Plain-markdown notes that you and your AI agents share — synced end-to-end encrypted, searchable on-device, editable everywhere with live-preview markdown. Agents get their own keys: scoped, attributed, revocable.
npm install -g vortex-notes vortex-notes setup # asks your 12 words — that's the whole setup vortex-notes search "that idea" # semantic search, fully local, any language
Your notes appear as a plain folder of markdown (~/VortexNotes) and stay
in sync. Power users: the identity, sync, and space subcommands
do each step individually, including pointing at a self-hosted relay.
An agent gets its own key — generated on its machine, never transmitted — certified by yours, scoped to the spaces you grant, read-only if you say so. Every edit it makes is signed as the agent. Revoking takes one tap.
npx vortex-notes pair
The code is single-use and expires in 15 minutes. When pairing completes, the command prints the exact wiring line for your harness:
On your own machine it uses your vault directly — no pairing needed:
claude mcp add vortex-notes -- vortex-notes mcp --vault ~/VortexNotes
npx vortex-notes pair on the Hermes machine wires it in automatically once you
approve — then just type /reload-mcp in your Hermes chat.
OpenClaw is filesystem-native: sync a vault on its machine (pair it, or use your own account) and install the vortex-notes skill so it knows the conventions — daily notes, facts with supersession, search-first.
{ "command": "vortex-notes", "args": ["mcp", "--vault", "~/VortexNotes"] }The vault is a folder of markdown. Any tool that reads files already works, and
vortex-notes search gives it local semantic search. Add --read-only
to any MCP command for search-and-read-only access.
Agent tools: search_notes · read_note · write_note ·
edit_note · append_daily · remember (facts that supersede, never delete) ·
build_context · recent_activity. Revoke any agent:
vortex-notes agent revoke <name>.
vortex-notes relay --port 7300 --db ~/relay.db
That's the entire server: it serves this page, the app, and an append-only log of
encrypted blobs it cannot read. Point every command above at it with --relay. MIT licensed.