feat: MCP tokens section in user settings

src/application/i18n/messages/en.json

@@ -39,6 +39,41 @@
         "title": "Accent theme",
         "caption": "Primary buttons and highlights"
       }
+    },
+    "mcp": {
+      "title": "MCP",
+      "copy": "Copy",
+      "newToken": {
+        "title": "New token",
+        "caption": "Tokens let AI assistants like Claude or Cursor work with your notes via MCP",
+        "labelPlaceholder": "Token name, e.g. Claude Code on laptop",
+        "allowEditing": "Allow editing",
+        "allowEditingCaption": "Without it the assistant can only read notes",
+        "create": "Create token"
+      },
+      "createdToken": {
+        "title": "Your new token",
+        "caption": "Copy it now: you will not be able to see it again"
+      },
+      "instructions": {
+        "claudeCode": "Run in the terminal",
+        "cursor": "Add to ~/.cursor/mcp.json",
+        "claude": "Settings → Connectors → Add custom connector: paste the URL and add the request header"
+      },
+      "permission": {
+        "read": "Read only",
+        "write": "Read and edit"
+      },
+      "tokens": {
+        "title": "Tokens",
+        "caption": "Revoke a token to disconnect the assistant that uses it",
+        "lastUsed": "used {time}",
+        "neverUsed": "never used",
+        "requests": "no requests | {n} request | {n} requests",
+        "revoke": "Revoke",
+        "revokeConfirmationTitle": "Revoke token?",
+        "revokeConfirmation": "Assistants using \"{label}\" will lose access to your notes"
+      }
     }
   },
   "noteSettings": {

src/application/services/useMcpTokens.ts

@@ -0,0 +1,75 @@
+import type { Ref } from 'vue';
+import { onMounted, ref } from 'vue';
+import type { McpToken, McpTokenPermission } from '@/domain/entities/McpToken';
+import { mcpTokenService } from '@/domain';
+
+interface UseMcpTokensComposableState {
+  /**
+   * MCP tokens of the current user, newest first
+   */
+  tokens: Ref<McpToken[]>;
+
+  /**
+   * Creates new MCP token and adds it to the list
+   * @param label - label set by user
+   * @param permission - what MCP client can do with notes
+   * @returns plain token, it is not available later
+   */
+  createToken(label: string, permission: McpTokenPermission): Promise<string>;
+
+  /**
+   * Revokes MCP token and removes it from the list
+   * @param id - token id
+   */
+  revokeToken(id: McpToken['id']): Promise<void>;
+}
+
+/**
+ * Methods for managing MCP tokens of the current user
+ */
+export default function useMcpTokens(): UseMcpTokensComposableState {
+  /**
+   * MCP tokens of the current user
+   */
+  const tokens = ref<McpToken[]>([]);
+
+  /**
+   * Loads MCP tokens of the current user
+   */
+  async function loadTokens(): Promise<void> {
+    tokens.value = await mcpTokenService.getTokens();
+  }
+
+  /**
+   * Creates new MCP token and adds it to the list
+   * @param label - label set by user
+   * @param permission - what MCP client can do with notes
+   */
+  async function createToken(label: string, permission: McpTokenPermission): Promise<string> {
+    const { token, item } = await mcpTokenService.createToken(label, permission);
+
+    tokens.value = [item, ...tokens.value];
+
+    return token;
+  }
+
+  /**
+   * Revokes MCP token and removes it from the list
+   * @param id - token id
+   */
+  async function revokeToken(id: McpToken['id']): Promise<void> {
+    await mcpTokenService.revokeToken(id);
+
+    tokens.value = tokens.value.filter(token => token.id !== id);
+  }
+
+  onMounted(async () => {
+    await loadTokens();
+  });
+
+  return {
+    tokens,
+    createToken,
+    revokeToken,
+  };
+}

src/domain/entities/McpToken.ts

@@ -0,0 +1,59 @@
+/**
+ * What MCP client can do with notes of the token owner
+ */
+export type McpTokenPermission = 'read' | 'write';
+
+/**
+ * Personal token used by MCP clients (Claude, Cursor, etc.) to access user notes
+ */
+export interface McpToken {
+  /**
+   * Token id
+   */
+  id: number;
+
+  /**
+   * Last characters of the token, used to tell tokens apart
+   */
+  preview: string;
+
+  /**
+   * What MCP client can do with notes of the token owner
+   */
+  permission: McpTokenPermission;
+
+  /**
+   * Label set by user, e.g. "Claude Code on laptop"
+   */
+  label: string;
+
+  /**
+   * Last time token was used to call MCP tool
+   */
+  lastUsedAt: string | null;
+
+  /**
+   * How many times token was used to call MCP tools
+   */
+  requestCount: number;
+
+  /**
+   * When token was created
+   */
+  createdAt: string;
+}
+
+/**
+ * Token returned right after creation. Plain token is shown only once
+ */
+export interface CreatedMcpToken {
+  /**
+   * Plain token to paste into MCP client config
+   */
+  token: string;
+
+  /**
+   * Created token record
+   */
+  item: McpToken;
+}

src/domain/index.ts

@@ -10,6 +10,7 @@ import EditorToolsService from '@/domain/editorTools.service';
 import WorkspaceService from './workspace.service';
 import TeamService from './team.service';
 import NoteHistoryService from './noteHistory.service';
+import McpTokenService from './mcpToken.service';
 /**
  * Get API url from environment
  */
@@ -38,6 +39,7 @@ const userService = new UserService(eventBus, repositories.user);
 const marketplaceService = new MarketplaceService(repositories.marketplace);
 const teamService = new TeamService(repositories.team);
 const noteHistoryService = new NoteHistoryService(repositories.noteHistory);
+const mcpTokenService = new McpTokenService(repositories.mcpToken);
 
