
Notesbridge
io.github.IsaiahDupreePublished by GitHub account IsaiahDupreev1.3.0Updated Oct 24, 2026
Search, read, and write your Apple Notes from ChatGPT/Claude via a local Mac agent + MCP relay.
Overview
Connector that lets ChatGPT or Claude search, read, and write Apple Notes on your own Mac through a local agent and a hosted relay.
- What you can do
- Search notes by keyword and read a note's full content
- List folders with note counts and list notes, optionally by folder
- Create new notes and append text to existing notes
- Rewrite a note's content (destructive, confirmed first)
- Manage the Mac agent: check pairing status, view logs, uninstall auto-start
- When to use it
- Useful when you want an assistant to look things up in or add to your Apple Notes without copying text by hand, and you are willing to keep a Mac awake and running a small local agent.
- Requirements
- A NotesBridge account created on the hosted site plus a pairing code; the apple-notes-agent CLI installed via npx on a Mac with Node 18 or newer; macOS permission for Terminal to control Notes; the Mac awake with the agent running; OAuth sign-in when connecting the connector. Self-hosting needs a Vercel account and a Supabase project with SUPABASE_URL, SUPABASE_SERVICE_ROLE_KEY and JWT_SECRET set.
Installation
In SourceWeft
- Open Notesbridge in the dashboard and add it to a workspace.
- Connect the required credentials. They are stored privately and never shown on public pages.
- Enable the server for the chats that should use its tools.
Web executable via Streamable HTTP. Remote servers run from the web runtime once configured in a workspace.
Use with an agent
Paste this prompt into Claude Code, Codex, Cursor or another agent — or into SourceWeft chat. The agent reads this server's install guide, shows you its publisher, endpoint and sign-in, and adds it to your client once you agree. Keys never go into a command.
Read https://sourceweft.com/mcp/io.github.IsaiahDupree%2Fnotesbridge/install.md and connect the MCP server it describes to my client. Before changing any config, show me its publisher, endpoint and sign-in method and wait for my OK. Never put an API key in a command or in a file I would commit; ask me where it should come from.Other MCP clients
Add this to your client's mcpServers config. The client completes OAuth sign-in on first connect.
{
"mcpServers": {
"notesbridge": {
"type": "http",
"url": "https://notesbridge.vercel.app/mcp"
}
}
}README
📝 NotesBridge
Use your Apple Notes from ChatGPT — search, read, and write, powered by your own Mac.
NotesBridge is a Model Context Protocol (MCP) connector that lets ChatGPT work with your Apple Notes. Every Notes action runs on your own Mac through a local agent. Requested note content travels through the hosted relay to ChatGPT; job arguments and results are temporarily stored in the relay database.
The agent accesses Apple Notes on your Mac. The relay stores account records and temporary job payloads/results; ChatGPT receives requested note content. Password-protected notes and attachment content are outside the verified read scope.
For users — 3 steps
1. Create your account at notesbridge.vercel.app and generate a pairing code.
2. Install the Mac agent (needs Node 18+):
The first time it touches Notes, macOS asks "Terminal wants to control Notes" — click OK (one time).
3. Connect ChatGPT: Settings → Plugins → turn on Developer mode (Security & login) → Create a custom plugin → paste the MCP Server URL https://notesbridge.vercel.app/mcp → Authentication OAuth → sign in & Allow.
That's it. In a new chat: "Search my Apple Notes for the Q3 planning note" or "Create a note titled Groceries with milk, eggs, coffee."
Your Mac must be awake with the agent running.
npx apple-notes-agent installmakes it start automatically at login and restart if it ever crashes.
Managing the agent
From this source checkout, for a private local text index (Node.js 22.13+), run
node agent/cli.mjs index-install. This builds the index in batches of 25
notes and checks for changes every 15 minutes. index-status reports coverage.
Search checks the current Notes metadata before using cached text, and falls
back to live Notes when the index is stale. Password-protected content and
attachment contents are excluded. The SQLite index stays in an owner-only
directory on the Mac, outside the repository.
The indexing commands are available in source; npm publication is separate.
What ChatGPT can do
Self-hosting
You can run your own relay so nothing depends on the hosted instance.
Prereqs: a Vercel account and a Supabase project (free tiers are fine).
- Storage — in your Supabase project's SQL editor, run
supabase/schema.sql. It creates a tiny Redis-shaped KV + queue surface (nb_*functions) with RLS on. - Deploy the
server/directory to Vercel. - Set env vars (see
server/.env.example):SUPABASE_URL,SUPABASE_SERVICE_ROLE_KEY— your project + service-role keyJWT_SECRET—openssl rand -hex 32
- Verify:
curl https://YOUR-APP.vercel.app/api/health→redisConfigured,redisOk,jwtSecretSetalltrue. - Point the agent at it:
npx apple-notes-agent pair <CODE> --server https://YOUR-APP.vercel.app.
How it works
- Auth — OAuth 2.1 with PKCE and Dynamic Client Registration (RFC 7591). ChatGPT registers itself, the user signs in on the NotesBridge consent page, and ChatGPT gets a scoped MCP access token. JWTs are HMAC-signed; three kinds (
session,agent,mcp) with distinct privileges. Optional email verification via Resend (RESEND_API_KEY); off unless configured, and enforcement is opt-in (REQUIRE_EMAIL_VERIFICATION). - Relay — MCP tool call → job pushed to
jobs:<user>(TTL ≤ the caller's wait window, so an abandoned job can't run late) → the Mac agent (holding a hanging long-poll) is handed the job within ~200ms, executes it, pushes the result → the MCP handler returns it. The long-poll means jobs are delivered on arrival rather than on a fixed interval, so relay overhead is ~300ms instead of ~1s. The agent is considered "online" only while it's actively connected. - Agent — a dependency-free Node CLI. Tools run via JXA (
osascript -l JavaScript) against Notes.app; arguments are passed as JSON over argv (never shell-interpolated). A macOS LaunchAgent keeps it alive across logins and crashes.
Repository layout
Development
Security & privacy
- Notes are read/written only on your Mac. The relay never persists note content — job payloads live in Redis-shaped storage with a short TTL and are deleted on delivery.
- The agent token is stored at
~/.notesbridge-agent.json(mode600). - No secrets are committed; see
.gitignoreand the.env.examplefiles. - Write tools are marked destructive so ChatGPT asks before overwriting.
License
MIT © Isaiah Dupree
Complete read coverage
list_notes and search return next_cursor. Pass it back until null; an empty search page can still have a cursor. Listings use stable note-ID order. Search reports password-protected notes as skipped. Run node test/live-all-notes.mjs for a read-only local coverage test after granting Notes automation. Current verification status is in the report.
Source: README.md at commit 8b63357
Tools
0Version history
1- v1.3.0LatestSep 16, 2026
Score
85% of the applicable checks met
How complete this listing is, computed from the registry entry, the endpoint and public sources. Not a rating of the server and not a statement that it is safe or working today: reachability is a dated check, and no installs or reviews go into the score.
- Reached in the last 30 daysRequired25 pts
- Auth declaredRequired10 pts
- Tools listed15 pts
Answer tools/list without a credential, or ship a package that starts in a sandbox without one.
- DescriptionRequired15 pts
- Logo10 pts
- Documentation15 pts
- License10 pts