// MCP TOOL REFERENCE

TRILIUMNEXT NOTES' MCP SERVER TOOLS

11 tools from the TriliumNext Notes' MCP Server MCP Server, categorised by risk level.

View the TriliumNext Notes' MCP Server policy →

// ALL 11 TRILIUMNEXT NOTES' MCP SERVER TOOLS

READ 5 tools

Read get_note Get a note and its content by ID. Perfect for when someone wants to see what Read list_children_notes List all direct child notes of a given note using a deterministic Trilium search query. Returns child note ... Read read_attributes Read all attributes (labels and relations) for a note. View existing labels (#tags), template relations (~t... Read search_notes Unified search with comprehensive filtering capabilities including keyword search, date ranges, field-speci... Read resolve_note_id Resolves a note/folder name to its actual note ID for use with other tools. You MUST call this function whe...

WRITE 5 tools

Write create_note Create a new note in TriliumNext with duplicate title detection. When a note with the same title already ex... Write manage_attributes Manage note attributes with write operations (create, update, delete). Create labels (#tags), template rela... Write move_note Move a note to a new parent location in the note tree. IMPORTANT: In TriliumNext a note can exist in multip... Write patch_note Apply targeted patches to a note using one unified batch schema. WORKFLOW: 1) Call get_note to obtain curre... Write update_note Update note with support for title-only updates, content overwrite, content append, or file replacement. ⚠️...

DESTRUCTIVE 1 tools

Destructive delete_note Delete a note permanently. ONLY use this tool when the user explicitly requests note deletion (e.g.,

// FAQ

How many tools does the TriliumNext Notes' MCP Server MCP server have? +

The TriliumNext Notes' MCP Server MCP server exposes 11 tools across 3 categories: Read, Write, Destructive.

How do I enforce policies on TriliumNext Notes' MCP Server tools? +

Route the TriliumNext Notes' MCP Server server through the PolicyLayer gateway. Define allow, deny, or approval rules per tool in the dashboard; they are enforced on every call before it reaches the server.

What risk categories do TriliumNext Notes' MCP Server tools fall into? +

TriliumNext Notes' MCP Server tools are categorised as Read (5), Write (5), Destructive (1). Each category has a recommended default policy.

Enforce policy on every TriliumNext Notes' MCP Server tool call.

Deterministic rules across all 11 TriliumNext Notes' MCP Server tools. Per-identity grants. Full audit log. Live in minutes. Nothing to install.

GOVERN TRILIUMNEXT NOTES' →

Free to start. No card required.

42,500+ MCP servers and 110,000+ tools scanned and risk-classified.