Wispr Flow Notetaker (Agent Plugin)

Read-only connector to Wispr Flow Notetaker. This Agent Plugin points at the official remote MCP so agents can search and read meetings, notes, and calendar events. Dictations are never exposed. Tools cannot create, edit, or delete anything.

This is an Agent Plugin (plugin.json + mcp.json + one skill). It is not a Cursor Plugin: there is no .cursor-plugin/ directory and no rules, hooks, agents, or commands.

What it wraps

The host (Cursor) starts the OAuth flow from the server's 401 + protected-resource metadata. This plugin does not ship a client id, headers, or secrets.

Official docs:

• Connect an MCP client to Wispr Flow
• How to connect Wispr Flow to Claude, ChatGPT, and other AI tools

Prerequisites

All of these must be true for notes to appear:

1. Notetaker is enabled on the Wispr Flow account. On Mac, Settings → MCP appears only when Notetaker is available.
2. Dictation Cloud Storage / Cloud Sync is on. Individual non-enterprise users can still reach Notetaker cloud data with the personal Cloud Storage toggle off. Enterprise and org members are blocked when the org's Cloud Sync or Zero Data Retention policy denies it.
3. The account is not HIPAA-covered. MCP refuses HIPAA BAA accounts with "This feature is not available for HIPAA-covered accounts."
4. You authorize with the same Wispr Flow account that holds the notes.

The MCP tab and the copy-URL flow are Mac Settings only (not Windows, iOS, or Android). Connected tools pull from the Wispr Flow account, not from files on disk, so Wispr Flow does not need to be running locally after notes are already in the cloud.

Install / load locally

Load locally:

Copy into a real directory (Cursor rejects a symlink whose target is outside that folder):

mkdir -p ~/.cursor/plugins/local
cp -R /path/to/this-repo ~/.cursor/plugins/local/wispr-flow

Then restart Cursor or run Developer: Reload Window. Open Customize and confirm the wispr-flow MCP server and the wispr-flow-notetaker skill.

On Teams and Enterprise, local plugin imports may be disabled until an admin turns on Allow Local Plugin Imports.

You can also add the same URL by hand: Cursor Settings → MCP → Add new MCP server, name it wispr-flow, paste https://api.wisprflow.ai/connect/mcp. That is the URL Mac Settings → MCP copies for every client.

First-connect OAuth

1. Enable the wispr-flow MCP server.
2. Cursor opens a browser window. Sign in to Wispr Flow and approve access.
3. Confirm the server shows as connected / authorized.
4. Ask about a recent meeting. If the answer cites that meeting, you are connected.

There is no key to copy. Each new client connection needs its own browser sign-in. Disconnect from the client's MCP / connector settings at any time.

Example prompts

From Wispr Flow's official docs:

• "Summarize my last three calls with the design team."
• "Find the meeting where we set the launch date and pull the exact quote."
• "What did we discuss in yesterday's 1:1?"

Also valid: attendees, summaries, transcripts, Notetaker chat history, a shared-note link you already can open, or a pasted calendar / conference link.

Limits

• Read-only. Connected tools cannot create, edit, or delete meetings or notes.
• No dictations. Only Notetaker data is exposed. Dictation history stays on-device.
• Retention deletions. Transcripts removed under Settings → Data and Privacy → "Notetaker transcript retention" are reported as deleted and never returned. Retention can be never, or 1 / 7 / 30 / 90 / 180 / 365 days. An org admin may set this for you.
• Deleted meetings. Deleting a meeting in Wispr Flow removes the transcript, refined transcript, audio, and speaker data. It cannot be restored.
• Org policy. If an admin disables Notetaker, meetings created after that are blocked. Meetings recorded before that stay readable.
• Throttling. Repeated queries can be temporarily rate-limited; wait and retry.

Layout

plugin.json
mcp.json
skills/wispr-flow-notetaker/SKILL.md
README.md
LICENSE

Agents should treat Notetaker data as NotetakerMeeting, Note, and CalendarEvent. Tool names are not hardcoded here; they come from tools/list after sign-in.

License

MIT