apple-notes — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited apple-notes (Plugin) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
MCP Apple Notes
mcp-apple-notes is an MCP server for semantic search and connection-discovery across your own Apple Notes — hybrid search, Swanson-ABC bridges, entity threads, and cited synthesis over everything you've written.
It traverses your accumulated mass of notes: semantic + BM25 hybrid search, non-obvious bridge connections, entity threads, related-notes, and grounded synthesis across everything you've ever written in Apple Notes. Embeddings, search, BM25, clustering, and bridges run on-device; only synthesis generation calls an LLM (local via LM Studio/Ollama, or cloud via OpenAI — your choice). Built on the Model Context Protocol (MCP).
Forked from RafalWilinski/mcp-apple-notes — this fork reads the SQLite store + protobuf directly and adds bridges, entities, feed, and synthesis.
/plugin marketplace add connerkward/ckw-skills
/plugin install apple-notes@connerkwardThis registers the MCP server and bundles the apple-notes-search agent skill. Or install the MCP server manually — see Installation below (requires macOS + bun + Full Disk Access).
Other MCP Notes servers break at scale. They use JXA (AppleScript automation) to read notes one-by-one — fine for 50 notes, unusable at 500+. At 1,800 notes, JXA takes ~49 minutes just to fetch content. On macOS Sequoia it's worse: Apple silently denies Automation permission to processes without a bundle ID, so JXA-based servers fail entirely. This fork reads the SQLite database directly, decodes the protobuf blobs for real note text, and indexes 1,800 notes in under 5 seconds.
MCP Apple Notes
| Feature | This fork | RafalWilinski (base) | disco-trooper | sirmews | dhravya |
|---|---|---|---|---|---|
| Notes access | SQLite (direct) | JXA | JXA | SQLite | JXA |
| Fetch 1800 notes | ~430ms | ~49 min (est.) | ~49 min (est.) | fast | slow |
| Sequoia compatible | ✅ | ⚠️ JXA denied | ⚠️ JXA denied | ✅ | ⚠️ |
| Content quality | Protobuf decoded | Raw HTML | Raw HTML | Partial | Raw |
| Semantic search | ✅ | ✅ | ✅ | ❌ | ❌ |
| Auto re-index on search | ✅ | ❌ | ❌ | ❌ | ❌ |
| Folder-aware search | ✅ Full path | ❌ | ✅ | ✅ | ✅ |
| Note chunking | ✅ 1500 chars | ❌ | ✅ | ❌ | ❌ |
| Re-ranking (RRF × title × recency) | ✅ | RRF only | RRF only | ❌ | ❌ |
| Non-blocking index UI | ✅ Live progress | ❌ | ❌ | ❌ | ❌ |
| Incremental indexing | ✅ | ❌ | ✅ | ❌ | ❌ |
| Update existing notes | ✅ | ❌ | ✅ | ❌ | ❌ |
| Tags + wikilinks | ✅ | ❌ | ❌ | ❌ | ❌ |
| Related notes | ✅ Multi-signal | ❌ | ❌ | ❌ | ❌ |
JXA on macOS Sequoia: processes without a bundle ID are silently auto-denied Automation permission. This fork reads SQLite directly.
all-MiniLM-L6-v2 on-device embeddingsRRF × title_boost × recency_factorRun the server directly and open the browser UI — no MCP client needed:
bun index.ts # → http://localhost:3741/ (also serves /mcp)Six modes, building from retrieval toward sensemaking:
~/.mcp-apple-notes/consolidated.jsonl make the same underlying move), and entity threads ("X notes across Y folders mention Z", from the entity graph). Every item shows its evidence in plain text. 👍/👎 on any item tunes the ranking: a tiny online logistic regression (pure TS, no deps) takes a few SGD steps per vote; votes append to ~/.mcp-apple-notes/votes.jsonl (with the item's feature vector) and replay on boot, so the ranking survives restarts. Diversity constraints: ≤2 consecutive items of one kind, no note more than twice per page of 20; "show more" paginates. Endpoints: GET /api/feed?offset=&limit=, POST /api/vote {id, vote: 1|-1}.GET /api/clusters?k=.[n] citations back to the source notes; provenance is post-checked. Endpoint: GET /api/synthesize?q=.GET /api/bridges?limit=40.GET /api/entities?q=&limit=, GET /api/entity-notes?entity=.Bridge mining (~2 min of embedding) and clustering are computed once and persisted, keyed by a corpus fingerprint (note count + max modification date):
~/.mcp-apple-notes/bridges_cache.json — the full mined bridge pool~/.mcp-apple-notes/clusters_cache.json — cluster output per kFresh cache → served from disk instantly (<300ms). Stale (notes changed) → the stale copy is served instantly with a "recomputing…" pill in the UI while ONE background job (single-flight) refreshes it. Absent → computed inline once.
