Use ChatGPT or Claude to add items to your checklists, set reminders, search your notes and more.
For example, you can ask: “Add milk and eggs to my shopping list, and remind me about the eggs tomorrow at 6 pm”, “What do I have today?”, or “Find my notes about Kyoto”.
Connect an agent
You can find the connection URL in the app under Settings → Integrations → Agents. Tap it to copy.
Claude
In Claude, go to Settings → Connectors and select “Add custom connector”.
Enter a name (for example, Pushany) and the URL above, then add the connector.
Press “Connect”. The Pushany approval screen opens in your browser.
ChatGPT
In ChatGPT, go to Settings → Apps & Connectors → Advanced settings and turn on “Developer mode”.
Go back to Apps & Connectors, press “Create”, enter the URL above, and select OAuth for authentication.
After you create it, the Pushany approval screen opens in your browser.
Menu names and locations in ChatGPT and Claude may change with their updates.
Approval screen
Open it on a device where you’re signed in to Pushany and that has your encryption key. You can’t approve from a device without the key.
Returns to: the service you go back to after allowing. Anyone can choose an agent’s name, so a warning appears if this isn’t a well-known agent. If you didn’t start connecting the agent yourself, don’t allow it.
Lists shown by name: the checklists agents can refer to by name. This is shared by all agents you allow. The first time you connect, all lists you don’t share are selected. Agents without access to contents can’t see lists you deselect.
You can’t change shared lists here. The owner and admins choose “Show name” under “Agents” on the sharing screen. When it’s on, the list is visible to every member’s agents (Sharing).
Also allow access to contents: off by default. Turn it on to let this agent read, search and check off items, and use notes and the tray. Other agents aren’t affected. It turns off automatically when the agent doesn’t use it for 14 days, or 90 days after you turn it on. You can see when it expires in Settings → Integrations → Agents. See the table below for details.
Press “Allow” to return to ChatGPT or Claude.
What agents can do
Default (write only)
Access to contents allowed
Add items to checklists (due date, notification, repeat, note, flag)
✓
✓
Create checklists, set or remove a reminder for a whole list
✓
✓
Read checklists, check off and edit items (including due dates and notifications)
—
✓
Organize checklists (name, color, icon, note, pin, sections, order, move items to another list, uncheck all)
—
✓
See what’s due today and soon
—
✓
Search notes, checklists and the tray
—
✓
Read, create, append to and edit notes (title, text, tags, pin)
—
✓
View the tray, send to it (notifies your devices), copy to notes
—
✓
Send files (to the tray or as note attachments) and read them (images and text files)
—
✓
List reminders, and set or remove them on notes and tray items
—
✓
Shared notes and lists are encrypted with the protection key, so agents can’t read them even with access to contents. However, if the owner or an admin turns on “Allow reading contents” under “Agents” on the sharing screen, agents can read and edit it like items you don’t share (Sharing). When it’s off, agents can add items to a shared list only if “Show name to agents” is on for it.
Locked notes aren’t shown to agents.
Agents can’t delete anything (including moving it to the trash), share, or change encryption or account settings. When an agent edits or appends to a note, the previous version is saved in the note’s history.
Encryption and privacy
With write only, end-to-end encryption stays in place. Items an agent adds are encrypted with your public key and converted to the usual format when you open the app on your device. Once they’re stored, the server can’t read them.
While access to contents is allowed, the server decrypts your contents so the agent can use them. Your encryption key is stored encrypted with a key managed by the server, and is decrypted only when the agent uses it. During this time the operator holds your key, so the operator can decrypt your data that isn’t shared. This key can’t decrypt shared notes and lists, or locked notes.
For shared notes and lists with “Allow agents to read contents” on, the server stores that note’s or list’s key, encrypted the same way. While it’s on, the server decrypts the contents when a member’s agent uses them, so the operator can decrypt them too. When it’s turned off (including automatically), the stored key is deleted right away, and the next member to open the app renews the note’s or list’s key.
When access is off for all agents (including when it turns off automatically), the stored key is deleted immediately, and the next device that opens the app renews your encryption key. Data you save after that is encrypted with the new key, so the operator can’t decrypt it.
Database backups (kept for 90 days) and the database’s restore history (up to 30 days) still contain an encrypted copy of the key from before it was deleted. With these and a secret value on the server, the operator could decrypt only the data you saved before a device renewed the key. The same applies to the keys of shared notes and lists.
If you turn access on again, the new key and all earlier keys are stored again. The agent can then also read data you saved while access was off.
Names of lists you choose under lists shown by name, and of shared lists with “Show name to agents” on, are stored on the server unencrypted. When you deselect a list or turn the setting off, the name is deleted from the server. Lists created by an agent are added automatically. When the setting of a shared list changes, every member gets a notification.
What you tell an agent and what it reads are also stored by ChatGPT or Claude, under their own terms.
If you have notes with passwords, recovery keys or anything else you don’t want an agent to read, keep access to contents turned off.
Review and revoke access
In Settings → Integrations → Agents, you can review and change the following.
The agents you allowed, where each returns to, and when each was last used
History: records the type of action and the list or note it affected. The text itself isn’t recorded. History is deleted after 90 days.
Revoking access: the agent can no longer be used, effective immediately.
Access to contents for each agent, and lists shown by name
Access that hasn’t been used for 90 days expires automatically.
PC agent (trial)
Agents that run in a terminal on your PC, such as Claude Code, can read and write your notes and checklists with the pushany command. Encrypted data is decrypted on your PC, so plain text is never sent to the server. Shared notes and lists can be read too.
In the app, go to Settings → Integrations → PC agent and press “Create API key”. A command and an API key are shown. The API key is shown only this once.
Install Node.js 22 or later and pushany on your PC. pushany is in a trial and is not publicly distributed yet.
Copy the command (pushany login …) and run it in a terminal. When asked for your API key, paste the API key you copied. The API key isn’t shown on screen and isn’t part of the command, so it doesn’t appear in your shell history.
Run pushany pair. Another device shows an approval request. On that device, press “Approve on this device”, enter the code shown in the terminal, and press “Approve”. To use your recovery key instead, run pushany pair --recovery. The recovery key isn’t shown as you type.
Ask your agent something like “Read pushany help and add milk to my shopping list”. If you use it often, mention it in CLAUDE.md or a similar file.
Agents can view checklists, add and check off items, read and create notes, and search. Run pushany help for the full list. Add --json for JSON output.
The API key alone can’t read encrypted data, but it can read data that isn’t encrypted. It can’t delete, share or change settings.
The API key and your encryption keys are stored unencrypted in ~/.pushany/cli.json on your PC. Don’t set this up on a shared PC. To stop using it, run pushany logout. This also deletes the API key from the server.
What the agent reads is also sent to its AI provider (such as Anthropic).
Troubleshooting
The approval screen says “This device doesn’t have your encryption key, so it can’t allow access”
The browser that opened the approval screen doesn’t have your encryption key. Connect again from the browser you usually use. Or open Pushany in that browser, get your encryption key by approving from another device or entering your recovery key, and then connect again.
The agent says it can’t find a list
The list may not be selected under lists shown by name. Check Settings → Integrations → Agents. If that agent has access to contents, it can see the names of all lists you don’t share. For a shared list, check that “Show name” or “Allow reading contents” is on under “Agents” on the sharing screen.
The agent stops after many requests in a row
Each connection is limited to 30 requests per minute. Wait a moment and try again.