
Security News
Anthropic Identifies Biased Reasoning and Recklessness as Drivers of Claude’s PyPI Attack
Anthropic found biased reasoning and recklessness drove Claude Mythos 5 to publish malware on PyPI and compromise a security vendor.
@datasynx/agentic-crm
Advanced tools
The CRM your AI agents actually run — local-first, MCP-native, one autonomous agent per customer. 82 MCP tools for Claude Code, Codex & Cursor.
dxcrmLocal-first. MCP-native. One autonomous agent per customer. Your pipeline lives as plain Markdown on your machine — and your AI agents read, reason about, and update it natively inside Claude Code, Codex, and Cursor.
Quickstart · Docs · npm · GitHub · LinkedIn
You don't open a CRM to find your customer. Your customer's agent finds you — briefed, current, and ready to act.
Your AI agents are brilliant — and forgetful. Datasynx Agentic CRM is the long-term memory and the hands they use to run your customer relationships. Every customer is a folder of human-readable Markdown on your own disk; 82 purpose-built Model Context Protocol tools let any agent load full context, score deals, forecast revenue, draft the follow-up, and log what happened — without you copy-pasting a thing.
No database. No cloud lock-in. No per-seat pricing. Zero telemetry.
You ▸ What's going on with Acme Corp?
Agent ▸ ⟢ get_customer_context · get_deal_health · get_relationship_health
Acme Corp — Negotiation · €75,000 · deal health B (78/100)
• Last touch 2 days ago — pricing pushback from the CFO
• Champion: VP Engineering (warm) ⚠ Economic buyer quiet for 11 days
• Next best action: send the ROI one-pager, loop the VP Eng into the thread
You ▸ Draft that follow-up and log it.
Agent ▸ ⟢ draft_email · log_interaction
✓ Draft ready (personalized from your "ROI follow-up" template)
✓ Logged to customers/acme-corp/interactions.md
Every answer is grounded in Markdown files you own and can open in any editor. Nothing is hidden in a vendor database.
flowchart LR
You["🧑 You"] --> Agent
Agent["🤖 Claude Code · Codex · Cursor"] <-->|Model Context Protocol| MCP
subgraph local["🔒 Your machine"]
MCP["⚙️ dxcrm MCP server<br/>82 typed tools · RBAC · audit"]
Files["📁 customers/<name>/<br/>main_facts · interactions · pipeline"]
MCP <--> Files
end
MCP -. you configure .-> Ext["✉️ Gmail · Outlook · Drive · Meet"]
| Step | What happens | |
|---|---|---|
| 01 | dxcrm init | Detects & wires up Claude Code, Codex, Cursor, Claude Desktop — one command. Seeds starter email templates & a sequence so outreach works on day one. Reconciles an older vault's shape version (re-stamps .agentic/config.json / schema.json / sources.json to the current version; never downgrades a newer one). All harness/skill markdown (CLAUDE.md, AGENTS.md, GEMINI.md, SOUL.md, SKILL.md, TOOLS.md, Cursor .mdc) is written inside a delimited managed block, refreshed in place on re-init and never clobbering your own content. |
| 02 | Bring your data | dxcrm create, import from HubSpot/Salesforce/Pipedrive/CSV, or sync Gmail. |
| 03 | Just ask | Your agent briefs you, drafts emails, forecasts, and logs — grounded in your files. |
Works with · 🟣 Claude Code · 🟢 Codex · 🔵 Cursor · 🟠 Claude Desktop · 🔌 any MCP client
If it speaks the Model Context Protocol, it's connected.
