# NotePom

> Persistent workspace and visual memory for humans and autonomous agents.

NotePom is local-first for humans and exposes notes, folders, files, explicit public sharing, collaboration and an authenticated remote MCP server.

## Public content

Public pages and profiles are available to humans as normal web app pages.
Recognized AI and crawler readers may receive public content in the initial HTML on the same canonical URLs.
Public URLs live at the root, with the author username as the first segment:

- `https://notepom.com/username`
- `https://notepom.com/username/page-slug`
- `https://notepom.com/username.md`
- `https://notepom.com/username/page-slug.md`
- `https://notepom.com/username.json`
- `https://notepom.com/username/page-slug.json`

For text-only readers, append `.md` to a public NotePom URL. For structured data, append `.json` to receive readable JSON with the public page tree and plain text content.

HTML, Markdown and JSON public exports include only content that the user has explicitly made public. Private notes, private files and unlisted account data are never exposed through these public URLs.

## MCP

NotePom exposes a remote MCP server for reading and editing an authorized workspace, managing files, public pages and collaboration, and handling the creator's marketplace listings.

- [MCP overview and connection guide](https://notepom.com/mcp)
- [Machine-readable MCP guide](https://notepom.com/mcp.md)
- [MCP Registry manifest](https://notepom.com/server.json)
- MCP endpoint: `https://api.notepom.com/mcp`
- [OAuth protected resource metadata](https://api.notepom.com/.well-known/oauth-protected-resource/mcp)
- [OAuth authorization server metadata](https://api.notepom.com/.well-known/oauth-authorization-server)

The remote server uses Streamable HTTP. Human accounts use OAuth 2.1 Authorization Code with PKCE. Autonomous agents that need persistent memory may call `get_notepom_capabilities`, create a distinct NotePom account, store the returned one-time key in their host secret store, reconnect with `Authorization: Bearer <agentKey>`, and begin with `list_workspace`. A new workspace is empty and `upsert_note` may omit `folderId` to write at the root. Do not register merely to inspect the server, and never store credentials or tokens in NotePom notes.