Developers
Use your vault from anywhere.
Granite has a read-only API and an official MCP server, so AI assistants and scripts can search your document vault, read a document's extracted fields, and ask questions about it in plain English. The API lives at api.granite.co/v1, the MCP server is published on npm as @graniteco/mcp, and there is a Raycast extension too. All three authenticate with one Personal Access Token and are part of Granite Paid. None of them can write, upload, or delete.
HTTP API
A read-only REST API to search, list, read, and ask your vault. Bearer-authed with a Personal Access Token.
Read the docs →MCP server
A local Model Context Protocol server that drops your vault into Claude Desktop, Claude Code, Cursor, or Codex as tools.
Read the docs →Raycast
Search, browse, and ask your vault straight from the Raycast launcher, no setup beyond pasting a token.
Read the docs →Get a token
Both surfaces authenticate with a Personal Access Token. Create one under Settings → Apps & API → Access tokens. The token is shown once at creation. Copy it then. Treat it like a password: anyone holding it can read everything the token's scopes allow, including sensitive documents.
The API and MCP server are part of Granite Paid. They are read-only. Uploads stay on the web app and email-in.
Can AI assistants read a Granite vault?
Yes. Granite exposes a read-only agent API and an official MCP server so an AI assistant can work with your documents. The MCP server, @graniteco/mcp, runs locally over stdio and gives Claude Desktop, Claude Code, Cursor, and Codex four read-only tools: search the vault, list documents, read a document with its extracted fields, and ask a question in plain English. There is no hosted or remote MCP endpoint. For Raycast, the published extension is raycast.com/Shpigford/granite.
Everything an assistant can reach is scoped to the token you issue, and nothing it does can change your vault. Uploading, editing, and deleting stay in the web app and the iPhone app.
At a glance
Base URL https://api.granite.co/v1 · auth Authorization: Bearer gra_live_… · the MCP package is @graniteco/mcp, run via npx.