Skip to content

AnyType Integration

AnyType is the primary PKM. We integrate via its Local API (developer preview), which runs entirely on localhost.

What we use AnyType for

  • People, events, ideas, and projects as first-class objects.
  • Linked relations between them (graph-shaped knowledge).
  • A single inbox entrypoint that the agent can read from and write to.
  • Source of truth for private data (anything classified private_sensitive).

Integration pathways

Pathway Surface Used for
Local HTTP API http://localhost:<anytype-port> All read/write operations (objects, relations).
MCP bridge Official @anyproto/anytype-mcp — see mcp-config.example.json and the connection runbook runbooks/connect-local-anytype-to-cursor-and-wiki.md Agent-tool invocation in Cursor.
Function-calling Direct REST calls via skills' scripts Deterministic batch operations and migrations.
Skills skills/ High-level recurring workflows.

Security controls (AnyType-specific)

Control Implementation
API key issuance One-time 4-digit challenge in AnyType desktop → bearer token. Stored in user-only secret store (SPB-03).
Allowlist of trusted integrations Explicit list of MCP servers, skills, and scripts allowed to use the AnyType key.
Least privilege Separate keys per integration when possible; revocation via AnyType settings.
Auditable writes Every write logged to runbooks/audit-log.md with object id, type, and rationale.
Egress restriction AnyType API stays on localhost; no proxy or tunnel without explicit approval.

Files