 /**
  * App State — is a read-only combination of app Stores.
@@ -63,5 +65,6 @@ export {
   marketplaceService,
   workspaceService,
   teamService,
-  noteHistoryService
+  noteHistoryService,
+  mcpTokenService
 };

src/domain/mcpToken.repository.interface.ts

@@ -0,0 +1,24 @@
+import type { CreatedMcpToken, McpToken, McpTokenPermission } from './entities/McpToken';
+
+/**
+ * Interface of the MCP tokens repository
+ */
+export default interface McpTokenRepositoryInterface {
+  /**
+   * Loads all MCP tokens of the current user
+   */
+  getTokens(): Promise<McpToken[]>;
+
+  /**
+   * Creates new MCP token
+   * @param label - label set by user
+   * @param permission - what MCP client can do with notes
+   */
+  createToken(label: string, permission: McpTokenPermission): Promise<CreatedMcpToken>;
+
+  /**
+   * Revokes MCP token
+   * @param id - token id
+   */
+  revokeToken(id: McpToken['id']): Promise<void>;
+}

src/domain/mcpToken.service.ts

@@ -0,0 +1,41 @@
+import type { CreatedMcpToken, McpToken, McpTokenPermission } from './entities/McpToken';
+import type McpTokenRepository from './mcpToken.repository.interface';
+
+/**
+ * MCP token service class, used for logic handling of the data,
+ * Also used for data delivery from repository to application service
+ */
+export default class McpTokenService {
+  /**
+   * MCP token repository instance
+   */
+  private readonly mcpTokenRepository: McpTokenRepository;
+
+  constructor(mcpTokenRepository: McpTokenRepository) {
+    this.mcpTokenRepository = mcpTokenRepository;
+  }
+
+  /**
+   * Loads all MCP tokens of the current user
+   */
+  public async getTokens(): Promise<McpToken[]> {
+    return await this.mcpTokenRepository.getTokens();
+  }
+
+  /**
+   * Creates new MCP token
+   * @param label - label set by user
+   * @param permission - what MCP client can do with notes
+   */
+  public async createToken(label: string, permission: McpTokenPermission): Promise<CreatedMcpToken> {
+    return await this.mcpTokenRepository.createToken(label, permission);
+  }
+
+  /**
+   * Revokes MCP token
+   * @param id - token id
+   */
+  public async revokeToken(id: McpToken['id']): Promise<void> {
+    await this.mcpTokenRepository.revokeToken(id);
+  }
+}

src/infrastructure/index.ts

@@ -18,6 +18,7 @@ import EditorToolsTransport from '@/infrastructure/transport/editorTools.transpo
 import NoteAttachmentUploaderRepository from './noteAttachmentUploader.repository';
 import TeamRepository from '@/infrastructure/team.repository';
 import NoteHistoryRepository from './noteHistory.repository';
+import McpTokenRepository from './mcpToken.repository';
 
 /**
  * Repositories
@@ -72,6 +73,11 @@ export interface Repositories {
    * Working with note history
    */
   noteHistory: NoteHistoryRepository;
+
+  /**
+   * Working with MCP tokens
+   */
+  mcpToken: McpTokenRepository;
 }
 
 /**
@@ -142,6 +148,7 @@ export function init(noteApiUrl: string, eventBus: EventBus): Repositories {
   const workspaceRepository = new WorkspaceRepository(openedPagesStore);
   const teamRepository = new TeamRepository(notesApiTransport);
   const noteHistoryRepository = new NoteHistoryRepository(notesApiTransport);
+  const mcpTokenRepository = new McpTokenRepository(notesApiTransport);
 
   return {
     note: noteRepository,
@@ -154,5 +161,6 @@ export function init(noteApiUrl: string, eventBus: EventBus): Repositories {
     workspace: workspaceRepository,
     team: teamRepository,
     noteHistory: noteHistoryRepository,
+    mcpToken: mcpTokenRepository,
   };
 }

src/infrastructure/mcpToken.repository.ts

@@ -0,0 +1,49 @@
+import type McpTokenRepositoryInterface from '@/domain/mcpToken.repository.interface';
+import type NotesApiTransport from './transport/notes-api';
+import type { CreatedMcpToken, McpToken, McpTokenPermission } from '@/domain/entities/McpToken';
+
+/**
+ * MCP tokens repository class used for data delivery from transport to service
+ */
+export default class McpTokenRepository implements McpTokenRepositoryInterface {
+  /**
+   * Notes api transport instance
+   */
+  private readonly transport: NotesApiTransport;
+
+  constructor(notesApiTransport: NotesApiTransport) {
+    this.transport = notesApiTransport;
+  }
+
+  /**
+   * Loads all MCP tokens of the current user
+   */
+  public async getTokens(): Promise<McpToken[]> {
+    const response = await this.transport.get<{ items: McpToken[] }>('/user/mcp-tokens');
+
+    return response.items;
+  }
+
+  /**
+   * Creates new MCP token
+   * @param label - label set by user
+   * @param permission - what MCP client can do with notes
+   */
+  public async createToken(label: string, permission: McpTokenPermission): Promise<CreatedMcpToken> {
+    return await this.transport.post<CreatedMcpToken>({
+      endpoint: '/user/mcp-tokens',
+      data: {
+        label,
+        permission,
+      },
+    });
+  }
+
+  /**
+   * Revokes MCP token
+   * @param id - token id
+   */
+  public async revokeToken(id: McpToken['id']): Promise<void> {
+    await this.transport.delete<{ isDeleted: boolean }>(`/user/mcp-tokens/${id}`);
+  }
+}