Delv
CommunityAbandoned· 1.1y4.3by akseyh

Bear Notes MCP

Reads notes and tags from the Bear note-taking app on macOS via direct SQLite access.

C
Safety & Trust

Delv Safety Grade: C

Score 58/100 · assessed 2026-04-28

Maintainer45
Permissions75
Supply chain40
Transparency65
Incidents100

Bear Notes MCP is a community tool from solo developer akseyh that reads Bear's local SQLite database directly on macOS. The read-only nature and narrow scope (just Bear notes and tags) are positive safety signals. However, direct database access bypasses Bear's official APIs, which could break with app updates and creates a non-standard integration pattern. The maintainer appears to be a solo developer with limited GitHub presence, raising bus factor concerns. Distribution via npx without a published npm package means users are likely running code directly from the repository. No known security incidents, and the open-source nature allows inspection. The tool requires filesystem read access to Bear's database location, which is sensitive personal data but appropriately scoped for the stated purpose. Suitable for personal use with awareness of the direct database access approach.

Lethal Trifecta (prompt-injection exposure)

ONE OF THREE
Private dataYes
Reads secrets, credentials, private files
Untrusted inputNo
Ingests web pages, PRs, issues, emails
External commsNo
Can send data outbound

Local notes only. Single-axis private data sink — pair with anything outbound for risk.

Green flags

  • Read-only access, cannot modify or delete notes
  • Narrow scope limited to Bear notes and tags only
  • Open source repository allows code inspection
  • No API keys or external network calls required
  • No known security incidents or malicious behaviour

Red flags

  • Solo maintainer with limited public GitHub activity or track record
  • Direct SQLite access bypasses official Bear APIs, fragile to app updates
  • No published npm package, npx likely pulls from repo directly
  • Accesses personal notes database containing potentially sensitive information
  • macOS-only with no cross-platform fallback or alternative

Permissions requested

Read filesDB read
Assessed by Delv Editorial using public metadata. Grades are advisory and update as the ecosystem changes. They do not replace your own review of permissions and code before granting an agent access to sensitive systems.

Install

npx bear-mcp-server

Review

Bear Notes MCP gives Claude direct read access to your Bear vault by querying the SQLite database that Bear stores locally on macOS. It's a single-purpose tool: you point it at Bear's database file, and Claude can then search notes by title, content, or tag, retrieve full note bodies, and list all tags in your vault. No API key, no sync service, just raw database queries. I'd reach for this when I want Claude to reference my personal notes during a conversation without manually copy-pasting. The tag exploration is particularly useful if you've built up a tagging system over years and want Claude to surface connections you've forgotten. For example, asking "What have I written about TypeScript performance?" and having Claude pull from notes tagged #typescript and #performance across years of entries is genuinely helpful. It also works well for migration prep: you can ask Claude to summarise note structures before moving to another system. The main quirk is that it's read-only. Claude can't create or edit notes, which is probably wise given Bear's proprietary format, but it does mean this is purely a retrieval tool. You'll need to know roughly where Bear stores its database (usually ~/Library/Group Containers/), and the server assumes you're running Bear 2.x on macOS. If you're on iOS or using Bear 1.x, this won't work. The SQLite approach also means no live sync: if you add a note in Bear, you might need to restart the MCP server for Claude to see it, depending on how Bear flushes writes. Performance is fine for vaults up to a few thousand notes. Beyond that, full-text searches might lag, but tag-based queries stay snappy. The codebase is small and readable, so if you want to tweak query logic or add filtering, it's straightforward. Skip this if you don't use Bear, obviously, or if you're on Windows or Linux. Also skip if you want Claude to write notes back: you'll need a different tool or a custom workflow with Bear's URL scheme.
Verdict

Install this if you're a Bear user on macOS who wants Claude to search and reference your notes without leaving the conversation. Skip if you need write access or you're not on macOS. It does one thing well and doesn't pretend otherwise.

Good at

  • Direct SQLite access means no API rate limits or third-party sync dependencies.
  • Tag-based queries are fast and work well for vaults with structured tagging systems.
  • Read-only design is safe: no risk of Claude accidentally corrupting your notes.
  • Small codebase makes it easy to audit or extend if you need custom query logic.
  • Works entirely offline once installed, no internet required.

Watch out

  • macOS only, and specifically requires Bear 2.x's database schema.
  • Read-only: Claude can't create, edit, or delete notes, limiting interactive workflows.
  • No live sync: newly added notes might not appear until you restart the server.
  • Database path discovery is manual, which can trip up users unfamiliar with macOS container paths.
  • Full-text searches on large vaults (5,000+ notes) can be slow depending on your machine.

Use cases

  • Bear vault Q&A
  • tag exploration
  • personal archive search
  • note migration

Getting started

1. Run `npx bear-mcp-server` to install and start the server. It will prompt for the path to Bear's SQLite database, usually `~/Library/Group Containers/9K33E3U3T4.net.shinyfrog.bear/Application Data/database.sqlite`. 2. Add the server to your Claude Desktop config at `~/Library/Application Support/Claude/claude_desktop_config.json` under the `mcpServers` key, pointing the command to `npx bear-mcp-server` and passing the database path as an argument if needed. 3. Restart Claude Desktop and check the MCP icon in the bottom right to confirm the Bear server is connected. 4. Test by asking Claude "List my Bear tags" or "Search my notes for [topic]". If it returns results, you're set. 5. Watch out: if Bear is open and actively writing, you might hit a database lock. Close Bear or wait a moment and retry.

Works with

Claude DesktopClaude Code

Similar MCPs