
Security News
Happy Birthday, Shai-Hulud
It has been one year since Shai-Hulud made its first appearance on npm.
claude-desktop-bridge
Advanced tools
Shared local knowledge vault MCP server for Claude Desktop (Chat + Code)
Built for Claude Desktop users. If you only use the standalone
claudeCLI or Claude.ai in a browser, this isn't for you — skip to Where this works for the one exception.
Claude Desktop's Chat tab and Code tab live in the same app, one click apart. But they don't share a single byte of context.
Ask Claude something in Chat, switch to Code to actually build it — Claude in Code has no memory the conversation ever happened. Spend an hour in Code working through a decision, hop to Chat to think out loud about what's next — Chat starts from zero. Two tabs, one window, and no connection between them at all.
So close, yet so far. The workaround is re-explaining yourself every time you switch tabs — burning tokens and patience re-deriving context that existed ten seconds ago, one tab over.
Claude-Desktop-Bridge is a small local MCP server, installed once into Claude Desktop, that gives Chat and Code a shared, persistent knowledge vault. Save a note while working in Code, read it back in Chat five minutes later. Research something in Chat, recall it in Code without repeating yourself.
It's deliberately not a context dump. Instead of pasting whole documents or files into the conversation, Claude gets five narrow tools — save, retrieve, search, update, delete — so it pulls in only what's actually relevant, on demand, instead of loading everything every time.
| Tool | Description |
|---|---|
save_note | Save a new note (title, content, optional tags, optional project) |
get_notes | Retrieve notes by id, tags, or project, most recent first |
search_notes | Full-text search over note titles and content |
update_note | Update an existing note's title, content, tags, or project |
delete_note | Permanently delete a note by id |
Notes can be tagged with an optional project field, so if you work across multiple codebases, the vault doesn't turn into one undifferentiated pile — each project's notes can be filtered independently.
claude-desktop-bridge.mcpb from Releases.~/.claude-bridge/vault.db.Once installed, just talk normally in either tab — Claude calls save_note, get_notes, search_notes, etc. on its own when it's useful, the same way it uses any other tool. You don't invoke anything manually.
A few things worth knowing:
project when recalling notes, so a search in one repo's context doesn't surface notes from an unrelated one.my-repo codebase; use Claude-Desktop-Bridge with project: 'my-repo'."| Surface | Works out of the box? |
|---|---|
| Claude Desktop — Chat tab | ✅ Yes |
| Claude Desktop — Code tab (local sessions) | ✅ Yes |
Standalone claude CLI (terminal, Desktop not required) | ⚠️ Needs one extra step |
| Claude Code on the Web / cloud sessions | ❌ Not available (local-only server, no filesystem/network access from the cloud) |
Chat and the Desktop Code tab both connect through the same install automatically — nothing extra to configure there.
The standalone terminal CLI (claude run directly, without the Desktop app open) doesn't read Desktop's extension config, so it won't see Claude-Desktop-Bridge unless you register it explicitly:
# macOS or WSL — imports every MCP server Desktop has configured
claude mcp add-from-claude-desktop
# Any platform, including Linux — register Claude-Desktop-Bridge directly,
# pointed at this repo's built server:
claude mcp add --scope user claude-desktop-bridge -- node /path/to/claude-desktop-bridge/server/index.js
--scope user makes it available in every terminal project, not just the one you ran the command from. Once added, claude mcp list should show claude-desktop-bridge connected — and it reads from the same ~/.claude-bridge/vault.db the Desktop extension uses, so notes saved from the terminal and notes saved from Desktop are the same vault.
Want notes to cost fewer tokens? cdb-companion is a small companion skill that compresses content before it hits
save_note/update_note— drop it alongside this extension for a leaner vault.
npm install
npm run build # bundles src/index.ts -> server/index.js
npm run pack # produces claude-desktop-bridge.mcpb
Requires Node.js 22+ (for the built-in node:sqlite module). Claude Desktop's own built-in Node.js runtime is used automatically when the installed extension runs — end users don't need Node installed separately.
Claude-Desktop-Bridge runs entirely on your own machine and makes no network requests.
~/.claude-bridge/vault.db on the device where the extension is installed.delete_note tool) or delete the database file yourself. Uninstalling the extension does not delete the database file.MIT
FAQs
Shared local knowledge vault MCP server for Claude Desktop (Chat + Code)
The npm package claude-desktop-bridge receives a total of 32 weekly downloads. As such, claude-desktop-bridge popularity was classified as not popular.
We found that claude-desktop-bridge demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.

Security News
It has been one year since Shai-Hulud made its first appearance on npm.

Research
/Security News
Operators behind PolinRider used a compromised GitHub account to plant malware in four development versions of a Packagist package with 700,000+ downloads.

Security News
GitHub Actions now supports cache-mode, a least-privilege control on the Actions cache aimed at the cache poisoning technique behind recent compromises.