Harbor

Blog ·September 2, 2026 ·Cloudmanic Labs

MCP servers for notes, explained

Illustration for “MCP servers for notes, explained”

A year ago every notes app was racing to stuff AI inside itself.

The interesting question turned out to be the opposite one. Can you point your own AI at it?

The Model Context Protocol is how that happens, and notes apps have been shipping support for it all year without much noise. Here’s what an MCP server actually is, the three forms it takes, and who has one.

A word about us before the table. We make one of these. Harbor is in the list on the same terms as everyone else, and we’ll flag it again when we get there. Everything below we checked ourselves on September 2, 2026, against each app’s own documentation — not against someone else’s roundup. Where a company’s own pages contradicted each other, we say so. This moves fast; most of these shipped in the last six months. Check before you lean on it.

What an MCP server actually is

Model Context Protocol is an open standard for letting an AI app talk to an outside tool. An MCP server is the adapter on the tool’s side. Your notes app runs one. ChatGPT, Claude, Cursor — whatever you use — connects to it.

Without MCP, you are the integration. You find the note. You copy it. You paste it into a chat. You paste the answer back.

With MCP: “find my notes about the roof quote and tell me what each contractor charged.” One sentence. The assistant does the digging.

The part that matters is the word standard. An app writes one server and works with every assistant, instead of building a ChatGPT thing, then a Claude thing, then whatever’s next.

Three shapes

Almost all of them are one of these, and knowing which tells you most of what you need.

Hosted. The company runs the server. You sign in with OAuth — same as any “log in with” button — and revoke it later from your settings. Works from any device. Doesn’t need the app open. Notion, Evernote and Harbor.

Local. The server runs inside the app on your computer, listening on an address nothing outside your machine can reach, guarded by an API key from settings. Your notes never leave your laptop to make it work. But the app has to be open, on that machine, and it’s no help from your phone. Bear, Joplin, and the Obsidian plugin.

Neither. No official server. What you find is a volunteer project — sometimes excellent, sometimes abandoned, always outside the company’s support. Apple Notes and UpNote.

Who ships one

AppOfficial server?Where it runsAuth
NotionYesHosted by NotionOAuth
BearYes — since 2.8, April 2026Your MacLocal
JoplinYes — built in, off by defaultYour machineLocal
HarborYesHosted by HarborOAuth
EvernoteYes — beta, top two plans onlyHosted by EvernoteOAuth
ObsidianNo — community pluginYour machineAPI key
Apple NotesNo — community projects onlyYour MacVaries
UpNoteNo — community project onlyYour MacVaries
NotesnookNo

Five of these deserve more than a row.

Notion has the widest reach, which figures — it’s a database with a text editor on top. Remote server at mcp.notion.com/mcp, and Notion has been clear that the hosted one is where the work is going.

Bear shipped the most complete package of anyone, and almost nobody noticed. April 2026: a real command-line tool, an MCP server built on it, and a one-click Claude connector you install from a menu inside the app. Then 2.9 in July added note scoping — hand an assistant one slice of your library instead of all of it. That’s a better idea than most of this category has had.

Joplin built the server in and left it switched off. You turn it on yourself. When you do, read tools work and write tools don’t, until you say otherwise.

That’s the most user-respecting decision on this page. Joplin’s users mostly self-host, so the default assumes you want control, not convenience. More apps should copy it.

Obsidian doesn’t have an official server, and this catches people out, because the thing you’re probably using is so good it feels official. It’s the Local REST API plugin, which since version 5.0 in July 2026 serves MCP itself at 127.0.0.1:27124/mcp/. One developer maintains it. That’s not a knock — it beats several first-party efforts — but it’s worth knowing whose weekend you’re relying on.

Evernote has one. It’s easy to miss, because Evernote’s own website argues with itself about it.

The server is real: evernote.com/mcp says “Now in beta,” the endpoint is mcp.evernote.com/mcp, it signs you in with OAuth, and there are developer docs behind it. Meanwhile a pile of older pages on the same domain still say it’s “currently in development” and offer you a waitlist.

If you went looking and concluded it hadn’t shipped, that’s why. We got it wrong the same way while writing this.

