Native MCP: made with AI, for AI
KeepGlide for desktop is free for Linux (x86_64). Windows, macOS and Android are in production. Paid licenses are not open yet. It includes a built-in server for MCP (Model Context Protocol), an open standard that lets an AI agent connect to an app, so an agent can work on your notes and PDFs the same way you do. It is part of the app, not an add-on, and it was built with AI agents from the start.
AI first: built with agents.
48 tools, in three tiers
Read is on by default; write and destructive tools stay off until you allow them.
Read: 25 tools
Search the vault, read notes with their links, extract text from PDF, EPUB and DOCX, and list tags, properties, trash and versions. Among them:
- vault_info
- list_tree
- read_note
- search
- backlinks
- broken_links
- list_tags
- list_properties
- group_by_links
- extract_text
- pdf_page_text
- pdf_search
- pdf_list_annotations
- list_trash
- list_versions
- changes_since
Write: 18 tools
Create and edit notes, move and rename with links kept, restore from trash or a version, rotate and reorder PDF pages in place, and merge, split or fill forms into new files. Off until you turn it on.
- create_note
- edit_note
- append_daily_note
- apply_links
- relink
- move
- rename
- reorganize
- restore_from_trash
- restore_version
- pdf_highlight
- pdf_cite
- pdf_rotate_page
- pdf_move_page
- pdf_merge
- pdf_split
- pdf_fill_form
- create_package
Destructive: 5 tools
Delete, remove a package, delete a PDF page or annotation, and redact. Each needs a plan you can read first, and delete only moves to the trash.
- delete
- delete_package
- pdf_delete_page
- pdf_delete_annotation
- pdf_redact
You stay in control
You hold the switches
Read is on by default. Write and destructive actions are off until you enable them in Settings > AI and automation. An agent cannot change a switch.
Plan first, then act
Destructive tools return a dry-run plan tied to the exact files. It expires after 10 minutes, and a changed file makes it stale.
Paths stay inside the vault
Paths outside the vault are refused. Nothing in the vault is deleted for good: delete goes to the trash and PDF edits save a version first; a removed export package is gone. Two things are kept outside the vault: exported packages, in a separate exports folder, and the audit log, in the app's data folder.
Local by default, with an audit log
The server listens on 127.0.0.1 with a token per launch. A tailnet listener is optional and off by default, with a revocable token per client. Every call is logged without its content.
Native features, built with AI agents
These are native features of the app, produced with AI agents. The MCP server has 831 automated test functions across 36 test files (counted 3 November 2026), including tests that check that injected text cannot flip a switch or trigger an unplanned delete.
MCP clients that speak Streamable HTTP and send the access token in the X-Access-Token header can connect locally, and a small stdio bridge ships with the app for clients that start servers themselves.
Get KeepGlide for desktop
The MCP server comes with the free Linux app. Windows, macOS and Android are in production. Paid licenses are not open yet.
Download for LinuxKeepGlide for desktop · Help for the rest of the app · Join the waitlist