The engine of your second brain: Markdown notes as database tables, for you and your agents.
The engine of your second brain: Markdown notes as database tables, for you and your AI agents.
A row is any note whose table property names a table; tables are defined in
Database/database.yaml. Every write is checked against its table, journaled and undoable. Agents
use it through MCP; scripts through HTTP; it also runs inside Obsidian as a plugin.
Documentation: datanote.dev
Requires Node.js 20 or newer. Connect an MCP client to a vault (here Claude Code):
claude mcp add datanote -- npx -y datanote mcp --vault /path/to/vault
Other clients use the same command:
{
"mcpServers": {
"datanote": { "command": "npx", "args": ["-y", "datanote", "mcp", "--vault", "/path/to/vault"] }
}
}
To keep the engine running for several clients and apps:
npx -y datanote serve --vault /path/to/vault
It listens on http://127.0.0.1:27150 (MCP at /mcp, HTTP API at /datanote/*), with the token
in <vault>/.datanote/service.json.
See SECURITY.md: how to report a vulnerability, what each credential may do, and which data leaves the machine (only what you turn on).
See CONTRIBUTING.md.
Apache License 2.0: see LICENSE and NOTICE. Copyright 2026 Davide Fornelli.
FAQs
Renamed: use datanotes
The npm package datanote receives a total of 8 weekly downloads. As such, datanote popularity was classified as not popular.
We found that datanote demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Product
Socket Threat Intel now shows which malware campaigns were blocked or detected in your organization, with links to scans and Firewall events.
Security News
Fixes for eMudhra and Brotli are out. Getting them everywhere they’re needed means tracking down bundled libraries, runtimes, and certificate stores.
Threat Research
/Security News
Socket uncovered secret-stealing workflows that ran in LiteLLM’s GitHub repository 11 days before the supply chain attack on PyPI and Docker.