Extensions can also call custom APIs with API keys stored safely in your macOS Keychain. This allows you to build powerful integrations while keeping your credentials secure.
Key features:
- Secure credential storage using macOS Keychain
- Make HTTP requests to declared API endpoints
- Process responses and insert results into your notes
- Build custom integrations with your favorite services
How network access is controlled:
- An extension can only call endpoints declared in its
extension.json — the app refuses requests to any other URL.
- All extension network access is additionally gated by Settings > Privacy > "Let extensions call their own APIs" — nothing goes out until you turn it on.
- Calls run asynchronously — the app never blocks while waiting for a response, so you can keep typing.
You can manage API keys and see each extension's declared endpoints in Managing Extensions & API Keys. For more details, see the Network Extensions documentation on GitHub.