Tools

These are the tools an AI assistant sees when it connects to Engram. Each one is classified by what it can do to your data:

• Read: looks at your notes and changes nothing.
• Write: creates or changes content in your vault.
• Sensitive write: cannot be undone from Engram.

Access rules

• Every tool call needs a valid OAuth access token or an Engram API key. A call without one is refused.
• A connection only reaches the vaults you approved when you connected it (or the vaults an API key is limited to). No tool reaches another user’s data.
• Today one mcp scope covers every tool below. See Scopes.

Tool list

Tool	What it does	Classification
list_vaults	Lists your vaults with their IDs, names and slugs.	Read
search_notes	Searches your notes by meaning and exact words, across all vaults or one. Without a query, lists recently updated notes.	Read
list_tags	Lists every tag with its note count.	Read
list_folder	Lists the notes, attachments and subfolders inside a folder, optionally recursively.	Read
suggest_folder	Suggests the best existing folder for a new note from a description of it.	Read
get_notes	Reads the full content of 1 to 20 notes, or just their heading outline.	Read
get_attachment_upload_target	Returns the upload URL and your plan’s size and file-type limits for attachments.	Read
create_folder	Creates an empty folder. Does nothing if it already exists.	Write
create_note	Creates a new note. Never overwrites an existing one.	Write
write_note	Replaces a note’s entire content, or creates the note.	Write
append_to_note	Adds text to the start or end of a note, keeping what is there.	Write
edit_note	Replaces exact text or one heading’s section, or inserts under a heading.	Write
rename_note	Renames or moves one note. Links to it are updated.	Write
rename_folder	Renames or moves a folder and everything in it.	Write
move_attachment	Moves or renames one attachment. Its content is unchanged.	Write
send_feedback	Sends a feedback message to the Engram team.	Write
delete_note	Deletes one note. The deletion syncs to your devices.	Sensitive write
delete_folder	Deletes a folder. Refuses a non-empty folder unless asked to delete everything in it.	Sensitive write
delete_attachment	Deletes one attachment. The stored file is removed.	Sensitive write

Note

The deletes are classified as sensitive writes because Engram has no trash yet: a deleted note, folder or attachment cannot be restored from Engram. Your Obsidian app may keep its own copy in its trash, depending on your Obsidian settings.

write_note and edit_note overwrite text, and Engram does not keep note version history yet, so an overwrite cannot be undone from Engram either.

send_feedback sends a message to us, the Engram team, and to no one else. Its instructions tell the assistant never to include note content, titles, file paths or personal data.

Assistants that honor MCP tool annotations can skip the confirmation prompt for Read tools and ask before the others. Every Read tool is marked readOnlyHint, and every tool that overwrites or removes your content is marked destructiveHint.

How assistants handle your data

• An assistant receives only the note content and metadata its tool calls request, from the vaults you approved.
• Once delivered, that content is handled under the assistant provider’s own privacy policy.
• We do not use your notes, or anything assistants send us, to train AI models. We do not sell it or use it for advertising.
• You can revoke a connection at any time in Settings → Connections in the web app. See Scopes for what revocation does.

The full policy is at Privacy.