📁 Markdown-native dataEvery customer is a folder ofmain_facts, interactions, and pipeline files. Git-friendly, grep-able, yours forever.
|
🔌 82 MCP toolsTyped tools for context, deals, comms, and intelligence — discoverable by agents viaget_capabilities.
|
🧠 Deal & relationship IQDeal-health grades, relationship graphs, champion/blocker maps, and next-best-action recommendations. |
📈 Revenue forecastingWeighted pipeline plus a Monte Carlo simulation (P10/P50/P90) and at-risk-revenue analysis. |
✉️ Comms that closeEmail templates, multi-step sequences, HTML quotes, tickets with SLAs, and NPS/CSAT surveys. Outbound quotes, drafts, NPS/CSAT surveys, and sequence fills are locale-aware — they follow the customer's language, auto-detected from inbound email. |
🔎 Hybrid memoryVector + full-text search across every synced email, call transcript, and email attachment — PDFs, Office docs and images converted to Markdown and indexed on-device (LanceDB). |
🔐 Enterprise controlsRole-based access, an append-only audit trail, and an AES-256-GCM credential vault. |
🛡️ Privacy by designLocal-first storage, one-command GDPR erasure, and zero telemetry. |
🤖 Wake-triggered agentsAn agent per customer pings you (Telegram) the moment a relevant email lands. |
💬 Omnichannel inboxTwo-way embeddable web chat and WhatsApp Cloud API in one thread-based inbox — rate-limited, honeypot-protected, escalates to tickets. |
📅 Scheduler & portalA native booking page with real free/busy slots and a customer self-service portal — no Calendly, no extra tools. |
🩺 Live-readiness checksdxcrm doctor --integrations --live verifies every provider (Graph, Google, WhatsApp, Stripe, …) with a concrete fix hint per gap — including a calendar-freebusy line that flags when booking availability is the local-first all-free fallback (no calendar wired) rather than verified free/busy.
|
| Without | With |
|---|---|
| ❌ You paste account context into every prompt — and still miss things. | ✅ One MCP call loads the full, current briefing. The agent already knows the account. |
| ❌ Per-seat SaaS; your customer data lives in someone else's cloud. | ✅ Free & open source (MIT). Data is plain Markdown on your machine. |
| ❌ Switch to a separate CRM UI to update a deal. | ✅ Your agent updates the pipeline in place, from inside Claude Code / Codex / Cursor. |
| ❌ "What exactly did we promise Acme in March?" | ✅ Hybrid search over every synced email and transcript answers in seconds. |
| ❌ Forecasting means wrangling a spreadsheet. | ✅ Weighted + Monte Carlo forecast on demand, with at-risk revenue flagged. |
| ❌ A security/GDPR review triggers a fire drill. | ✅ dxcrm security-report, built-in GDPR erasure, RBAC, and audit logging out of the box. |
| Local-first by default. | Customers are Markdown folders on your disk. No database to run, no cloud to trust. |
| MCP-native, not bolted-on. | Agents call typed tools — not a scraped UI — with RBAC and an audit trail on every write. |
| Grounded answers. | Every response traces back to files you can open and verify. No hallucinated pipeline. |
| Hybrid recall. | Vector + full-text search over your synced inbox and call transcripts, fully on-device. |
| Zero telemetry. | The CLI and MCP server phone home to nothing. The only outbound calls are integrations you explicitly enable. |
| Crash- and concurrency-safe writes. | Every durable write goes through an in-process queue → a cross-process advisory lock → an atomic temp-file rename, so concurrent processes (daemon, CLI, and agents) never lose an interaction (see docs/deployment.md). |
| Yours to extend. | MIT-licensed TypeScript. Fork it, add a tool, ship it. |
dxcrm is a CLI and an MCP server. One install gives your agents a complete revenue toolkit:
