Sensefold

For agents · Docs · Tools reference · Permissions · Pricing

Sensefold is a personal context: the articles, threads, videos, PDFs, notes, and ChatGPT / Claude / Gemini / Grok conversations you collect, the notes you write on them, and one Markdown library that Claude, ChatGPT, Cursor, Claude Code, Codex, and any MCP client can search, read, and write back to. Your thinking carries across models and sessions instead of living inside one vendor's memory.

This repository is the public reference for the Sensefold MCP server. The server is hosted; there is nothing to run. What you find here:

• server.json — the manifest published to the MCP registry as app.sensefold/sensefold
• Directory listings: Glama · Smithery · mcp.so · mcpservers.org
• Client configuration for every supported client, below
• The tool contract, permission tiers, and reliability rules
• examples/ — worked sessions showing how an agent should use it

Connect in 60 seconds

Endpoint (remote, Streamable HTTP):

https://api.sensefold.app/mcp

Paste it into any client that supports remote MCP servers and authorize in the browser. The server supports OAuth 2.1 with PKCE and dynamic client registration, so there is no client ID or key to manage. During authorization you pick a permission tier: read_only, edit, or full. Start with read_only.

Each connection appears in Settings → For agents in the web app and can be revoked there at any time.

Clients

JSON configuration (OAuth)

Cursor, Claude Code .mcp.json, and most JSON-configured clients:

{
  "mcpServers": {
    "sensefold": {
      "url": "https://api.sensefold.app/mcp"
    }
  }
}

VS Code uses servers instead of mcpServers and "type": "http".

JSON configuration (Agent key, headless / CI)

For environments that cannot open a browser, create an Agent key in Settings → For agents, pick a tier, and send it as a bearer token. Keep it in an environment variable, never in a repository.

{
  "mcpServers": {
    "sensefold": {
      "type": "http",
      "url": "https://api.sensefold.app/mcp",
      "headers": {
        "Authorization": "Bearer ${SENSEFOLD_AGENT_KEY}"
      }
    }
  }
}

claude mcp add --transport http sensefold https://api.sensefold.app/mcp \
  --header "Authorization: Bearer $SENSEFOLD_AGENT_KEY"

Inspect the tool list without a client:

npx @modelcontextprotocol/inspector --transport http \
  --server-url https://api.sensefold.app/mcp \
  --header "Authorization: Bearer $SENSEFOLD_AGENT_KEY"

Tools

Write tools appear only when the connection's tier allows them.

Every search result carries:

• sensefoldUrl — the item's address in the user's library. This is the link to cite.
• sourceUrl — where it was captured from, kept for attribution.
• chunkRef — when the match came from one section: its ordinal, heading path, and PDF page numbers. Pass the ordinal as get_item's chunk.

Full reference: sensefold.app/docs/mcp-tools

Permission tiers

• A tier is fixed for the life of a connection or key. To change it, reconnect or create a new key.
• A call outside the tier is refused with API_KEY_TIER_DENIED (HTTP 403) even if a client tries it directly.
• Revoking a connection or key in Settings ends access immediately.
• Agents cannot change the plan, buy credits, export the library, change settings, or delete permanently.

Details: permissions, revocation, and undo · privacy for connected AI

Reliability contract

Rules an agent should follow. The server enforces the ones it can.