Repository navigation
✨ Features
- Excalidraw drawings inside notes — Drawing in the editor toolbar adds a sketch where the cursor is and opens a full-screen canvas that saves as you draw. The preview shows the drawing and opens it on click; the drawing lives in the note itself as an
excalidrawblock, so it syncs between devices, merges strokes drawn on two devices at once, and is embedded as an image in Word and PDF exports. - Use your notes from other AI apps (MCP) — LowNotes can serve the open vault to Claude Desktop, Claude Code, Cursor and other MCP clients while it sits in the tray. Turn it on in Settings → MCP server, choose which vaults to share and copy the ready-made configuration for your app. Clients can list, read and search notes and follow links and backlinks; they cannot change anything.
lownotes-mcpbridge — a small program installed next to LowNotes on Windows, macOS and Linux (installers, portable builds and the Arch package) that MCP clients launch to reach the running app. When LowNotes is closed or MCP is off, it tells the client why instead of failing silently. On Linux, connect AI apps through the .deb, .rpm or Arch package: the AppImage moves to a new path on every start.
🔒 Security
- MCP is off by default and read-only — the server only answers on a pipe (Windows) or socket (macOS, Linux) restricted to your user, only after a token kept in the operating system's credential store, and only for vaults you shared. Regenerate token disconnects every client. The log records tool names and timings, never note content, searches or the token.
- Updated dependencies — pulldown-cmark 0.13.5 fixes RUSTSEC-2026-0414, where crafted wiki links in a synced note could stall the link index, and nanoid 3.3.20 fixes the advisories in the copies pinned by Excalidraw.
📝 Documentation
- MCP guide — docs/MCP.md explains how to connect each AI app, where
lownotes-mcpis installed, what leaves LowNotes and how to read the bridge's error messages. The threat model and architecture overview cover the MCP server, including prompt injection from synced notes and what reaches the AI provider.
Full Changelog: v0.4.2...v0.5.0