iOS Shortcuts for research capture and query

2026-03-08 · tools-infrastructure knowledge-management rag-retrieval · medium · source → · wiki →
key claims
  1. iOS Shortcuts "Get Contents of URL" supports arbitrary HTTP methods, custom headers, and JSON request bodies, making GitHub REST API calls fully feasible from iOS without any intermediary app or service. This is confirmed by a GitHub employee's published working shortcut (island94.org, January 2024) and independently by a tutorial at theporteur.com
  2. Issue creation (POST `/repos/{owner}/{repo}/issues`) is the recommended capture implementation path because it requires no base64 encoding, no filename construction, and no Markdown template assembly — only a title and optional body are needed in the JSON request body. The direct file creation path (Contents API) requires 3–4 additional Shortcuts actions including the Encode action (Base64, Line Wrap: None) and is significantly more fragile
  3. Share Sheet integration requires enabling "Show in Share Sheet" with Accepted Types: URL in the Shortcut's settings; the shared URL is received as the Shortcut's input via the Shortcut Input magic variable. A single shortcut handles both the Share Sheet path (URL provided) and the Siri/tap path (no URL) via conditional logic
  4. When a Shortcut is triggered via "Hey Siri, ", the "Ask for Input" action reads the prompt aloud and accepts voice-dictated text hands-free without any screen interaction. When triggered by tapping in the Shortcuts app, the same action shows an on-screen text input field; dictation requires tapping the microphone icon
  5. A GitHub fine-grained PAT with Issues: write scope on the target repository is the minimum credential required for the capture shortcut; Contents: write is required only if direct file creation is used instead of issue creation. Neither scope grants read access to other repositories or allows workflow triggers — the blast radius of a leaked token is minimal
  6. iOS Shortcuts has no native access to the iOS Keychain, so the PAT must be stored as a hardcoded text value in the Shortcut definition. The standard community practice is to store the token inline, keep the Shortcut private (not shared via iCloud link), and use a fine-grained PAT with minimal scope and a reasonable expiry (90–365 days)
  7. The GitHub wiki quick-access shortcut is a single "Open URLs" action pointing to `https://github.com/davidamitchell/Research/wiki/Home`; this is trivially implementable and adds Siri invocability over a plain Safari bookmark. The wiki is already published and maintained by the `publish-wiki.yml` workflow established in `2026-03-01-github-wiki-research-content.md`
  8. GitHub Actions `workflow_dispatch` is triggerable from iOS Shortcuts using the same "Get Contents of URL" pattern as issue creation, with endpoint `POST /repos/{owner}/{repo}/actions/workflows/{workflow_file}/dispatches` and JSON body `{"ref": "main", "inputs": {...}}`. This pattern is confirmed by the island94.org GitHub employee post and independently by theporteur.com

Research Question

What iOS Shortcuts workflows provide the most value for a personal research system hosted on GitHub — covering both low-friction research capture (adding a URL or idea to the backlog from anywhere on iOS) and lightweight query (checking recent research or asking a question against the corpus) — and what GitHub APIs or existing delivery channels do they depend on?

Findings

Executive Summary

iOS Shortcuts calling the GitHub Issues API via "Get Contents of URL" is the correct and simplest path for mobile research capture — three to five Shortcut actions create a labeled GitHub issue from any iOS context, including the Safari Share Sheet and Siri voice dictation. The same design handles both Share Sheet and Siri entry points by branching on whether a URL was passed as input. Authentication requires a GitHub fine-grained PAT (Issues: write scope) hardcoded in the Shortcut definition, which is the only practical on-device storage mechanism for API tokens in iOS Shortcuts. Wiki query is covered for free by a one-action "Open URLs" shortcut pointing to the published wiki Home page. A search-capable query shortcut is deferred, blocked on a workflow_dispatch-triggered search workflow that does not yet exist.

Key Findings

  1. iOS Shortcuts "Get Contents of URL" supports arbitrary HTTP methods, custom headers, and JSON request bodies, making GitHub REST API calls fully feasible from iOS without any intermediary app or service. This is confirmed by a GitHub employee's published working shortcut (island94.org, January 2024) and independently by a tutorial at theporteur.com.

