Bookmark MCP servers compared: what each one can read
Some bookmark MCP servers give your AI a title and a URL. Others give it the full text, or the power to delete. Ten options, compared from their docs.
You want Claude, ChatGPT, or Cursor to use what you've saved, and every bookmark tool now seems to offer an MCP server. They don't all hand your AI the same thing, and some can delete what they find.
Which bookmark MCP server should you use?
Start with where your saves already live, because a server can only reach its own tool's library. Switching tools for the sake of an MCP server rarely makes sense when yours already has one.
- You use Raindrop: its official hosted server, on Pro if you want text or semantic search.
- You read in Readwise Reader: Readwise's hosted server, which returns full documents as Markdown.
- You self-host: Karakeep ships its own server. Linkwarden has only community ones.
- You're all-Apple: Anybox's server, which runs inside its Mac app.
- You use mymind: its own MCP, which is in beta. Start with a read-only key.
- You only care about X bookmarks: Tweetsmash if you want search, or X's own server if you're happy to run a developer app.
- You want your Chrome bookmarks: a community server, and expect mostly titles and URLs.
- Your saves are scattered across social apps: Stashr, which copies each post when you save it from X, Reddit, Instagram, TikTok, Facebook, LinkedIn, GitHub, or Hacker News, then lets Claude, ChatGPT, Cursor, or Codex read that copy over one hosted server.
Stashr makes this blog and is one of the ten options here, so weigh that. Everything below comes from each vendor's docs or each repo's README, read in October 2026. Nobody tested these servers for this post, and how to add one to your AI client is covered in how to connect ChatGPT and Claude to your bookmarks.
Bookmark MCP servers compared
The first table is the one that matters most: what your AI can see.
| Server | Built by | Runs | What the AI can read | Search |
|---|---|---|---|---|
| Raindrop | Raindrop | Hosted | Full text and metadata, highlights, tags | Filters and semantic. Free plan loses text and semantic search |
| Karakeep | Karakeep | Local (npx or Docker) | Bookmark content as Markdown, plus lists, tags, highlights | Full-text by default. Semantic and hybrid are experimental and need embeddings |
| Anybox | Anybox | Local, inside the Mac app | Saved article text as Markdown, notes, item details | Keyword, over titles, URLs, descriptions, comments, and keywords |
| Readwise | Readwise | Hosted | Reader documents as full Markdown, highlights | Hybrid, across full document text |
| mymind | mymind (beta) | Not stated in its help article | Your saved cards | API offers keyword and semantic. MCP specifics not documented where we looked |
| Tweetsmash | Tweetsmash | Hosted or local | X bookmarks, with article body, unrolled thread, notes, and replies on request | Keyword, plus semantic after you build an index |
| X | X | Hosted, through a local bridge | Your bookmarked posts, live from X | None documented for bookmarks |
| Linkwarden | Community only | Local, for the two servers below | Preserved article text, with ni-c/linkwarden-mcp | Linkwarden's search and field filters |
| Chrome bookmarks | Community only | Local | Usually titles, URLs, and folders. mnemos also fetches page text | Varies, from keyword to local semantic |
| Stashr | Stashr | Hosted | Stored copy of each post: text, author, date, note, tags, images, and video frames | Hybrid: keyword, semantic, and your tags |
The second table covers what it can do to your library, and what it costs to find out.
