cobrain
Create your brainGo to your brain
Guides · reference

The tools your AI uses

An AI connected to Cobrain has seventeen tools: eleven to read and search, five to write and reorganise, one to delete. All of them work with your permissions: what you cannot do, it cannot do either.

The connector

A standard remote MCP server, with OAuth 2.1. One address, for every AI.

https://cobrain.space/mcp

MCP over HTTP (Streamable HTTP). The program registers itself, the user authorises on a Cobrain page that states what the program will be able to do, and it receives a grant that expires and renews. No API key. Every tool runs with the identity of the user who authorised it: the same rules as the site, applied by the database.

For a program with no guide of its own

Paste this message into the conversation: it carries the server name, the address and the kind of authentication. Many programs configure themselves; the others tell you where to add it.

Add the remote MCP server "cobrain" to your environment:
https://cobrain.space/mcp

Use OAuth authentication in the browser. If you cannot edit the configuration yourself, walk me through it step by step using the exact menu names.

If the program only accepts a command, the bridge is npx -y mcp-remote https://cobrain.space/mcp. If it asks for an API key, there is none: ask it for a remote MCP server over HTTP with OAuth.

The seventeen tools

Name, what it does, and whether it reads, writes or deletes. Errors reach the AI in English, suggesting the right path when it gets one wrong: your AI relays them to you in your own language.

list_workspaces

Your brain and the ones shared with you, with the access you have on each. It also says which account the AI is connected as.

reads
list_files

The list of notes under a folder. If the folder does not exist, it suggests similar names.

reads
find_notes

Finds notes and folders by name or by part of a path, like a computer's «find». It also resolves a [[wikilink]].

reads
read_file

Reads a note.

reads
load_context

Everything under a folder (or carrying a tag) in one go, instructions first: brain rules, the unit's index card, decisions, then the notes. It states when it had to truncate.

reads
start_session

The briefing for a unit (a client, a project…): rules, index card, instructions, decisions, open sub-units and the last fifteen changes.

reads
list_units

The units in the brain: path, type, status, how many notes, last change.

reads
recent_changes

Recently changed notes, by whom and when.

reads
list_tags

The tags in the brain, with how many notes each has.

reads
files_by_tag

The notes carrying a given tag.

reads
write_file

Creates a note, or replaces all of its content. It refuses to replace a long note with a much shorter text without confirmation: that guards against an addition mistakenly written as a rewrite.

writes
append_file

Adds text to the end of a note (creating it if missing). This is what the AI should use to add something, rather than rewriting.

writes
create_unit

Creates a unit (a client, a project, whatever you follow) from a template: index card, AI instructions, decisions. On an existing folder it only adds the files that are missing.

writes
move_file

Renames or moves a note, or a whole folder.

writes
delete_file

Deletes a note, or a folder with everything inside it. The previous versions of the notes remain.

deletes
start_project

The script for a guided brainstorm to set up a new unit with you: what to follow, what to call it, how to structure it. It changes nothing on its own.

guides

What they cannot do

For anyone assessing the connector before authorising it.

  • Step outside the user’s permissions. An unshared branch cannot be reached: the rule lives in the database, not in the connector.
  • Erase the history. Every write keeps the note’s previous version; deleting a note leaves its versions behind.
  • Touch the account. No tools to change email, plan, shares or authorisations: that happens only on the site.
  • Talk to other services. The connector reads and writes in the brain and nothing else: no outbound calls, nothing sent elsewhere.
  • Stay connected without permission. The authorisation is revoked from the Connections page, and from that moment every call is refused.

Every call is logged: which tool, with what outcome, in how long. And every note says which program changed it. For the rest, the privacy policy.

Public beta, free

Connect your AI.

The guides walk you through Claude, ChatGPT, Claude Code, Codex and Antigravity step by step. For everything else, the message above.

Create your brain, freeGo to your brainA thousand notes, as many AIs as you want to connect.