NotchPadWrite the instructions without the credential
Record where to obtain a value, which environment uses it, and how to verify the setup. Use placeholders in examples. The note should help the next person perform the task without containing a reusable password or token.
Lock the notes that do contain private information
NotchPad’s Lock action encrypts a note’s contents. Reveal them with Touch ID or your Mac login password. Locked notes are excluded from MCP access. Ordinary unlocked notes are locally stored, but they are not all encrypted by the app.
Sharing a folder is a real access choice
In AI Connections, select the folders an AI app needs, choose read permission, and enable writes only if you want it to add content. The initial setup selects existing folders by default, so review that selection. A connected app may send shared notes to its model provider. Keeping NotchPad’s storage local does not make a cloud AI request local.
Know what write access does
MCP write access can create notes and append text or rich content. It cannot move, rename, delete, or replace notes or folders. Those limits preserve your existing content, but do not replace reviewing what an AI wrote. Check commands and technical claims before following them.
Don’t confuse hiding with locking
Hiding a sticky note only removes it from view. Locking protects its contents. Ghost Privacy asks capture software to exclude NotchPad while you still see it; verify the preview in the sharing app. None of those actions substitutes for locking your Mac when you leave your desk.
A short review before sharing a project note
- Remove credentials, customer identifiers, and unnecessary personal details.
- Check copied terminal output for tokens or private paths.
- Confirm the shared folder is appropriate for the connected AI provider.
- Read generated commands before running them.
- Delete obsolete sensitive clipboard items rather than relying on detection alone.
NotchPad is a place for work notes, not a team secrets service. Start with the note you need, keep private material deliberate, and use the right store for credentials.