Agent bridge

On desktop, Companion can expose the vault to Claude Code or Claude Desktop through a local MCP server. The bridge is off by default, binds only to 127.0.0.1, and requires a non-empty bearer token.

Enable it under Settings → Companion for Claude → Agent bridge — MCP server (desktop). Copy the generated client configuration from Companion rather than constructing credentials manually.

Read and audit tools remain available when writes are disabled. Mutation tools require Allow writes, and Companion keeps its normal per-action confirmation gate.