Are you the author? Sign in to claim
An infinite canvas for learning — select text, ask, and answers branch out as documents. MCP server for Claude Code, Cod
An infinite canvas for learning. Open a document, select any text, ask a question — and the answer opens as a fully-rendered child document. Follow whatever pulls at you, as deep as it goes. Every hole is saved and revisitable.
There are two ways in:
Open rabbithole.ing and start from anywhere:
drop in a PDF or Markdown file, paste a URL, import a .rabbithole or
snapshot .html — or just ask a question and let the answer become your
first document.
Two ways to run a model:
Keys never leave the browser: they're stored locally (or session-only, your choice) and sent exclusively to the provider origin you configure. Exports scrub anything credential-shaped.
Requires Node 18+:
git clone https://github.com/shlokkhemani/rabbithole.git
cd rabbithole
npm install
npm run build
npx -y serve web/dist
Open http://localhost:3000 (or the URL printed by
serve). The local browser build has the same OpenRouter and
OpenAI-compatible local-model options as rabbithole.ing,
and its documents and provider settings stay in that browser's local storage.
Holes persist in IndexedDB, and each document gets a memorable local URL such
as rabbithole.ing/curious-teacup-abcdef. That path names a record in your
browser's database — it is not a sharing link. To move a hole between
machines, export the .rabbithole file; to share something readable,
download a snapshot.
Self-hosting is static: run npm run build and serve web/dist from any
host. The optional workers/fetch-proxy Cloudflare Worker enables URL
ingestion for sources that block browser CORS (set RABBITHOLE_PROXY_URL at
build time to point the app at your relay). Serve index.html as the
fallback for unknown single-segment paths so document URLs survive a direct
visit or refresh.
Requires Node 18+ and a browser. Pick your agent:
Claude Code
claude mcp add rabbithole -- npx -y github:shlokkhemani/rabbithole
Codex
codex mcp add rabbithole -- npx -y github:shlokkhemani/rabbithole
Then raise the tool timeout in ~/.codex/config.toml — Codex's 60-second
default is shorter than Rabbithole's blocking wait, and codex mcp add
cannot set this field:
[mcp_servers.rabbithole]
command = "npx"
args = ["-y", "github:shlokkhemani/rabbithole"]
tool_timeout_sec = 600
Any other MCP client — most accept this shape in their MCP config:
{
"mcpServers": {
"rabbithole": {
"command": "npx",
"args": ["-y", "github:shlokkhemani/rabbithole"]
}
}
}
Then start a new agent session and say:
open this document in rabbithole
A browser tab opens. Select any text on the page, ask a question (or tap a lens — Explain · ELI5 · Example · Go Deeper), and the answer streams in as a new document. Keep going.
If a host ever reports a tool timeout, nothing is lost — questions are saved and re-queued the next time the agent listens.
git clone https://github.com/shlokkhemani/rabbithole.git
cd rabbithole && npm install
claude mcp add rabbithole -- node "$(pwd)/bin/mcp-server.js"
Follow these steps exactly:
node --version must be ≥ 18.claude mcp add … for Claude Code, codex mcp add …
for Codex, or write the JSON block into the client's MCP config file).
The npx -y github:shlokkhemani/rabbithole form needs no clone and no
install step — npx fetches this repo and runs bin/mcp-server.js over stdio.
For Codex, also add tool_timeout_sec = 600 under
[mcp_servers.rabbithole] in ~/.codex/config.toml; codex mcp add cannot
set that field.open_rabbithole, answer_branch, list_rabbitholes. (In Claude Code,
claude mcp list should show rabbithole as connected. The server itself
also responds to a standard MCP initialize with server name rabbithole.)open_rabbithole
with { title, content } (or { title, file_path }; add base_url when
the markdown came from a URL or repo; add assets for local images referenced
as asset:name.png), which blocks until they select text and ask. Answer
with answer_branch (stream chunks with partial: true, finish with a
titled final call) and keep looping until status='session_closed'. If a
long wait returns status='keep_listening', immediately call
open_rabbithole with the returned { hole_id } and do not re-send content.Notes for you: the tool call blocks by design (long-poll) — that is normal, not
a hang. The first npx run fetches this repo, so allow it time; later runs
are cached. If the browser must not auto-open (headless), set
RABBITHOLE_NO_BROWSER=1 in the server's env.
| Tool | What it does |
|---|---|
open_rabbithole | Open a doc ({ title, content } / { title, file_path }, optional base_url, optional assets) or resume one ({ hole_id }). A PDF file_path opens natively: rendered pages, selectable text, and box-select — no markdown authoring needed (title optional; PDF metadata or filename is used). Opens the canvas in the browser and blocks until the human asks something. |
answer_branch | Answer a pending branch request → a child document. Stream with partial: true chunks, then finish with a normal call carrying the node title; use base_url for fetched markdown and assets for local images referenced as asset:name.png. A branch_request from a PDF may include region.image_path — read that image before answering. Also streams "Convert to document" transcriptions when a convert_request arrives. |
list_rabbitholes | List saved holes to resume by id. |
The loop: open_rabbithole → branch_request → answer_branch → branch_request → … → session_closed.
