mdfind Search (macOS Spotlight CLI)

macOS Spotlight maintains a constantly-updated index of all files. mdfind is the CLI interface to this index - blazing fast with zero setup, no RAG, no external tools.

When to use mdfind vs other tools

Basic usage

Content search (full-text)

# Search current directory for content
mdfind -onlyin . "stakeholder feedback"

# Search specific path
mdfind -onlyin /path/to/project "authentication error"

# Search entire machine (omit -onlyin)
mdfind "quarterly report 2025"

Filename search

# Find by filename pattern
mdfind -onlyin . "kMDItemFSName == '*charles*.md'"

# Case-insensitive filename
mdfind -onlyin . "kMDItemFSName == '*README*'c"

Metadata queries

# Files modified in last 7 days
mdfind -onlyin . "kMDItemContentModificationDate > \$time.today(-7)"

# Files created today
mdfind -onlyin . "kMDItemContentCreationDate > \$time.today"

# Large files (> 10MB)
mdfind -onlyin . "kMDItemFSSize > 10000000"

# By file type
mdfind -onlyin . "kMDItemContentType == 'net.daringfireball.markdown'"
mdfind -onlyin . "kMDItemContentType == 'public.python-script'"
mdfind -onlyin . "kMDItemKind == 'PDF Document'"

Combining queries

Content + metadata

# Markdown files containing "stakeholder"
mdfind -onlyin . "kMDItemContentType == 'net.daringfireball.markdown' && stakeholder"

# Recent TypeScript files with "auth"
mdfind -onlyin . "kMDItemContentType == 'public.source-code' && kMDItemFSName == '*.ts' && auth"

# PDFs modified this week
mdfind -onlyin . "kMDItemKind == 'PDF Document' && kMDItemContentModificationDate > \$time.today(-7)"

Boolean operators

# OR conditions
mdfind -onlyin . "authentication || authorization"

# AND conditions (implicit with &&)
mdfind -onlyin . "user && login && error"

# Exclusion (use grep post-filter)
mdfind -onlyin . "config" | grep -v node_modules

Common metadata attributes

Time expressions

$time.now              # Current time
$time.today            # Start of today
$time.today(-1)        # Yesterday
$time.today(-7)        # 7 days ago
$time.this_week        # Start of this week
$time.this_month       # Start of this month
$time.this_year        # Start of this year
$time.iso(2025-01-15)  # Specific date

Useful flags

Practical patterns

Find files to read

# Find all meeting notes from January
mdfind -onlyin . "kMDItemFSName == '*meeting*' && kMDItemContentModificationDate > \$time.iso(2025-01-01) && kMDItemContentModificationDate < \$time.iso(2025-02-01)"

Find recent work

# What did I work on today?
mdfind -onlyin . "kMDItemContentModificationDate > \$time.today"

# What got modified in last hour?
mdfind -onlyin . "kMDItemContentModificationDate > \$time.now(-3600)"

Find by content type

# All Python files mentioning "async"
mdfind -onlyin . "kMDItemContentType == 'public.python-script' && async"

# All images
mdfind -onlyin . "kMDItemContentTypeTree == 'public.image'"

Combine with other tools

# Find files then read them
mdfind -onlyin . "quarterly report" | head -5 | xargs -I {} echo "File: {}"

# Count matches
mdfind -onlyin . -count "TODO"

# Live monitoring for new matches
mdfind -onlyin . -live "error log"

Troubleshooting

Index not up to date?

# Force reindex of a directory
mdimport /path/to/directory

# Check indexing status
mdutil -s /

Query not working?

# List available attributes for a file
mdls /path/to/file.md

# Test query syntax
mdfind -onlyin . "kMDItemFSName == '*.md'" 2>&1 | head

Integration with workflow

When searching this repository:

1. First pass: Use mdfind -onlyin . "search terms" for broad discovery
2. Refine: Use Grep for regex precision with line numbers
3. Read: Use Read tool for specific file content

mdfind is especially valuable for:

• "What files mention X?" queries
• Finding files by fuzzy/natural language
• Metadata-based searches (recent, by type, by size)
• When you don't know exact filenames or patterns