Publishing to external agents (MCP server)

In Settings (⚙) → the “Connectors” tab, “Publish to external agents” at the top lets agents outside the app, such as Claude Code, read the notes in the vault you have open. It is off by default.

• Turn on “Publish” and the endpoint and a token appear. Use “Copy command” and run it in a terminal to register monthlet with Claude Code. What gets registered is the path to a command bundled with monthlet (monthlet-mcp) — no token is written into the agent config. The token and port are read from monthlet on every connection. Running that command requires Node.js.

• For agents that cannot use that, there is also a “Direct HTTP (with token)” command. That one puts the token in the agent config, so you have to re-register it whenever you regenerate the token.

• Publishing alone allows reading only. Writing is enabled separately with “Allow writing” in the same place (off by default). With it on, external agents can create notes, folders and spreadsheets, and rewrite the body of a note.

• Deleting, moving and renaming, and editing cells in an existing spreadsheet, are not exposed. Allowing writing does not enable them.

• Rewriting a body replaces all of it. Leave a placeholder line, such as the one standing in for a chart, and the original element is kept; delete the line and that element goes with it.

• The version before a rewrite is kept in the note’s history (“⋯” at the top right of the note → “Version history”). For a note you have open, ⌘Z also undoes it.

• A rewrite of a note you are editing (with unsaved changes) is refused. So is a rewrite of a note that changed after the agent read it — the agent is told to read it again.

• Only the vault you have open is published. Switching vaults switches what is published.

• Agents can connect only while the app is running; quitting the app ends the connection.

• Connections are limited to this device (127.0.0.1). Other machines and browsers cannot connect, and a token is always required.

• If you think the token has leaked, press “Regenerate”. The previous token stops working. Agents registered with the bundled command keep working as-is (they hold no token); only agents registered with “Direct HTTP” need to be re-registered.

• External agents can list notes and spreadsheets, search full text, read a note’s body as Markdown, read spreadsheet cells, read the numbers behind a chart, and — when writing is allowed — create notes, rewrite bodies, create folders and create spreadsheets.

• After you change the writing setting, an already-connected agent may hold the old list of operations until it reconnects. Every call is checked against the current setting, so an operation you have not allowed will not run.

• When a note contains something Markdown cannot express, such as a chart, it is passed along as a placeholder with an id. When the numbers are needed, that id reads the chart’s data.

• To the agent receiving them, your notes are text from outside. Whether it ignores anything in them that looks like an instruction depends on how that agent is built.

• The full list of operations, with their arguments, what they return, and what each one guarantees, is at monthlet.ai/docs/mcp. Point to it when setting up the agent side.