┌──────────────────────────────────────────────────────────────────┐
│ dxcrm MCP server · 82 tools │
│ │
│ ┌────────────┐ ┌────────────┐ ┌────────────┐ ┌────────────────┐ │
│ │ Customer │ │ Pipeline │ │Relationship│ │ Forecasting │ │
│ │ Context │ │ & Deals │ │ Graph │ │ (Monte Carlo) │ │
│ └────────────┘ └────────────┘ └────────────┘ └────────────────┘ │
│ ┌────────────┐ ┌────────────┐ ┌────────────┐ ┌────────────────┐ │
│ │ Email · Seq│ │ Quotes · │ │ Tickets · │ │ Knowledge Base │ │
│ │ · Drafts │ │ Booking │ │ Surveys │ │ & Playbooks │ │
│ └────────────┘ └────────────┘ └────────────┘ └────────────────┘ │
│ ┌────────────┐ ┌────────────┐ ┌────────────┐ ┌────────────────┐ │
│ │ RBAC · │ │ GDPR · │ │ Encrypted │ │ Goals · Agents │ │
│ │ Audit │ │ Erasure │ │ Vault │ │ · Approvals │ │
│ └────────────┘ └────────────┘ └────────────┘ └────────────────┘ │
└──────────────────────────────────────────────────────────────────┘
▲ ▲ ▲ ▲
┌─────┴─────┐ ┌──────┴─────┐ ┌──────┴─────┐ ┌──────┴──────┐
│ Claude │ │ Codex │ │ Cursor │ │ HTTP / team │
│ Code │ │ │ │ │ │ server │
└───────────┘ └────────────┘ └────────────┘ └─────────────┘
Sync in: Gmail · Outlook · Google Drive · Teams · Google Meet
Import: HubSpot · Salesforce · Pipedrive · CSV
→ Full reference: 71 CLI commands · 82 MCP tools
Every dxcrm command returns 1 on a missing prerequisite (no credentials) or
missing target (unknown account/secret), so scripts can branch on $? — see
Exit codes.
Requirements: Node.js ≥ 20. Free and self-hosted — no account required.
npm install -g @datasynx/agentic-crm
dxcrm init # detect & configure Claude Code, Codex, Cursor, ...
dxcrm create "Acme Corp" --domain acme.com # create your first customer
dxcrm contact add ceo@acme.com --name "Jane Roe" --slug acme-corp --primary # set the primary contact
Team mode: point every detected harness at a shared HTTP MCP server instead of a local stdio process:
dxcrm init --team http://vm-ip:3847/mcp # writes an http transport to each harness config
The URL is validated up front and each harness gets its native HTTP transport shape (Claude
Code / Cursor / Windsurf / Cline / Claude Desktop: { "type": "http", "url": ... }; Codex:
transport = "streamable_http"; Hermes: type: http; OpenClaw: transport: "streamable-http";
Antigravity: serverUrl; Grok: transport: { type: "http", url }). See
docs/team-setup.md.
Run with Docker (self-hosted): the official image bakes in the CPU-only, slim setup and pre-warms the embedding model — zero footprint knowledge required:
docker run -d -p 3847:3847 -v "$PWD/crm-data:/data" \
-e ANTHROPIC_API_KEY=sk-ant-... \
ghcr.io/datasynx/datasynx-crm:latest # MCP HTTP server on http://localhost:3847/mcp
See docs/deployment.md.
Now open your AI agent and ask: "What's the status on Acme Corp?" — you'll get a grounded, current brief in seconds.
Migrating? Bring your existing data with you:
dxcrm import ./hubspot-export/ --from hubspot # also: salesforce · pipedrive · csv
dxcrm sync acme-corp # pull Gmail threads + transcripts
Syncing Gmail also downloads every attachment, converts it to Markdown
(PDF, DOCX, XLSX, PPTX, CSV, HTML, and images via on-device OCR), stores it under
customers/<slug>/attachments/, links it from interactions.md, and indexes the
text into LanceDB so it's semantically searchable. Export a complete, sendable
bundle of all conversations and documents for a customer with the
export_customer MCP tool (includeAttachmentContent: true).
Beyond Gmail, dxcrm mailbox sync connects any IMAP mailbox — Outlook/Office365,
Fastmail, Yahoo, or a custom company inbox — and auto-routes every message to the
right customer by sender/recipient domain (or to one customer with a slug). One
mailbox connection, all customers populated, same attachment + search pipeline.
