Hosted

Your vault on a server. Every client, every device.

A vault server gives you an account with several vaults, and the same notes in claude.ai, Claude Desktop and mobile, Claude Code, Codex, Cursor and Obsidian. Each vault is sealed in storage with its own key.

Hosted mindin is coming soon
Read the server docs
Run your own vault server
One vault server in the middle, with a trail to each client: claude.ai, Claude Desktop, the mobile app, Claude Code, Codex, Cursor and Obsidian claude.ai custom connector Claude Desktop follows the connector Claude mobile follows the connector Claude Code signed-in machine, hooks Codex signed-in machine Cursor, any MCP client OAuth or a key Obsidian WebDAV with a key YOUR VAULT
  • Your vaultsealed, on the server
  • claude.aicustom connector
  • Claude Desktop and mobilefollow the connector
  • Claude Codesigned-in machine, hooks
  • Codexsigned-in machine
  • Cursor, any MCP clientOAuth or a key
  • ObsidianWebDAV with a key

Accounts

No passwords. Five ways in.

Sign in with a passkey, an email link, GitHub, your own identity provider, such as Okta, Google Workspace, Keycloak or Pocket ID, or a trusted proxy in front of the server that signs people in, the way Cloudflare Access does. An account can have several ways in, and a sign-in whose verified email matches joins it.

  • An email link works once, for 15 minutes.
  • Add a passkey after the first sign-in, and that is all it takes next time.
VaultsNew vault
Personal
Personal/mcp?vault=notes212 notes · 3.4 MB · written 3 min ago · 2 keys, 1 connection
Personal
Work/mcp?vault=work1 note · 0.1 MB · written 3 min ago · 1 key, 1 connection
Personal
Shared
Workshop/mcp?vault=workshop3 members · 48 notes · 0.6 MB · written yesterday
Shared · Owner

Several vaults

One account, as many vaults as you need.

Each vault has its own address, keys, connections, search index and encryption key. Keep work and home apart, and let a repo use the vault it belongs to.

mindin vault use work --dir ~/projects/client-repo
  • Download a personal vault as a zip, any time, and import a zip into it.
  • Switch a personal vault's layout from its page.

Connect

Every client reaches the same notes.

Every connection reaches one vault, the one it was made for, and asks for read, or read and write. The vault's page has the address, the sign-in line and the WebDAV address, ready to copy.

  • claude.ai, Desktop and mobile

    Add the vault's address as a custom connector and sign in through the browser. Connect once on the web, and Claude Desktop and the mobile app have it too.

  • Claude Code, Codex, the hooks

    Sign the machine in once with mindin login. Its agents, hooks and the CLI use the same key.

  • Cursor and any MCP client

    A client that speaks OAuth takes the address as a remote server. One that only takes a header gets a key.

  • Obsidian

    Remotely Save over WebDAV, with your email and a key from the vault. The agent sees your edit at its next search.

Signed-in machines

Sign a machine in from any device.

The command prints a link and a code, and opens the link when it can. On any device, open it, check the code is the one in your terminal, and approve. Over ssh it works the same way.

laptop · ~/projects/orchard-shop
$ mindin login https://vault.example.com --vault notes Open https://vault.example.com/device and enter the code WXKP-TRHM or go straight to https://vault.example.com/device?user_code=WXKP-TRHM Waiting for you to approve it there… Signed in to https://vault.example.com to the vault notes: key 'laptop', read and write.

Connect a device

A device asks for a key to one of your vaults.

Approve only if you started this yourself, just now, on a machine you use.

CodeWXKP-TRHM
Asked by:
A command-line tool
The key will be named:
laptop
Vault:
Personal

Access:

readread and write
ApproveDeny

The code expires in 10 minutes.

claude.aiConnectorread and write4 min agoDisconnect
laptopComputerread and writejust nowSign out
ObsidianKeyread and write2 h agoRevoke

Shared vaults

Share what a team knows, with full history.

Invite people by email. Members sign in with their own account and make their own connections. Every change is kept with who made it and through which key, and any edit or delete can be restored.

  • A shared vault holds the current state: system notes, decisions, traps, how-tos and references.
  • Tasks, the backlog and logs stay in each member's personal vault.
  • Two agents writing one note both land, nothing is silently overwritten, and WebDAV honours If-Match.
  • An invite lasts seven days and works once, and a pending one can be withdrawn.
  • An owner can hand the vault over to another member.
  • Removing a member stops their keys and computers on their next request.
Areas/orchard-shop.md updatedby ann@example.com · laptopsee change · restore previous2 h ago
Resources/payment-webhook-retries.md createdby sam@example.com · work-laptopsee changeyesterday
Resources/stock-counts-on-harvest-day.md moved from Projects/by ann@example.com · phonesee change3 days ago
Projects/old-shipping-rates.md deletedby lee@example.com · desktopsee change · restore previous27 Oct 2026
Areas/orchard-shop.md updatedby ann@example.com · laptop · 2 h ago
- Gift cards cannot pay for a box subscription.+ Gift cards pay for box subscriptions; the balance is used first.Restore previous

Sealed at rest

Every vault sealed with its own key.

Contents and names are both encrypted before they reach storage, whether that is a disk or a bucket. Whoever holds the storage sees opaque names and ciphertext.

Deleting destroys the key firstso the files cannot be read even before they are removed.
A bucket leak reads nothingA provider, a storage admin or a stolen disk sees only ciphertext and file sizes.
Not end-to-endThe server opens a vault to answer, so search, connectors and Obsidian see plain notes.

Search by meaning, on the server

One model on the server serves every account. The question can share no word with the note it finds.

Export and import

Download a personal vault as a zip at any time. Import a zip, or have the server's operator seal a folder or bucket in, under your support grant.

Support only by your grant

Let support open one vault for an hour, a day or seven days, and end it early. Every look is logged with who and why, on your Account page.

The vault server is open source under MIT, and runs with Docker Compose, from three files in each release, if you would rather host it yourself. Install with Docker

Put your memory where every agent can reach it.

Run a vault server, add it to claude.ai as a connector, and sign your machines in. Your notes stay markdown you can download any time.

Hosted mindin is coming soon
Connect claude.ai
Run your own vault server