  2. Issue creation (POST /repos/{owner}/{repo}/issues) is the recommended capture implementation path because it requires no base64 encoding, no filename construction, and no Markdown template assembly — only a title and optional body are needed in the JSON request body. The direct file creation path (Contents API) requires 3–4 additional Shortcuts actions including the Encode action (Base64, Line Wrap: None) and is significantly more fragile.

  3. Share Sheet integration requires enabling "Show in Share Sheet" with Accepted Types: URL in the Shortcut's settings; the shared URL is received as the Shortcut's input via the Shortcut Input magic variable. A single shortcut handles both the Share Sheet path (URL provided) and the Siri/tap path (no URL) via conditional logic.

  4. When a Shortcut is triggered via "Hey Siri, [shortcut name]", the "Ask for Input" action reads the prompt aloud and accepts voice-dictated text hands-free without any screen interaction. When triggered by tapping in the Shortcuts app, the same action shows an on-screen text input field; dictation requires tapping the microphone icon.

  5. A GitHub fine-grained PAT with Issues: write scope on the target repository is the minimum credential required for the capture shortcut; Contents: write is required only if direct file creation is used instead of issue creation. Neither scope grants read access to other repositories or allows workflow triggers — the blast radius of a leaked token is minimal.

  6. iOS Shortcuts has no native access to the iOS Keychain, so the PAT must be stored as a hardcoded text value in the Shortcut definition. The standard community practice is to store the token inline, keep the Shortcut private (not shared via iCloud link), and use a fine-grained PAT with minimal scope and a reasonable expiry (90–365 days).

  7. The GitHub wiki quick-access shortcut is a single "Open URLs" action pointing to github.com; this is trivially implementable and adds Siri invocability over a plain Safari bookmark. The wiki is already published and maintained by the publish-wiki.yml workflow established in 2026-03-01-github-wiki-research-content.md.

  8. GitHub Actions workflow_dispatch is triggerable from iOS Shortcuts using the same "Get Contents of URL" pattern as issue creation, with endpoint POST /repos/{owner}/{repo}/actions/workflows/{workflow_file}/dispatches and JSON body {"ref": "main", "inputs": {...}}. This pattern is confirmed by the island94.org GitHub employee post and independently by theporteur.com.

  9. The GitHub iOS app does not provide a native "Dispatch Workflow" Siri Shortcuts action; all workflow automation from iOS Shortcuts requires constructing the API call manually in "Get Contents of URL". This was confirmed by web search — no native Shortcuts action for workflow dispatch exists in the GitHub iOS app as of March 2026.

  10. The query shortcut using workflow_dispatch is feasible but asynchronous — the Shortcut triggers the workflow, which must run and post results (as an issue or comment) before the user can view them. For synchronous query, opening the wiki and using Safari's built-in find-in-page covers the primary use case at zero implementation cost.

Assumptions

Analysis

The primary design decision — issue creation vs. direct file creation — resolves clearly in favour of issue creation on two axes: simplicity (fewer actions, no base64 encoding, no filename construction) and integration (leverages the existing issue-to-backlog workflow, preserving the clean capture-then-structure separation validated by Zettelkasten principles in prior research). The direct file creation path is not wrong but creates a single-responsibility Shortcut that duplicates logic already present in the Python CLI and the Actions workflow, without adding value.

The query shortcut decision resolves as: wiki first (synchronous, zero-cost, good enough for most queries), workflow_dispatch second (asynchronous, requires a new search workflow, higher value for non-trivial queries). The MCP server approach (from 2026-03-02-chat-conversational-interface.md) is explicitly not applicable to iOS users — the MCP server serves AI agent sessions, not mobile browser or Shortcuts contexts.

The PAT storage constraint is a real limitation but not a blocker. The security posture (fine-grained, minimal scope, on a personal device protected by biometrics) is adequate. The absence of native Keychain support in iOS Shortcuts is a platform limitation that Apple has not addressed; the community workaround (inline storage) is the only viable option.

Risks, Gaps, and Uncertainties

Open Questions


sources


Connected items

Loading…

View full knowledge graph →