
Security News
Ruby's Bundler 4.0.18 Extends Cooldown to bundle lock and bundle cache
The supply chain control that delays freshly published gems now covers lockfile generation and gem vendoring in Ruby projects.
Private local memory for your AI. Gives Claude, Cursor, and ChatGPT context about your workday — no cloud required.
Private local memory for any AI assistant.
Give Claude, Cursor, ChatGPT, OpenCode, and any MCP client persistent context about your workday — without sending your data anywhere.
AI assistants know everything about the internet. They know nothing about you. You spend 30 seconds re-telling Claude what you've been working on — every conversation, every day.
DayBrain runs on your machine as a background process. It watches what you work on, stores it in a local SQLite database, extracts useful insights, and exposes everything through the Model Context Protocol (MCP). Any AI tool that speaks MCP can query it.
No cloud. No accounts. No new chat app.
npx daybrain
┌──────────────┐ ┌────────────────┐ ┌──────────────────┐
│ Activity │────▶│ │────▶│ Any MCP client │
│ sources │ │ DayBrain │ │ Claude, Cursor, │
│ │ │ │ │ OpenCode, etc. │
├──────────────┤ ├────────────────┤ └──────────────────┘
│ CGWindow API │ │ SQLite DB │
│ Chrome ext. │ │ Insight engine│ ┌──────────────────┐
│ ActivityWatch│ │ Scheduler │────▶│ Telegram/Slack │
│ Screenpipe │ │ MCP server │ │ (push insights) │
└──────────────┘ └────────────────┘ └──────────────────┘
~/.daybrain/data/daybrain.db, nothing leaves your deviceThe full list of tools any AI client can call:
| Tool | Description | Required params |
|---|---|---|
get_activity_summary | Today's activity breakdown with top apps and total time | period (today/week/month) |
get_raw_events | Recent window/browser events with timestamps | limit |
get_insights | Detected commitments, patterns, and anomalies | limit, min_confidence |
get_daily_summary | Aggregated stats for a specific date | date (YYYY-MM-DD) |
get_baseline | Current vs historical averages, flags anomalies | — |
get_context | Full workday context for injection into AI chat | period, include_raw |
create_linear_task | Create a Linear issue from a detected commitment | title, description? |
create_github_issue | Create a GitHub issue from a detected commitment | title, body?, repo |
search_activity | Full-text search across window titles | query, limit |
get_project_context | Activity grouped by detected project keywords | keywords |
get_server_status | Health check + data directory info | — |
npx daybrain # start server (MCP + HTTP on :19840)
{
"mcpServers": {
"daybrain": {
"command": "npx",
"args": ["-y", "daybrain"]
}
}
}
Then ask: "What did I work on today?"
chrome://extensions → enable Developer mode/extension folder| Source | Platform | What it captures | Setup |
|---|---|---|---|
| CGWindow API | macOS | Active window titles and app names | Zero — built in |
| Chrome extension | All | Browsing activity, URLs, page titles | Load unpacked |
| ActivityWatch | All | Apps, window titles, AFK detection | Install aw-watcher-afk + aw-watcher-window |
| Screenpipe (optional) | macOS/Linux | Screen OCR + audio transcription | Install Screenpipe, set SCREENPIPE_ENABLED=true |
| Pattern | Example match | Confidence |
|---|---|---|
| Commitments | "I will send the report by Friday" | 80-90% |
| Deadlines | "due by EOD", "needs to ship tomorrow" | 75% |
| Follow-ups | "let me follow up on that", "I'll check" | 70% |
| Promises | "I promise to fix", "I will deploy" | 85% |
| Avoidance | Frequent brief visits to social/distraction apps | 70% |
| Context switches | 87 app switches in one hour | 75% |
| Focus blocks | 30+ consecutive minutes in one app | 80% |
npm test
21 passed, 0 failed
Covers: config loading, database CRUD, deduplication, insight engine (commitments, avoidance, app categorization, project detection, focus blocks, summarization, empty-input safety, large-input performance), scheduler overlap guard, security (config permissions 0600, path traversal blocked, immutable config clones), error handler registration.
better-sqlite3 (synchronous, no network)@modelcontextprotocol/sdkpyobjctsx test.ts)MIT
FAQs
Private local memory for your AI. Gives Claude, Cursor, and ChatGPT context about your workday — no cloud required.
We found that daybrain demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
The supply chain control that delays freshly published gems now covers lockfile generation and gem vendoring in Ruby projects.

Security News
During a UK cyber test, a Mythos 5 agent used sockpuppets, social engineering, and prompt injection to try to get a maintainer to merge malware.

Company News
Socket is now in the AWS Security Hub Extended plan. Adopt it through AWS, apply committed spend, and block malicious open source packages.