One endpoint, and an authorization you control

You connect with OAuth and PKCE, so the client never gets your password. Before you grant anything, FlowReader shows which client is asking and where it will send you back to.

https://mcp.flowreader.io/mcp

You approve each permission, and you can approve less than was asked

The consent screen has one switch for each permission the client asked for. Reading always stays on, and you can refuse everything else. That’s how you give a client read-only access. Fetching public web pages is a separate permission from writing. A client that may change your library can’t also go online for you unless you allow that too.

  • ReadAlways on

    Read your synced library, highlights, settings, history and accepted shares.

    flowreader:data:read

  • Write

    Save and change items, collections, tags, highlights, sources and automations.

    flowreader:data:write

  • Delete

    Delete items and organisation, and only after confirming each deletion.

    flowreader:data:delete

  • Settings

    Change reading, library, feed and AI preferences, themes and presets.

    flowreader:settings:write

  • Shared archives

    Contribute to archives other people have shared with you, where they allow it.

    flowreader:shared:write

  • Fetch web pages

    Fetch public web pages you ask it to read or save. Never private addresses.

    flowreader:web:fetch

What a connected client can do

Find and read

  • Search and filter your library
  • Read a saved article, your highlights and your notes
  • Read what you decided about your knowledge graph — merges, splits, renames
  • Read your reading history and statistics

Organize

  • Save an article written or supplied by the assistant
  • Rename, tag, file and mark items read or unread
  • Create and rearrange collections and tags
  • Add and edit highlights and notes

Automate and report

  • Create and edit monitors, smart rules and skills
  • Check a monitor’s watched sources now, or preview what it would collect
  • Read tracked signals

Bring things in from the web

  • Fetch a public page you point it at and read it
  • Save that page to your library
  • Check what a feed you follow is publishing right now

Change preferences

  • Change reading, library, feed and AI settings
  • Save and apply themes and presets

Delete

  • Delete saved items, collections, tags and highlights
  • Every deletion has to be confirmed in the request that makes it

Shared archives

  • Add to and edit archives shared with you, within the permissions their owner set

The tools behind the endpoint

The endpoint offers 56 tools. They cover library search and structured queries, your reading position and the decisions you made in the knowledge graph. They also reach your conversations with FlowReader’s own assistant, your Monitors and their signals, and what a feed you follow is publishing now. A highlight is placed by quoting the passage. If the quote matches more than one place, the tool refuses rather than guesses.

Where it stops

The service reads only your synced library, through the same per-user rules as the app. It has no route to your device. A library you keep locally, in a folder or in Dropbox is out of its reach. AI keys and billing records are left out, and fields that look like passwords or keys are removed in both directions.

Your synced library and accepted sharesReachable
A local-only, folder or Dropbox libraryNever
AI provider keys and billing recordsNever
Fetching public pages on your behalfSeparate consent
Deleting anythingConfirmed per request
Creating a share, running a Smart Rule, or walking the graphNot offered

What the server refuses, published by the server itself

A client can ask what’s missing before it tries. The flowreader_capabilities tool returns the server’s own list of what it doesn’t offer, with the reason. 5 things are left out on purpose.

  • Creating a share
  • Running a Smart Rule
  • Setting reading goals
  • Bridge items and centrality scores
  • Walking the knowledge graph, such as related items, paths and clusters

Requires Pro, a verified account and Online Sync.

Start with the next thing you want to read

Get the desktop app or the browser extension.