |
|---|---|---|---|
| query | Yes | Search query |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
With no annotations, the description carries full burden. It discloses that search covers title and body, but lacks details like case sensitivity, exact match behavior, or result format. Adequate for a simple tool but not thorough.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is a single sentence of 9 words, conveying essential information without any waste. It is front-loaded and efficient.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
Given the low complexity (one parameter, no output schema), the description provides sufficient context to understand the tool's behavior. However, minor details like case sensitivity or match type could enhance completeness, but are not critical.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
The schema provides a generic description 'Search query', but the tool description adds context by specifying that the keyword is searched in title and body, adding significant semantic meaning beyond the schema.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly states the purpose: searching notes by keyword in title or body. It uses a specific verb and resource and distinguishes from sibling tools like list_notes (which lists all without filtering) and get_note (retrieves specific note by ID).
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
No guidance on when to use this tool versus alternatives. For instance, it doesn't specify when to use search_notes vs list_notes or get_note, leaving ambiguity for the agent.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
update_noteB
Update the body content of an existing note
| Name | Required | Description | Default |
|---|---|---|---|
| name | Yes | The name/title of the note to update | |
| body | Yes | The new body content (HTML supported) |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
No annotations provided, and the description fails to disclose behavioral traits such as whether the entire body is replaced, what happens if the note doesn't exist, or required permissions.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
Single sentence, highly concise. Could be improved by including a brief note on behavior without becoming verbose.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
Tool has 2 parameters, no output schema, no annotations. Description lacks explanation of return value, error handling, or success conditions, leaving a gap in completeness.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema coverage is 100% with descriptions for both parameters. The description adds no extra meaning beyond the schema, baseline 3.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly states the verb 'update' and the resource 'body content of an existing note', distinguishing it from siblings like create_note, delete_note, and get_note.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
No guidance on when to use this tool vs alternatives, no mention of scenarios, prerequisites, or exclusions (e.g., only updates body, not title).
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
Tool Schema Changelog
Recent tool additions, removals, and schema changes observed during successful MCP inspections. Dates show when Glama detected each change.
8 tool updates
v1.0.0- First observed
create_note - First observed
delete_note - First observed
get_note - First observed
get_note_by_id - First observed
list_folders - First observed
list_notes - First observed
search_notes - First observed
update_note
TDQS
Most tools have clear distinct purposes, but get_note and get_note_by_id are both for reading a note by different identifiers, which could cause confusion if an agent doesn't know which to use.
All tool names follow a consistent verb_noun pattern in snake_case (e.g., create_note, list_folders, search_notes), with no deviations.
With 8 tools, the server covers essential note operations (CRUD, listing, searching) without being excessive or too sparse for the domain.
Basic note CRUD is present, but missing operations like creating/deleting folders and updating a note's title, which leaves notable gaps for full lifecycle management.
Maintenance
Resources
Unclaimed servers have limited discoverability.
Looking for Admin?
If you are the server author, to access and configure the admin panel.
Related MCP Connectors
Search, read, and write your Apple Notes from ChatGPT/Claude via a local Mac agent + MCP relay.
Create, search, and update notes in an xNotepad AI notebook, with semantic search and AI Q&A.
Cross-session, cross-device memory for your agent: remember and recall notes. No key to start.
- aNotepadOAuthcom.anotepad
AI access to your aNotepad online notes: read, search, write, and organize via 22 tools.
Related MCP Servers
- AlicenseDqualityBmaintenanceEnables interaction with Apple Notes via natural language, supporting note creation, search, and retrieval with iCloud integration for seamless note management.31724MIT
- FlicenseAqualityDmaintenanceEnables interaction with Apple Notes on macOS through AppleScript, allowing users to list, search, read, create, update, and delete notes across accounts and folders.71-
- AlicenseAqualityDmaintenanceEnables AI assistants to read, search, and create notes in Apple Notes on macOS via JXA, with fast bulk operations and a compact schema.7142MIT
- AlicenseAqualityDmaintenanceEnables AI clients to search, read, create, update, move, and delete Apple Notes on macOS via AppleScript automation.104332MIT
Latest Blog Posts
- Who's Calling? MCP Hosts Are an Identity Blind Spot (And the Spec Knows It)By Om-Shree-0709 on .mcpAgent IdentityOAuth 2.1
- Your AI Chatbot Just Exposed Your CEO's Salary to an InternBy Om-Shree-0709 on .Agent IdentityMCP SecurityOAuth Delegation
- Why MCP Servers Need Execution Sandboxing (And Why Your Current Stack Isn't Enough)By Om-Shree-0709 on .Agentic AiPrompt InjectionWebAssembly
MCP directory API
We provide all the information about MCP servers via our MCP API.
curl -X GET 'https://glama.ai/api/mcp/v1/servers/RodriguesJohn/applenotesmcp'
If you have feedback or need assistance with the MCP directory API, please join our Discord server