# TodoNote Muse connector

From musedirectory.ai, the independent directory of Meta Muse connectors. Not affiliated with Meta.

## TodoNote

Keep your to-do lists, notes, and tags in sync while Muse reads and updates them for you.

- Record: https://musedirectory.ai/connector/todonote
- Category: Productivity
- Developer: TodoNote (https://www.todonote.app/guide/mcp/)
- Muse status: Extra setup. Not in Muse's Connectors list yet. Muse can still use it: its page gives you a request to paste into Muse.
- Health: Working, 234ms, checked 2026-11-15T18:46:13Z
- Endpoint: https://web.todonote.app/api/mcp
- Auth: Needs an access key; Pricing: unknown
- Screening: Screened, no issues found (2026-11-15T12:06:24Z)
- Source: Found in the official MCP Registry (app.todonote/todonote) https://registry.modelcontextprotocol.io/v0/servers?search=app.todonote%2Ftodonote

Connects to TodoNote, a task and notes app, through a scoped sign-in. Muse can look up your tasks, notes, and tags, add new items, and update or check off what you have already written down.

Example request: "Add milk and eggs to my shopping list in TodoNote and show me what is still open for today."

How to connect: Not in Muse's Connectors list yet, but Muse can still use it. Paste this into Muse: "Use TodoNote to help me. It is a free service with an MCP server at https://web.todonote.app/api/mcp. It needs an API key from TodoNote; ask me to enter it through your secure credential prompt. Ask me before you share anything with it." Muse asks before it shares anything with the app's site. Meta does not review apps used this way, so only use ones you trust. We tested this in the Muse app on September 24, 2026: Muse used an app's link directly this way and returned a live answer.

Screening checks:
- MCP handshake: pass (Answered in 218ms)
- Domain against threat feeds (Cloudflare security DNS): pass (web.todonote.app, www.todonote.app not flagged)
- Published packages against the OSV malicious-package database: n/a (No npm or PyPI package published)
- Hidden instructions or invisible characters in tool text: n/a (Tools are behind sign-in)
- Inputs asking for passwords, card numbers or seed phrases: n/a (Tools are behind sign-in)
- Domain and redirects: pass (Domain registered 32 days ago)
- AI review of purpose and tool behavior: pass (No concerns)