| Server | Can change | Can delete | Plan needed | Clients its docs name |
|---|---|---|---|---|
| Raindrop | Bookmarks, collections, tags, highlights | Yes. Bookmarks go to Trash, and those already in Trash are deleted permanently | Works on free with limits. Full access needs Pro | Claude, ChatGPT, Gemini, VS Code, Cursor, Windsurf, Zed |
| Karakeep | Bookmarks, lists, tags | Yes: bookmarks, lists, tags | Free to self-host. Docs show a Cloud URL but name no plan. Cloud is free to 50 bookmarks, Pro $4/mo, and its pricing page lists full-text search under Pro | Claude Desktop, Codex |
| Anybox | Saves links, edits fields | Trash only, restorable for 30 days | Its MCP page names no plan. Free caps at 50 links, Pro from $1.99/mo | Claude Code, Claude Desktop, Cursor |
| Readwise | Documents, highlights, tags, books | Highlights, books, and sessions. No listed tool deletes a Reader document | Pricing page lists agent access on Full Readwise ($9.99/mo), Reader only and Highlights only ($7.99/mo each), billed yearly. 30-day trial. Not listed on Highlights Lite | Claude, Claude Code, ChatGPT, Codex, Cursor, Perplexity |
| mymind | With a Full access key | Cards, with a Full access key. Read only keys can't | Not stated. Paid plans from $4.99/mo | Claude, ChatGPT, Poke, Hermes, local agents |
| Tweetsmash | Labels, read state, smart views | Yes, in bulk or by filter, with undelete | Yearly Pass $99/yr or Believer Pass $198 once | Claude Desktop, Claude Code, Cursor, Raycast, ChatGPT |
| X | Add bookmarks, manage folders | Removes bookmarks | Your own developer app, pay per use | Grok Build, Cursor, Claude Desktop, VS Code |
| Linkwarden | Depends on the server | Depends on the server. Read-only modes exist | Free to self-host. Linkwarden Cloud is $3/mo billed yearly | Claude Code, Claude Desktop, Codex (ni-c) |
| Chrome bookmarks | Depends on the server | Some can remove whole folders | None | Mostly Claude Code and Claude Desktop. One names ChatGPT desktop, another Goose |
| Stashr | Saves links, notes, tags, favorites, archive state, collections | Collections only, with explicit confirmation. Bookmarks are archived, reversibly | Pro, $10/mo or $7.50/mo billed yearly. 14-day trial, no card required | Claude, ChatGPT, Claude Code, Codex, Cursor |
Prices and tools move
Prices and tool lists are from each vendor's site in October 2026, and several of these servers are changing fast. Check the linked docs before you commit. Which ChatGPT plans can add a custom server is a separate question, covered here.
The official servers, one by one
Raindrop
Raindrop's server is hosted, signs in with OAuth or an API token, and has a broad write surface: it can create, edit, merge, and delete across bookmarks, collections, tags, and highlights. It can also flag bookmarks that look misplaced or mistagged. The catch is in its own words: "On the free plan, the MCP server is limited: text and semantic search are not available." Its page doesn't describe a read-only mode.
Pick it if your library is already in Raindrop. If you're weighing a move instead, here are the best Raindrop alternatives.
Karakeep
Karakeep documents its server in its own
docs, and the code lives in its main repo, last changed on October 17, 2026. You run it with
npx or Docker and give it an API key. The get-bookmark-content tool returns a bookmark's
content as Markdown, so an archived page is readable rather than just a link.
The tool for deleting a bookmark is explicit about what it does: the bookmark, its highlights, and its assets are removed. Semantic search arrived in version 0.33, and the project itself labels it experimental. See how Karakeep compares to Stashr.
Anybox
Anybox's server is off until you turn it on, listens only on your
Mac, and only runs while the app is open. Its delete is conservative: move_to_trash is
restorable for 30 days and, per the docs, nothing is deleted permanently through the server. Its search doesn't list article text among the fields it
matches, and a client needs to reach your Mac, so it suits desktop tools.
Readwise
Readwise's server is hosted and suits reading more than link keeping. It searches full document text with hybrid search and returns a document's "full Markdown content." It also reaches your highlights and your Readwise Books data, so the tool list is long. Its pricing page lists agent access on Full Readwise, Reader only, and Highlights only.
mymind
Search results and community projects can leave the impression that mymind has no official route, but its help center describes MCP as part of "Mind Extensions," with support for Claude, ChatGPT, Poke, Hermes, and other local agents. Keys are either Read only or Full access, and mymind itself warns that handing an agent Full access could lead to data loss. The API is in beta, and more granular permissions are planned.
What we couldn't find: the server's URL, its tool list, or a plan requirement. The API docs don't mention MCP, so we can't say how to connect it. A community server also exists, last changed in June 2026. It says it's unaffiliated, built on internal endpoints, and may break if they change, so we'd try the official route first. See how mymind compares to Stashr.
Tweetsmash
Tweetsmash covers one source, X bookmarks, in
depth. Its integration docs list 42
tools, well beyond the seven on its landing page. get_bookmark can return an X Article
body, an unrolled thread, notes, and replies.