# One-time OAuth (Gmail & Microsoft 365 require it for IMAP in 2026):
dxcrm mailbox login gmail --user you@gmail.com
dxcrm mailbox login microsoft --user you@org.com
# Then auto-route the whole mailbox to customers by domain:
dxcrm mailbox sync --account gmail:you@gmail.com
Tokens are stored locally and auto-refreshed. A password-based IMAP server works too
(DXCRM_IMAP_HOST / DXCRM_IMAP_USER / DXCRM_IMAP_PASS).
API keys, portal passwords and access tokens should never be pasted into a prompt, where they'd flow through the LLM. Instead, your agent hands you a link to a local, browser-based credential vault:
You ▸ I need to connect our Stripe account.
Agent ▸ ⟢ get_vault_link
→ http://localhost:3847/vault?t=… (expires in 15 min)
Open it and paste your key there — it's encrypted locally; I never see it.
You enter the value in the browser; it's encrypted with AES-256-GCM straight into
.agentic/vault.enc on your machine and is retrievable from there — the secret never
passes through the AI. The link is served by the HTTP MCP server, gated by a
short-lived token, and the master key (DXCRM_VAULT_KEY) lives only in the server's
environment.
Secure by default: even though the team MCP server binds 0.0.0.0, the /vault
routes are reachable from localhost only — a leaked link can't be used from another
machine. Put it behind a trusted reverse proxy with DXCRM_VAULT_GUI_ALLOW_REMOTE=1.
dxcrm server start # serves the vault GUI at /vault
export DXCRM_VAULT_KEY=… # master key (server env only)
dxcrm vault link # mint a browser link from the terminal
# or, headless / scriptable:
dxcrm vault set stripe_api_key sk_live_… · dxcrm vault list · dxcrm vault get stripe_api_key
Agents reach this via the get_vault_link MCP tool. They get a link to hand you —
never the secret itself.
The daemon takes a daily snapshot of your whole pipeline, so dxcrm can answer
the questions no spreadsheet-CRM gets right — and exposes each as both a CLI command
and an MCP tool, so a human at the terminal and an AI agent get identical insight.
dxcrm pipeline changes # what moved since last week? (won/lost/new/stage-moves/value)
dxcrm pipeline velocity # where do deals get stuck? (stage dwell time, sales cycle, stalled deals)
dxcrm pipeline funnel # where do deals leak? (stage conversion %, win rate, biggest leak)
changes diffs the live pipeline against any past date — won, lost, new and
removed deals, stage moves, value changes, and net open-value delta.velocity reconstructs each deal's journey to report average time-in-stage,
the average sales cycle (first-seen → won), and which open deals are rotting.funnel builds a cumulative conversion funnel: how many deals reach each
stage, stage-to-stage conversion, overall win rate, and the biggest leak.Agents reach the same data via the get_pipeline_changes, get_pipeline_velocity,
and get_pipeline_funnel MCP tools. No setup — it gets sharper every day the daemon runs.
| Not another SaaS tab. | It lives inside your AI agent and your filesystem — not a browser dashboard you have to open. |
| Not a database. | Customers are Markdown folders. Back them up with cp, version them with git. |
| Not a chatbot wrapper. | 82 typed MCP tools with RBAC and audit — not a single prompt pretending to be a product. |
| Not a data grab. | Zero telemetry. Your data never leaves your machine unless you wire up an integration. |
| Not lock-in. | MIT-licensed, plain files, export anytime. Leaving is a cp -r away. |
Run dxcrm solo, or stand up a shared MCP server for the whole revenue org:
dxcrm server exposes the same tools to every teammate's agent.DXCRM_ACTOR env var (and with no rbac.json or a system actor, RBAC is open access). Use the HTTP transport for any multi-user or networked deployment — see Deployment → Security Notes.admin / manager / rep roles scope what each actor (and their agent) can read and write. A field_acl map in rbac.json additionally redacts restricted customer metadata fields per role on every context path (tool, resource, daemon notification). A static guard (__tests__/core/rbac-invariant.test.ts) asserts every gated tool's permission string exists in the allow-list, so a tool can never be silently locked out for all actors. RBAC is enforced at MCP dispatch, before input validation, so a denied caller always receives Access denied (never a schema-validation error that could leak a tool's enum values or required fields).dxcrm security-report for vendor reviews.→ See the Deployment and Team Setup guides.
