better-bear

mcp
Security Audit
Fail
Health Warn
  • License — License: MIT
  • No description — Repository has no description
  • Active repo — Last push 0 days ago
  • Community trust — 50 GitHub stars
Code Fail
  • fs module — File system access in .github/workflows/build-on-merge.yml
  • rm -rf — Recursive force deletion command in install.sh
  • process.env — Environment variable access in mcp-server/src/bcli.ts
Permissions Pass
  • Permissions — No dangerous permissions requested
Purpose
This MCP server and CLI tool integrates Bear notes with AI coding assistants via CloudKit. It includes a "context library" feature that curates and syncs specific notes optimized for LLM consumption.

Security Assessment
The tool accesses environment variables and interacts with the local file system, which is expected for a note-taking integration. It makes network requests to iCloud (CloudKit) to sync data. No hardcoded secrets were found, and no dangerous OS-level permissions are requested. However, there are notable security concerns. The installation script uses a `curl | bash` pattern that includes a recursive force deletion (`rm -rf`) command, which is risky if the script is ever compromised or maliciously altered. Additionally, file system access is present within its automated GitHub workflows. Overall risk is rated as Medium due to the destructive installation commands and environment variable access.

Quality Assessment
The project is actively maintained, with its most recent push occurring today. It enjoys a solid baseline of community trust with 50 GitHub stars and is safely covered under the permissive MIT license. The only quality drawback is the lack of a description in the repository metadata, which slightly hinders discoverability, though the external documentation and README are excellent.

Verdict
Use with caution — while the project is active, licensed, and functional, the `rm -rf` command in the install script requires a careful manual review of `install.sh` before executing.
README.md

better bear

better-bear MCP server

Build
Release
npm
License: MIT
better-bear MCP server
Buy Me A Coffee

MCP server and CLI for Bear notes via CloudKit. Includes a context library — a curated, synced folder of notes optimized for LLM consumption, inspired by Karpathy's LLM Knowledge Base pattern.

Full docs: better-bear.com

Install

Install the CLI, then connect to Claude:

curl -sL https://raw.githubusercontent.com/mreider/better-bear/main/install.sh | bash
bcli auth
bcli mcp install

This installs the bcli binary, authenticates with iCloud, and sets up the MCP server for both Claude Desktop (via .mcpb bundle) and Claude Code.

Other install methods

Method Command
Claude Desktop only bcli mcp install --desktop-only
Claude Code only bcli mcp install --code-only
Claude Code (direct) claude mcp add better-bear -- npx -y better-bear
Config file bcli mcp install --json
.mcpb bundle Download from latest release and double-click

Manage

bcli mcp status      # check what's configured
bcli mcp uninstall   # remove from Claude Desktop and Claude Code
bcli mcp reinstall   # clean uninstall + install
bcli upgrade         # upgrade bcli binary

CLI

All commands also work standalone from the terminal:

bcli ls                          # list notes
bcli search "query"              # full-text search
bcli create "Title" -b "Body"    # create a note
bcli edit <id> --append "text"   # append to a note
bcli tags                        # list all tags
bcli attach <id> photo.jpg       # attach a file
bcli stats                       # library statistics
bcli health                      # health check

See better-bear.com for the full command reference.

Context Library

Turn a subset of your Bear notes into a synced, curated context folder that Claude can navigate using index-first retrieval. Tag notes with #context in Bear, sync, and Claude reads a compact index to find relevant files — loading only what it needs, not everything.

bcli context init                          # one-time setup
bcli context sync                          # pull qualifying notes
bcli context add <id> --subtag research    # tag a note for inclusion
bcli context status                        # health check

Or tell Claude: "Set up a context library" — and it handles everything via MCP tools.

The architecture follows Karpathy's three-folder pattern: bear/ (synced from CloudKit), external/ (PDFs, exports, shared docs), and inbox/ (drop zone for triage). An index.md manifest maps everything. See better-bear.com for full documentation.

MCP Tools

34 tools covering notes, tags, TODOs, attachments, search, front matter, stats, health checks, and the context library. See the MCP server README for the full list.

Contributors

mreider
program247365
asabirov
darronz

Reviews (0)

No results found