Check two things. archive_bookmarks can delete up to 500 at once and a filter-based version
applies to every match. The docs tell the assistant to confirm first, and they don't say
whether a delete touches your bookmarks on X itself. Also, one documented setup puts your
token in the server URL, so treat that URL like a password. The Yearly
Pass is the plan that lists MCP, and the Believer Pass includes everything in it.
X's official server
X's server can list, add, and remove bookmarks and manage folders, and you need your own developer app with OAuth to use the bookmark tools. Billing is pay per use, with your own bookmark reads listed at $0.001 per resource and bookmark writes at $0.005 per request at the time of writing.
It has two limits worth knowing. X's API launch announcement said the bookmarks endpoint returns your 800 most recent, and while the current endpoint docs don't state that cap, Tweetsmash's pricing page still cites it. And this server isn't bookmark-only: it also covers posting Articles, so scope matters. X's docs advise a dedicated app "with only the scopes you need." Because it calls X's API, your AI gets what X serves today, not a saved copy. For a one-time copy instead, see how to export your X bookmarks.
Stashr
Stashr's server is hosted, with OAuth sign-in, and has 13 tools. It stores a copy of each post when you save it, so your AI reads that copy even if the original is later deleted. On Pro and during the trial, AI tagging also lets it search inside your images.
One connection reaches everything Stashr has captured: X, Reddit, Instagram, TikTok, Facebook, LinkedIn, GitHub stars, Hacker News favorites, and right-click page clips. It can save links, notes, and tags, but it archives bookmarks reversibly rather than deleting them, and deleting a collection needs explicit confirmation. The sign-in screen lists the permissions the client asks for, and for a strictly read-only connection you can use a Read-level API key instead.
MCP is part of Pro and the 14-day trial; the $6 Hobby plan returns a payment error. Capture runs through the desktop extension, so phone saves arrive at the next import, videos play from the original post, and Chrome bookmarks aren't imported yet.
Community servers: Linkwarden and Chrome
These are small projects, and several have no stars at all. Stars and dates below are from GitHub on October 30, 2026. Read the code or at least the README before you run one, since a local server is code executing on your machine with your client's privileges.
Linkwarden
We found no official server. Linkwarden's repo has no MCP code that we could see, its docs home doesn't mention one, and a request for an official server is still open.
- ni-c/linkwarden-mcp: 28 tools, including reading the article text Linkwarden preserved, with a read-only flag and tool allowlists. Last commit October 29, 2026, 0 stars. Its README notes that Linkwarden tokens have no scopes and carry your account's full permissions.
- irfansofyana/linkwarden-mcp-server: the most starred, at 33, with a read-only mode. Last commit October 11, 2025.
Chrome bookmarks
No official Chrome server turned up. Chrome's own bookmarks store titles, URLs, and folders, so unless a server fetches pages itself, your AI gets a list of links to go and open.
| Repo | Reads | Writes | Search | Last commit | Stars |
|---|---|---|---|---|---|
| noesis-sol/mnemos | Titles, plus page text it fetches and stores locally | None, read-only | Local semantic and keyword | Oct 26, 2026 | 0 |
| masaodev/chrome-bookmarks-mcp | Titles, URLs, folders | Yes, through an extension, including removing whole folders | Chrome's built-in search | Oct 4, 2026 | 1 |
| sirwilliamiv/chrome-bookmarks-mcp | Titles, URLs, folders | Yes, through an extension, with a review step and undo | Local hybrid | Sep 6, 2026 | 0 |
| HAWK495/chrome-bookmarks-mcp | The Bookmarks file | Edits the file directly | Keyword, over titles, URLs, and domains | Jun 1, 2026 | 1 |
| RobAMills/bookmarks_mcp | Titles, URLs, folders | None, read-only | Keyword | Dec 31, 2025 | 1 |
The write path matters. HAWK495's README tells you to quit Chrome and turn off bookmark sync before writing, or your changes can be undone. The extension-based servers work around that by going through Chrome's own bookmarks API. mnemos is the only one here that reads page text, signed out, so it won't see pages behind a login, and it downloads about 625 MB for semantic search.
One thing to skip if you want your browser's bookmarks: pree-dew/mcp-bookmark comes up for these searches, but its README describes saving and searching bookmarks you add through it, using OpenAI, and doesn't mention Chrome's file. Its last commit was September 26, 2025.
