Maybe MCP could be a part of the server. The following could enable MCP endpoints.

dnote-server --mcp

We might need more granular access control to allow what MCP client can see.

Please let me know what you think about this.