Long waits may return keep_listening; immediately call open_rabbithole
again with the returned hole_id. If the host reports a tool timeout, do the
same — questions are saved.
For research PDFs, page renders are the dependable figure source. For arXiv
links, prefer fetching the HTML version and opening that content with
base_url instead of ingesting the PDF.
mermaid diagrams, bespoke show visuals, URL-based resolution
for relative links/images, and local image assets via asset:name.png;
source stays as Markdown for copy/export,
while frozen snapshots inline assets into the HTML.j/k walk marks, ↵ opens, ⌫ jumps back up, ⌘K
searches the whole hole..html — data, assets, and a
read-only client in one file anyone can open; Export Rabbithole (web
app) produces a .rabbithole backup for device transfer — MCP holes are
already plain JSON on disk; or ask the agent for a synthesis of the whole
journey.~/.rabbithole/; resuming
restores the doc, scroll position, mode, and canvas framing.The MCP host stores each hole as a JSON file directly under ~/.rabbithole/
(RABBITHOLE_DIR overrides the base directory) and assets under the matching
asset directory. The web .rabbithole file is the same persisted hole JSON
wrapped as { format: "rabbithole", format_version: 1, hole, assets }, with
assets base64-encoded into the single JSON file for portability.
Use an ordinary Mermaid code fence; Rabbithole renders it in live canvases, the hosted web app, and self-contained offline snapshots:
flowchart LR
Question --> Explore --> Understand
The bundled runtime supports flowchart, sequence, class, state, and
entity-relationship diagrams. Mindmaps, architecture diagrams, and
Mermaid-side KaTeX are not included; use a show visual or regular Rabbithole
math for those cases. Mermaid runs in strict mode, its SVG is sanitized again
before mounting, and invalid diagrams fall back to their original source.
| Env var | Effect |
|---|---|
RABBITHOLE_DIR | Override the storage directory (default ~/.rabbithole/). |
RABBITHOLE_NO_BROWSER=1 | Don't auto-open the browser (headless/testing). |
RABBITHOLE_MAX_BLOCK_MS | Max time for one blocking MCP wait before returning keep_listening (default 240000). |
RABBITHOLE_PROXY_URL | Build-time: URL of your fetch-proxy relay for the web app (empty string disables the default). |
bin/mcp-server.js — entry point (stdio MCP server)src/core/ — host-independent document engine, rendering, artifacts, and contractssrc/ui/ — shared live/frozen browser runtimesrc/node/ — MCP host, filesystem storage, local HTTP/SSE, and PDF ingestionsrc/web/ — static BYOK browser host and IndexedDB storagebuild.mjs — builds the committed MCP bundles and the static web appdist/ — committed browser bundles used by GitHub npx installsweb/dist/ — generated static web app (untracked build output)scripts/ — reproducibility checks and publish assemblytest/ — capability-oriented unit, contract, integration, end-to-end,
performance, and packaging suitesworkers/fetch-proxy/ — optional allowlisted URL-ingestion relaywebsite/public/ — public deployment assets consumed by build:publishSee CONTRIBUTING.md for the development workflow and
ARCHITECTURE.md for system boundaries. Compatibility,
testing, and interface rules live under docs/. The browser runtime
source lives in src/ui/ and is bundled into committed artifacts under dist/.
When editing the UI, run:
npm run build
npm run check:dist
Commit both the source changes and dist/. There is no prepare build step;
GitHub npx installs use the committed artifacts.
The Deploy Cloudflare Pages workflow
runs the complete test suite and deploys publish/ to the rabbithole Pages
project on every push to main. It can also be rerun manually from GitHub
Actions. Each Cloudflare deployment is tagged with the exact Git commit.
The workflow requires:
CLOUDFLARE_ACCOUNT_ID;CLOUDFLARE_API_TOKEN, scoped to Account → Cloudflare
Pages → Edit.Configure them with gh variable set CLOUDFLARE_ACCOUNT_ID and gh secret set CLOUDFLARE_API_TOKEN; both commands prompt without committing credentials.
MIT
Run Claude Code as an MCP server so any agent can delegate coding tasks to it
Browser automation using accessibility snapshots instead of screenshots
Google's universal MCP server supporting PostgreSQL, MySQL, MongoDB, Redis, and 10+ databases
Official GitHub integration for repos, issues, PRs, and CI/CD workflows