If you just want a one-time copy for an AI to read, you can export your Chrome bookmarks without any server.
Hosted or local: what actually changes
Local doesn't automatically mean private, and hosted doesn't automatically mean exposed.
- Reach. Claude's custom connectors use remote servers, and local servers set up in Claude Desktop aren't available on claude.ai. A server on your laptop generally suits desktop and coding tools, not a chat tab on your phone.
- Privacy. A local server keeps your library's storage local, but whatever a tool returns still goes to your AI client, and from there to whichever model it uses.
- Upkeep. Hosted means the vendor runs it. Local means you handle updates, and the server generally has to be running when you need it.
What to check before you grant access
Run through this whichever server you choose. The same goes for Stashr.
- Read the tool list, not the marketing page. Look for anything that deletes, and whether it's a real delete or a trash. Tweetsmash's landing page and its integration docs show very different tool counts.
- Use the narrowest credential available. mymind has Read only keys, Stashr has Read-level API keys, and Linkwarden's community servers have read-only flags. Where there's no such option, Claude lets you disable individual tools.
- Keep approvals on for writes. The MCP spec says there should always be a human able to deny a tool call. Be careful with "Allow always."
- Treat your saves as untrusted text. This is the one people miss, so it gets its own section below.
Prompt injection from your own saves
A saved post is text somebody else wrote, and your AI will read it while holding your tools. OWASP calls this indirect prompt injection: instructions hidden in outside content that change what the model does. As an illustration, a post in your library could include a line telling any AI reading it to delete items or send your notes somewhere. Whether that works depends on the model and client, but the risk comes from the content rather than from who built the server.
OpenAI's MCP guide says it plainly: "Trusting a MCP's developer does not make this safe." So an official server isn't exempt, and neither is Stashr or any other library of saved posts. Stashr's safeguards are Read-level API keys, reversible archiving, and explicit confirmation before a collection is deleted.
Three habits reduce the damage:
- Don't mix a read of your saves with write access you haven't reviewed. Asking for a summary doesn't need a delete tool.
- Be careful with other connected tools. A hostile instruction is more dangerous when the same session can also send email or post publicly.
- Prefer servers where mistakes can be undone. A trash or an archive is easier to recover from than a permanent delete, and keep an export of whatever you'd hate to lose.
Common questions
Is there a Raindrop MCP server?
Yes. Raindrop hosts an official one at https://api.raindrop.io/rest/v2/ai/mcp. It reads full
text and can write and delete, but on the free plan text and semantic search aren't available.
Does Karakeep have an MCP server?
Yes. Karakeep publishes its own, run locally with npx or Docker using an API key. It can read bookmark content as Markdown, and it can delete bookmarks, lists, and tags.
Is there a mymind MCP server?
Yes. mymind's help center describes one as part of its beta API, with Read only or Full access keys. We couldn't find its URL or tool list in public docs.
Is there an X bookmarks MCP server?
Yes. X runs an official server that needs your own developer app and pay-per-use billing, and Tweetsmash offers one on its Yearly Pass with keyword and semantic search. Stashr's covers X bookmarks along with your saves from Reddit, Instagram, TikTok, and more, as stored copies.
Is there a Chrome bookmarks MCP server?
Only community ones, as far as we could find. Most read titles, URLs, and folders. mnemos also fetches page text locally, and a few can edit your bookmarks through a companion extension.
Is there a Stashr MCP server?
Yes. Stashr hosts one with OAuth sign-in and 13 tools, on Pro and during the 14-day trial. Your AI reads the stored copy of each save from X, Reddit, Instagram, TikTok, Facebook, LinkedIn, GitHub, and Hacker News, and can save links, add notes and tags, and manage collections. See the MCP docs and Stashr's MCP feature page.
Does Readwise have an MCP server?
Yes. Readwise hosts one that searches and reads your Reader documents and highlights. Its pricing page lists agent access on Full Readwise, Reader only, and Highlights only.
Does Linkwarden have an MCP server?
Not an official one that we could find. Community servers exist, and a feature request for an official server is still open on Linkwarden's GitHub.
Give your AI the post, not just the link
Stashr copies what you save on X, Reddit, Instagram, TikTok, and more, and connects it to your assistant over a hosted MCP server on Pro. 14-day trial, no card required.
14-day free trial · No credit card required · Cancel anytime
