# MCP and API access

NoteMaker can be used from other AI tools. Claude Code, Cursor, VS Code, Windsurf, Claude Desktop, Codex and others can list, search, read, create and update your pages, boards and forms through MCP. Find the settings in **Settings → MCP & API**.

![Settings → MCP & API with the server address, token list and client setup tabs](https://thenotemaker.com/help/settings-mcp.webp)

## Your workspace's address

The **MCP server** box shows the address for this workspace, ending in your workspace's name. Click **Copy**. Each workspace has its own address, so one AI tool can connect to several workspaces at once.

## Connect with a token

1.  Under **API tokens for this workspace**, type a name, such as "Claude Code on my laptop", and click **Create token**.
2.  Copy the token now. It starts with `nm_` and is shown only once.
3.  Under **Connect a client**, pick your tool and copy its setup, replacing `nm_YOUR_TOKEN` with the token.

The token list shows when each one was last used. Use the trash icon to revoke one. A token acts as you, inside this workspace only.

## Connect without a token

Tools that only support sign-in, such as claude.ai and ChatGPT, can connect with OAuth. Add the workspace's address as a connector. You are taken to NoteMaker to sign in and approve access to that workspace. The connection renews itself.

If the list of tokens grows long, **Clean up** removes old ones that tools made while renewing.

## Locked pages

A connected tool cannot change something that is [🔒 Lock a page, form or collection](https://docs.wrightdesk.com/organise-and-share/lock-a-page-form-or-collection): the call fails with a message that it is locked, and nothing changes. The tool can lock a page, form or collection, and can ask to unlock one with a reason. NoteMaker adds no confirmation of its own for that, so it is your tool's approval prompt that decides. If you do not want a tool to be able to lift locks, do not approve its unlock requests.

> [!warning] ⚠️
> Treat a token like a password. Anyone who has it can do what you can in this workspace. Revoke it if it leaks.

## Related

-   [🔧 Connect GitHub and MCP servers](https://docs.wrightdesk.com/workspace-settings/connect-github-and-mcp-servers)
-   [🛡️ Audit log](https://docs.wrightdesk.com/workspace-settings/audit-log)
-   [🔒 Lock a page, form or collection](https://docs.wrightdesk.com/organise-and-share/lock-a-page-form-or-collection)

## Build with the API

To call NoteMaker from your own scripts, see [🔌 Build with the API](https://docs.wrightdesk.com/build-with-the-api): a quickstart with curl, JavaScript and Python, and examples for every tool.