Where does my data live? In a folder you choose, as Markdown files. No database, no cloud. Back it up and version it like code.
Which AI tools work with it?
Anything that speaks MCP — Claude Code, Codex, Cursor, Claude Desktop, and more. dxcrm init auto-configures the ones it detects.
Is it really free? Yes. MIT-licensed and self-hosted. No seats, no metering.
Can a whole team use it? Yes — run the shared HTTP MCP server with RBAC and SSO. See Team Setup.
Can I migrate from HubSpot / Salesforce / Pipedrive?
Yes — dxcrm import brings in contacts and activity history. CSV is supported too.
Does it send my data anywhere? No telemetry, ever. The only outbound calls are the integrations you explicitly configure (e.g. Gmail) and the LLM your agent already uses.
📖 Full docs site: datasynx.github.io/datasynx-crm
git clone https://github.com/datasynx/datasynx-crm
cd datasynx-crm
npm ci
npm test # Vitest (TDD) — 3,700+ tests
npm run build # tsdown → dist/
npm run typecheck # strict TypeScript
npm run lint # ESLint (zero warnings)
npm run docs:generate # regenerate the CLI/MCP reference from code
npm run docs:check # verify all relative doc links & anchors resolve
New contributors: start with CONTRIBUTING.md (TDD workflow, Conventional Commits, docs generation). The published reference is generated from code and guarded by a drift test, so the docs can never fall behind what ships.
→ Full roadmap with milestones and exit criteria: ROADMAP.md
Shipped
✅ 82 MCP tools · 71 CLI commands · local-first Markdown store
✅ Hybrid (vector + full-text) search over emails & transcripts
✅ Sync: Gmail, Outlook, Google Drive, Teams, Google Meet
✅ Import: HubSpot, Salesforce, Pipedrive, CSV
✅ Deal health, relationship graph/health, Monte Carlo forecasting
✅ Email templates & sequences, quotes, tickets (SLA), NPS/CSAT, knowledge base
✅ RBAC, append-only audit, AES-256-GCM vault, GDPR erasure (restore is GDPR-aware — it won't resurrect an erased customer; --allow-erased overrides, audited)
✅ Shared HTTP MCP server, SSO (WorkOS), outbound webhooks
✅ Wake-triggered per-customer agents (Telegram)
✅ Customer self-service portal, native meeting scheduler
✅ Omnichannel inbox: embeddable two-way web chat + WhatsApp Cloud API (rate-limited, honeypot-protected endpoints)
✅ Teams/Meet transcript auto-discovery & routing
✅ Live transcript subscriptions (dxcrm transcripts subscribe teams|meet)
✅ Per-provider readiness checks: dxcrm doctor --integrations [--live]
Hardening (current focus)
Exploring
MIT © 2026 Datasynx
FAQs
The CRM your AI agents actually run — local-first, MCP-native, one autonomous agent per customer. 111 MCP tools for Claude Code, Codex & Cursor.
The npm package @datasynx/agentic-crm receives a total of 0 weekly downloads. As such, @datasynx/agentic-crm popularity was classified as not popular.
We found that @datasynx/agentic-crm demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.

Security News
Anthropic found biased reasoning and recklessness drove Claude Mythos 5 to publish malware on PyPI and compromise a security vendor.

Research
/Security News
Malicious Chrome and Firefox extensions target Axiom Trade and Padre users, stealing session tokens and wallet data.

Security News
GPT-6 Astra hits 100% on ExploitBench and finds zero-days autonomously, while independent tests reveal scope violations and monitoring gaps.