Summary

• Adds `inode mcp` — a Model Context Protocol stdio server so MCP-aware clients (Claude Code, Cursor) can read the inode KB.
• Three read-only tools: `search_notes`, `list_notes`, `get_note`. No write tools — writing from an agent is reserved for a future iteration.
• Sensitive notes are excluded from `search_notes` results (the calling LLM never sees their content) and masked in `get_note`. Opt-in plaintext via `inode config set mcp.reveal_sensitive true`.

Design notes

• Why no LLM step in search_notes: the calling host is itself an LLM (Claude, Cursor's model). Handing it raw note candidates beats handing it a pre-generated answer from a smaller local model. Refactored `SearchService.Search` to call a new `Retrieve` method (embed → vec search → threshold → decrypt) — `Search` adds the LLM-answer step on top for the CLI; MCP uses `Retrieve` directly.
• Sensitive handling: pushed down to the DB layer via `db.Filters.IsSensitive` so sensitive notes don't reach the LLM at all (not even via decrypted-then-masked). Safer than relying on output-side scrubbing.
• SDK choice: `github.com/mark3labs/mcp-go v0.54.0` (community-mature; bigger ecosystem of examples than the official go-sdk).

Test plan

• 11 new unit tests covering the format functions and the sensitive-masking gates (`go test ./internal/mcp/...`)
• Full suite green (`go test ./...`)
• Manual: wire into Claude Code's MCP config and call each tool from an agent session
• Manual: with `mcp.reveal_sensitive=true`, verify a credentials-category note returns plaintext

Wiring it up (Claude Code example)

```json
{
"mcpServers": {
"inode": { "command": "inode", "args": ["mcp"] }
}
}
```

🤖 Generated with Claude Code