Apple Notes MCP vs MCP Filesystem Server

A side-by-side look at pricing, capabilities, pros, cons, and our editorial scores.

	Apple Notes MCP MCP Servers	MCP Filesystem Server MCP Servers
Tagline	Let Claude read your local Apple Notes over the Model Context Protocol.	Reference MCP server that gives Claude, Cursor, and other MCP clients scoped read/write access to your local filesystem.
Category	MCP Servers	MCP Servers
Pricing	Free· Free / open-source (MIT). No hosted service; runs locally on your Mac.	Free· Free and open source (MIT). Self-hosted; no vendor cost.
Model	—	—
Editorial score	—	—
Use cases	Personal knowledge retrieval from Apple NotesSearching decade-old meeting notes during a Claude chatPulling travel or recipe notes into a planning conversationSummarising a specific note by titleBuilding a local MCP toolchain alongside filesystem and browser serversReference implementation for writing your own macOS SQLite-backed MCP server	Give Claude Desktop scoped access to a code repoLet Cursor or VS Code agents edit project files via MCPRead and search a local notes vaultAutomated file refactors with dry-run diff previewBatch reading logs or configs into an LLM contextDirectory tree exploration for agent onboardingRename/move operations driven by an agentSandboxed file I/O for custom MCP clientsDocker-based read-only mount for safe browsing of a project
Pros	Genuinely local: reads the on-disk SQLite database directly, so notes never leave your Mac Trivial install via uv/uvx and a short claude_desktop_config.json block Exposes the three operations that matter most — list, read, search — with a clean MCP surface MIT-licensed Python, small enough to audit or fork in an afternoon Works with any MCP client, not just Claude Desktop, so it composes with other servers No API keys, no subscriptions, no accounts — zero ongoing cost	Official reference implementation maintained by Anthropic's MCP team, so it tracks the spec closely and is safe to build against. Rich toolset (14 tools) covering read, write, edit, search, tree, and move without needing a second server. Sandbox model with allowed-directory enforcement plus MCP roots support for dynamic, restart-free scope changes. Advanced edit tool provides pattern matching, whitespace/indentation preservation, and git-style diff previews with dry-run. Ships as both npx package and Docker image; one-click install buttons for Claude Desktop and VS Code. MIT-licensed and open source, so it can be forked or vendored into internal agent stacks. Tool annotations (read-only / idempotent / destructive) let clients build safer confirmation UX.
Cons	Read-only: cannot create, edit, or append notes from within Claude Skips password-protected notes entirely (ZISPASSWORDPROTECTED is unhandled) No attachment content, no checklist state, no pinned-note filtering, no iCloud sync awareness macOS-only by design, and requires granting Full Disk Access to the runner Repository is archived by the maintainer — bug fixes and new features are unlikely without a fork Search is basic keyword matching against the SQLite text, not semantic retrieval	Local-only: no built-in remote/SSH/S3 backend, so networked or cloud filesystems need a different server. Security perimeter is only as good as the allowed-directories list; a wide root plus an over-eager agent can still delete or overwrite files. No fine-grained per-tool ACL (e.g. read-only for one folder, read/write for another) beyond the Docker read-only mount trick. Requires a Node.js runtime or Docker on the client machine, which is friction for non-technical users. The `edit_file` tool's pattern-based edits can silently no-op when whitespace differs from expectations if used carelessly. Being a reference server, feature velocity is deliberately conservative; power users often end up forking for extras like symlink policies or richer ignore rules.
Website	github.com	github.com

Pick Apple Notes MCP if

✅ Genuinely local: reads the on-disk SQLite database directly, so notes never leave your Mac
✅ Trivial install via uv/uvx and a short claude_desktop_config.json block
✅ Exposes the three operations that matter most — list, read, search — with a clean MCP surface
✅ MIT-licensed Python, small enough to audit or fork in an afternoon

Pick MCP Filesystem Server if

✅ Official reference implementation maintained by Anthropic's MCP team, so it tracks the spec closely and is safe to build against.
✅ Rich toolset (14 tools) covering read, write, edit, search, tree, and move without needing a second server.
✅ Sandbox model with allowed-directory enforcement plus MCP roots support for dynamic, restart-free scope changes.
✅ Advanced edit tool provides pattern matching, whitespace/indentation preservation, and git-style diff previews with dry-run.

Compare a different pair →