Full CRUD for macOS Notes.app from Claude Code. Create, read, update, and delete notes and folders with natural language.
One /notes command covers every operation exposed by the AppleScript API.
Create, read, update, and delete. Search by name, filter by shared or password-protected status. Read as plaintext or HTML.
Create and delete folders. List notes within any folder. Organize across multiple accounts.
List all synced accounts (iCloud, Google, etc.). Browse folders and notes per account. Find your default account.
List and count attachments on any note. View attachment names and metadata. Read-only access.
Everything the macOS Notes.app AppleScript API exposes.
| Object | Operation | Supported |
|---|---|---|
| Notes | Create, Read, Update, Delete, List, Search | ✓ |
| Folders | Create, Delete, List | ✓ |
| Accounts | List, Default account | ✓ |
| Attachments | List, Count | ✓ |
| Filters | Shared notes, Password-protected notes | ✓ |
No npm. No config. No restart.
Claude interprets your request and picks the right AppleScript operation.
The plugin gives Claude a library of AppleScript templates. When you describe what you want, Claude picks the right template, fills in your parameters, and executes it via osascript. No intermediate server or API — it talks directly to Notes.app.
AppleScript commands run in the background. Notes.app doesn't need to be open or visible. macOS will ask for automation permission the first time — grant it in System Settings > Privacy & Security > Automation.
No. macOS blocks AppleScript from accessing the content of password-protected notes. The plugin can detect which notes are protected, but cannot read or modify their content.
These features exist in the Notes.app GUI but are not exposed through the AppleScript API. The plugin covers everything the API supports — which is full CRUD for notes and folders, plus accounts, attachments, and filtering.
Yes. The plugin can list all synced accounts and operate on notes/folders in any of them. You can specify which account to target, or let it use your default.
The plugin instructs Claude to always confirm before any destructive operation (deleting notes or folders). Claude will ask you to approve before executing a delete. The plugin's tool access is scoped to osascript only — it cannot run arbitrary shell commands.