Vigil Wiki MCP server
Last updated: September 25, 2026
Vigil Wiki runs a Model Context Protocol (MCP) server so that AI clients such as Claude, ChatGPT, and other MCP-compatible agents can work with your notes. Once you connect a client and approve access, it can list, search, and read your notes, create and edit them, organize them into groups, and publish or unpublish them, depending on the permissions you grant.
Endpoint
- MCP endpoint:
https://mcp.vigil.wiki/mcp(Streamable HTTP) - Protected resource metadata:
https://mcp.vigil.wiki/.well-known/oauth-protected-resource - Authorization server metadata:
https://mcp.vigil.wiki/.well-known/oauth-authorization-server
Connecting a client
- In your AI client, add a custom connector (or remote MCP server) with the URL
https://mcp.vigil.wiki/mcp. - The client opens a Vigil Wiki consent page. Sign in with your vigil.center account, the single sign-in shared by the vigil apps.
- Review the permissions the client is asking for and approve them.
The client can then call the tools listed below on your behalf.
Authentication and scopes
The server uses OAuth 2.0 with dynamic client registration and PKCE (S256). Clients register themselves, send you to the consent page on vigil.wiki, and receive an access token bound to this server. No password or API key is ever pasted into the AI client.
| Scope | What it allows |
|---|---|
notes:read | List, search, and read notes, groups, backlinks, templates, and published notes |
notes:write | Create and update notes, create groups, add or remove evidence references, and archive notes |
notes:publish | Publish a note to the public web at https://vigil.wiki/notes/<slug>/, or unpublish it |
Private notes
Notes that are not published are private. By default, connected clients cannot read private notes. You can allow it under Settings → Connections (https://vigil.wiki/settings/connections) with the private-note access toggle, and switch it off again at any time.
Revoking access
The same Connections page lists every connected client. Revoking a connection cuts off that client immediately. You can also remove the connector in the AI client's own settings.
Tools
| Tool | Scope | What it does |
|---|---|---|
vigil_list_notes | notes:read | List your notes, filtered by group, tag, or published state, with pagination |
vigil_get_note | notes:read | Read one note: full markdown, backlinks, and evidence references |
vigil_debug_note_visibility | notes:read | Explain why a note is or is not readable (missing, private, archived) |
vigil_search_notes | notes:read | Keyword search across your notes |
vigil_list_groups | notes:read | List your notebook groups (folders) with note counts |
vigil_list_templates | notes:read | List the structured note templates (decision log, meeting note, and others) |
vigil_export_context | notes:read | Bundle selected notes into one markdown context pack (up to 25 notes) |
vigil_get_backlinks | notes:read | Find the notes that link to a given note |
vigil_get_public_note | notes:read | Read a published note by its public slug |
vigil_create_note | notes:write | Create a note, optionally seeded from a template. New notes start unpublished |
vigil_update_note | notes:write | Change a note's markdown, title, tags, group, or slug |
vigil_add_evidence | notes:write | Attach a source reference (URL, file, email) to a note |
vigil_remove_evidence | notes:write | Remove a source reference from a note |
vigil_archive_note | notes:write | Archive a note. This is reversible and deletes nothing |
vigil_create_group | notes:write | Create a notebook group |
vigil_publish_note | notes:publish | Publish a note as a public page, or refresh its public copy |
vigil_unpublish_note | notes:publish | Remove a note's public page |
There is no MCP tool for permanent deletion. Deleting a note for good is only possible in the vigil.wiki app.
Publishing
Publishing is a public action. A published note can be read by anyone with the URL, may be indexed by search engines, and may also appear on vigil.directory. Unpublishing removes the page from vigil.wiki, but it cannot remove copies that others have already made. The server marks the publish and unpublish tools as actions that reach the public web, so a well-behaved client asks you before running them.
Data handling
- What a client receives. Only the data a tool returns for the request it made, within the scopes you approved and your private-note setting.
- Tokens. Access tokens last one hour and refresh tokens 30 days. The server stores only SHA-256 hashes of tokens, never the tokens themselves.
- Connection records. Vigil Wiki keeps a record of each connected client (client name, granted scopes, when it was authorized and last used) so you can see and revoke it.
- The AI client. Once a client receives note content, it processes that content under its own terms and privacy policy. Connect only clients you trust.
- No advertising, no sale of data. See the privacy policy for the full details, retention periods, and your controls.