Apple Notes MCP

MCP server for Apple Notes on macOS.

Provides access to notes and folders for creation, organization, and management. Keep Notes as the system of record while enabling agents to read, create, update, move, and delete notes.

When to use

• Notes-only workflows
• Stronger isolation than the all-in-one server
• Structured note and folder operations through the native Notes app

What It Does

• List accounts and folders
• List, search, and manage notes (CRUD)
• Create, rename, and delete folders
• List note attachments
• Tool discovery helpers search_tools and get_tool_info for context-constrained clients
• Recent-note resources and organization prompts
• Health and permission checks: notes_health, notes_permission_guide, notes_recheck_permissions

Install On This Mac

uvx apple-mcp-notes

git clone https://github.com/JonathanRReed/Apple-MCPs.git
cd Apple-MCPs
uv sync --all-packages

Install In AI Agents

{
  "mcpServers": {
    "apple-notes": {
      "command": "uvx",
      "args": ["apple-mcp-notes"],
      "env": {
        "APPLE_NOTES_MCP_SAFETY_MODE": "full_access"
      }
    }
  }
}

claude mcp add --transport stdio --scope user apple-notes -- uvx apple-mcp-notes

Safety Modes

• safe_readonly
• safe_manage
• full_access

Transport

stdio is the default and recommended transport. Set APPLE_NOTES_MCP_TRANSPORT=streamable-http (with optional APPLE_NOTES_MCP_HOST and APPLE_NOTES_MCP_PORT) to serve Streamable HTTP instead.

Reading and Searching Notes

List and search results include available note plaintext, so search can match body text as well as titles and tags. Note properties are read in Notes.app's AppleScript context. Folder metadata is resolved at most once per listing request when it is missing from a note payload.

Literal control characters and complex emoji returned by Notes are decoded on the Python side without changing their text. Locked or unavailable note fields can still be empty; Automation access remains required.

Script Timeout

Every AppleScript call is bounded by APPLE_NOTES_MCP_SCRIPT_TIMEOUT_SECONDS (default 60, minimum 5) so a stalled Notes.app can never hang an MCP request indefinitely. A create timeout returns NOTE_CREATE_STATUS_UNKNOWN. A matching title and creation time cannot establish which operation created a note, so the server leaves matching notes untouched. Inspect the target folder before retrying. Note timestamps use an absolute UTC Unix epoch.

macOS Permissions

• Automation access to Notes is required

Launch Checklist

• Add uvx apple-mcp-notes (or a clone's AppleNotes-MCP/start.sh) to your MCP client
• Reload or reconnect the client so the Notes tool surface is loaded into context
• Call notes_health first
• If Notes automation is blocked, call notes_permission_guide
• After changing macOS permissions, call notes_recheck_permissions

Prompting Notes

• tools/list returns the full Notes tool surface. Context-constrained clients can use search_tools first, then get_tool_info for the Notes tool they need.
• Multiple accounts may each contain a Notes folder. Identify available accounts and folders on first use and set a default.
• Use Notes for reference material and saved context.
• Time-sensitive items should go to Reminders or Calendar instead.

Related

• Apple-Tools-MCP