The bigger thing isn’t the confusion. It’s not on every plan. Evernote’s compare-plans page lists MCP on Advanced and Enterprise. Not Free. Not the $99-a-year Starter. So the cheapest paid plan doesn’t get it. If you’re working out whether Evernote is still worth it, that’s the useful detail — not whether the feature exists, but which one you’re paying for.

Four things to check before you connect one

Setup guides skip all of this.

Where does the text actually go? To the AI company. Always. People get this backwards: running the server locally keeps your notes off the notes app’s servers, but everything the assistant reads still goes to whoever runs the model. Local vs. hosted decides who can reach the server. Not who reads what comes out of it.

Can it write? An assistant that can edit and delete is a different animal from one that can only read. Check what the server exposes. Prefer one that makes you opt in.

How do you turn it off? OAuth revokes from your settings in two clicks. An API key means finding it and rotating it. Neither is hard. Knowing which one you’ve got, before you need to, is the point.

What about encrypted notes? If your app does per-note encryption, ask what the server does with one. Harbor’s answer: it can’t send it. An encrypted note is ciphertext on our servers, so ciphertext is all the MCP server has — it passes along a marker saying the note is locked. That’s a limit, and we’d rather tell you than let you discover it.

Where we sit

Harbor’s server is hosted. OAuth or a personal access token, scoped to what you allow, revocable whenever.

It exists because of a decision we made early: no built-in AI assistant. You already pay for a better one than we’d build, and in this category a bundled AI has mostly been an excuse to raise the price.

And it isn’t a plan feature, because we don’t have plans. One paid tier, everything in it — API and CLI included. “Which plan do I need for MCP” isn’t a question you can ask here. Worth saying, given the row two above ours in that table.

If you want specifics: what the CLI and MCP server each do, how to connect ChatGPT or Claude, and the developer docs.

If you’re shopping rather than reading — judging notes apps on whether you can bring your own AI is a sensible way to judge them, and our Evernote alternatives comparison covers the rest.

So how much does this matter?

Less than the people selling it say. More than nothing.

It’s still a small feature used by a small number of people. Anyone telling you it changes everything wants something from you.

What it does change is specific, and good: your notes stop being a place you copy out of, and start being something the AI you already pay for can work with directly.

Pick the app for the notes. Then check the MCP situation before you commit — it’s a lot easier to check now than to migrate later.

Sources

Checked September 2, 2026: Evernote MCP · Evernote developer quickstart · Evernote compare plans · Notion MCP documentation · Bear 2.8 release notes · Joplin MCP specification · Obsidian Local REST API

Frequently asked questions

What is an MCP server for notes?
It’s a small piece of software that opens your notes app up to an AI assistant using the Model Context Protocol, an open standard. Once it’s connected, the assistant can search, read, create and edit your notes itself — instead of you copying and pasting between a note and a chat window.
Which notes apps have an official MCP server?
As of September 2, 2026: Notion, Bear, Joplin, Harbor and Evernote all ship their own. Evernote’s is in beta and only on its two most expensive plans. Obsidian, Apple Notes and UpNote rely on community projects.
Does an MCP server send my notes to the AI company?
Yes. Anything the assistant reads goes to whoever runs the model, under their terms. That’s true whether the server runs on your laptop or on a company’s servers. Where the server lives decides who can reach it — not who reads what it hands over.
Is a local MCP server safer than a hosted one?
It’s different, not safer. Local keeps your notes off a company’s infrastructure and works offline, but only while that app is open on that machine, and it’s usually guarded by one API key. Hosted uses OAuth — revocable, scoped, works from any device — but the company holds the connection.
Can an AI assistant edit or delete my notes over MCP?
Only if the server offers write tools and you say yes. Joplin ships with write tools switched off. Look at what a server exposes before you approve it.

Get new posts by email

We build Harbor in public and write about it here. New posts and launch news, straight to your inbox.

No spam, just the occasional Harbor update. One-click unsubscribe anytime.

Anchored. Private. Yours.

Ready to harbor your everything?

A private second brain you own for life — free to start, no credit card.

Free plan to start · No credit card