Embeddings/search/clustering/bridges/entities are fully local. Only synthesis generation needs an LLM. Point at a local OpenAI-compatible server to keep notes private:
# LM Studio / Ollama (zero API cost, notes stay local):
SYNTH_BASE_URL=http://localhost:1234/v1 SYNTH_MODEL=<loaded-model> OPENAI_API_KEY=local bun index.ts
# …or real OpenAI: set a funded OPENAI_API_KEY (defaults to gpt-4o-mini).The entity layer reads ~/.mcp-apple-notes/layered_graph.db (override with LAYERED_DB) — a plain sqlite file produced by the companion exp-notes-indexing benchmark harness (layered_graph.py). No extra dependencies (bun ships bun:sqlite); if the file is absent the entity tools and tab simply report how to generate it.
git clone https://github.com/connerkward/mcp-apple-notes
cd mcp-apple-notes
bun install~/.bun/bin/bun) to Full Disk Access in System Settings.claude_desktop_config.json:{
"mcpServers": {
"apple-notes": {
"command": "/Users/<YOUR_USER_NAME>/.bun/bin/bun",
"args": ["/Users/<YOUR_USER_NAME>/mcp-apple-notes/index.ts", "--stdio"]
}
}
}// .mcp.json (project) or `claude mcp add apple-notes -- bun /path/to/mcp-apple-notes/index.ts --stdio`
{
"mcpServers": {
"apple-notes": {
"command": "bun",
"args": ["/path/to/mcp-apple-notes/index.ts", "--stdio"]
}
}
}The same bridges/entities tools power the web UI tabs at the local app (bun index.ts → http://localhost:3741/); the entity graph db is optional, generated by the exp-notes-indexing benchmark harness.
| Tool | Description |
|---|---|
index-notes | Background indexing with live progress UI |
search-notes | Semantic + FTS search; optional folder, modifiedAfter, modifiedBefore |
find-notes | Exact substring search (like Apple Notes built-in); optional folder, date range |
get-note | Full note by title; fuzzy fallback on no exact match |
list-notes | Notes sorted by recency; optional folder, date range, limit |
list-folders | All folders with note counts |
list-tags | All #hashtags across notes, sorted by frequency |
search-by-tag | Notes containing a specific hashtag |
related-notes | Related notes via shared tags, [[wikilinks]], and vector similarity |
bridge-notes | Swanson-ABC bridges: non-similar note pairs connected via a shared intermediary; optional folder, limit |
feed | The ranked evidence-first connection feed (bridges + abstraction pairs + entity threads) as JSON; optional limit |
entity-notes | Notes mentioning an entity (e.g. "Mercedes"), by mention weight — needs the optional entity graph db |
list-entities | Entities ranked by mention count; optional substring query, limit |
get-tables | Extract pipe/tab-separated tables from a note |
create-note | Create a note |
update-note | Edit an existing note |
check-changes | Check if notes changed since last index (without triggering re-index) |
index-health | Sync status, last indexed time, note count |
Every search detects changes (~1ms). If notes changed, ONE background incremental index job is kicked (single-flight — duplicate triggers are dropped) and the search returns immediately from the current index; results catch up when the job lands. The last-indexed watermark persists to ~/.mcp-apple-notes/index_state.json across restarts. Change detection compares the per-title set of modification dates (Apple Notes titles are not unique — "TODO" ×10 — and a title→single-date map can never converge for duplicates).
score = RRF(vector, BM25) × title_boost × recency_factorTemporal queries (recent, latest, today) automatically shift to a 1-day recency half-life at 70% weight. Normal queries use 90-day half-life at 10% so relevance stays primary.
1,806 notes, Apple Silicon:
| Approach | Time | Body included |
|---|---|---|
| JXA metadata only | 4,463ms | No |
| JXA with body | ~49 min | Yes |
| SQLite direct | 430ms | Yes |
tail -n 50 -f ~/Library/Logs/Claude/mcp-server-apple-notes.logPermissions error → ensure bun (~/.bun/bin/bun) has Full Disk Access in System Settings → Privacy & Security.
🧭 [ckw-skills](https://github.com/connerkward/ckw-skills) — part of Conner K. Ward's collection of Claude Code skills & MCP servers.
~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.