Connect AI agents to your Keep library

Connected agents use the same Keep account and library. They can work with the same Notes, Items, tags, collections, Projects, and highlights.

Keep does not create a separate library for each agent. Connected agents are not team members. This feature does not publish Notes or share them with other Keep accounts.

Connect an agent with the CLI

Install and authenticate the Keep CLI first. Then create a named credential for the agent:

keep auth add claude
keep auth add codex

Confirm the request in the terminal. Keep stores a separate credential for each named client.

Check the current connections with:

keep auth status
keep auth list

Keep selects the matching Claude Code or Codex credential when that client runs a Keep command.

Connect an agent over MCP

Use the Keep MCP server when the AI client supports MCP.

  1. Add the Keep MCP server to the client.
  2. Start the connection.
  3. Sign in to Keep in the browser window.
  4. Approve access to your account.

The MCP client uses the same library as the Keep app and CLI.

What a connected agent can do

A connected agent can read and write:

  • Items
  • Notes
  • tags
  • collections
  • Projects
  • highlights

A connected agent cannot create credentials. It cannot revoke credentials or manage webhooks. Use your personal Keep session or personal API key for those tasks.

Review agent changes

Every Note revision records the trusted client identity. Open a Note and select its revision count to see the history.

The Notes page also has an Agent edits view. This view shows Notes last changed by a connected agent.

The client name comes from its authenticated connection. Text inside a Note cannot change that identity.

Handle changes from two agents

Every Note write includes the revision that the client read. Keep rejects the write if another client has already created a newer revision.

The agent must read the Note again after a conflict. It must review the newer content. It can then retry the change with the current revision number.

This process keeps both changes visible. It prevents one agent from silently overwriting another agent.

Disconnect an agent

Remove a CLI connection with:

keep auth remove codex

You can also disconnect an agent in Settings, under API and agents. Revocation takes effect at once. It does not affect your personal key or other connected agents.

Disconnecting an agent does not remove the Notes or revisions that it created.

Keep agent access separate

Give each agent its own named connection. Do not copy one agent credential to another client.

Treat each credential like a password. Revoke it if it might be exposed. The API key guide explains personal and read-only keys.

HomeSign up free