Bear Notes MCP
Reads notes and tags from the Bear note-taking app on macOS via direct SQLite access.
Delv Safety Grade: C
Score 58/100 · assessed 2026-04-28
Bear Notes MCP is a community tool from solo developer akseyh that reads Bear's local SQLite database directly on macOS. The read-only nature and narrow scope (just Bear notes and tags) are positive safety signals. However, direct database access bypasses Bear's official APIs, which could break with app updates and creates a non-standard integration pattern. The maintainer appears to be a solo developer with limited GitHub presence, raising bus factor concerns. Distribution via npx without a published npm package means users are likely running code directly from the repository. No known security incidents, and the open-source nature allows inspection. The tool requires filesystem read access to Bear's database location, which is sensitive personal data but appropriately scoped for the stated purpose. Suitable for personal use with awareness of the direct database access approach.
Lethal Trifecta (prompt-injection exposure)
ONE OF THREELocal notes only. Single-axis private data sink — pair with anything outbound for risk.
Green flags
- Read-only access, cannot modify or delete notes
- Narrow scope limited to Bear notes and tags only
- Open source repository allows code inspection
- No API keys or external network calls required
- No known security incidents or malicious behaviour
Red flags
- Solo maintainer with limited public GitHub activity or track record
- Direct SQLite access bypasses official Bear APIs, fragile to app updates
- No published npm package, npx likely pulls from repo directly
- Accesses personal notes database containing potentially sensitive information
- macOS-only with no cross-platform fallback or alternative
Permissions requested
Install
npx bear-mcp-server
Review
Install this if you're a Bear user on macOS who wants Claude to search and reference your notes without leaving the conversation. Skip if you need write access or you're not on macOS. It does one thing well and doesn't pretend otherwise.
Good at
- Direct SQLite access means no API rate limits or third-party sync dependencies.
- Tag-based queries are fast and work well for vaults with structured tagging systems.
- Read-only design is safe: no risk of Claude accidentally corrupting your notes.
- Small codebase makes it easy to audit or extend if you need custom query logic.
- Works entirely offline once installed, no internet required.
Watch out
- macOS only, and specifically requires Bear 2.x's database schema.
- Read-only: Claude can't create, edit, or delete notes, limiting interactive workflows.
- No live sync: newly added notes might not appear until you restart the server.
- Database path discovery is manual, which can trip up users unfamiliar with macOS container paths.
- Full-text searches on large vaults (5,000+ notes) can be slow depending on your machine.
Use cases
- Bear vault Q&A
- tag exploration
- personal archive search
- note migration
Getting started
Works with
Similar MCPs
- MemoryPersistent memory graph for Claude. Survives across conversations - useful for personal assistants that need to remember facts about you and your projects.
- Knowledge Graph (Anthropic)Anthropic-built knowledge-graph MCP. Stores entities + relationships, persists across sessions, queryable via natural language.
- MilvusZilliz/Milvus official MCP. Lets agents store and query vectors against the Milvus engine for production-scale RAG.
- Mem0Mem0's hosted MCP for long-term memory with semantic recall. Local repo archived; current path is the cloud-hosted server at mcp.mem0.ai/mcp.