The engine of your second brain: Markdown notes as database tables, for you and your agents.
The engine of your second brain: Markdown notes as database tables, for you and your AI agents.
A row is any note whose table property names a table; tables are defined in
Database/database.yaml. Every write is checked against its table, journaled and undoable. Agents
programs use its HTTP API or the datanotes/client library, and agents use the separate MCP
server datanotes-mcp.
Documentation: datanotes.dev
Requires Node.js 20 or newer. Start the engine on a vault:
npx -y datanotes serve --vault /path/to/vault
It serves the HTTP API on http://127.0.0.1:27150/datanotes/*, with the owner's token in
<vault>/.datanotes/service.json. From code:
import { DatanotesClient } from "datanotes/client";
const db = new DatanotesClient({ url: "http://127.0.0.1:27150", token });
const { value } = await db.call("select_rows", { table: "book", where: { pages: { gt: 300 } } });
AI agents connect through datanotes-mcp, the MCP
server of Datanotes, a separate package built on this API.
See SECURITY.md: how to report a vulnerability, what each credential may do, and which data leaves the machine (only what you turn on).
See CONTRIBUTING.md.
Apache License 2.0: see LICENSE and NOTICE. Copyright 2026 Davide Fornelli.
FAQs
The engine of your second brain: Markdown notes as database tables, for you and your agents.
The npm package datanotes receives a total of 92 weekly downloads. As such, datanotes popularity was classified as not popular.
We found that datanotes demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Security News
The PHP Foundation says Chainguard broke a security embargo ahead of critical RCE patches, as leaks disrupted the coordinated release.
Security News
PHP releases emergency patches for two critical RCE vulnerabilities as agencies urge organizations to take unpatched sites offline.
Threat Research
/Security News
A supply chain attack compromised LiteLLM 1.107.0 on PyPI and Docker, spreading malware that steals cloud credentials, developer secrets, and AI provider keys.