What leaves your machine.

The tool: telemetry is gone

$ cat $(python3 -c "import brain_mcp,os;\
    print(os.path.dirname(brain_mcp.__file__))")/telemetry.py

"""brain-mcp telemetry — REMOVED in 0.4.1.

Telemetry was removed entirely (and the endpoint it posted
to was retired). This module remains as a no-op shim so
existing imports keep working.
brain-mcp makes zero network calls at runtime.
"""

def is_enabled() -> bool:      return False
def track(event, props=None):  return None
def track_tool(...):           return None
def flush() -> None:           return None

That docstring is not quite true, and here is the exception. The first time brain-mcp builds its search index, DuckDB downloads its full-text-search extension (fts) from DuckDB's own extension repository and caches it under ~/.duckdb. It is a file download — nothing about you or your transcripts is sent — and it does not happen again once the extension is cached.

Apart from that one download, hooks, watchers, the spool, the floor, the manifest, the DuckDB cache and every recall tool run entirely on your machine, against files in your home directory. There is no account, no sync, no server component, and nothing to sign up for.

Prove it with one grep

Do not take that on trust — it is a claim about a codebase, and codebases change. A package that cannot make an HTTP request is a checkable property, so check it. Grep the installed package for every HTTP client Python has:

grep -rn "import httpx\|import requests\|import urllib.request\|\
import socket\|import openai\|import anthropic" \
  $(python3 -c "import brain_mcp,os;\
    print(os.path.dirname(brain_mcp.__file__))")

In 2.0.0 it returns exactly one line: recorder/machine.py imports socket to call socket.gethostname(), which reads your machine's name locally to label your floor. It opens no connection. Earlier releases did have two opt-in paths that reached the network — a summarizer that called whichever LLM provider you configured, and a dashboard route that validated a pasted OpenRouter key. Both modules were removed in the 2.0 recorder rewrite; the package is now just the ingest and recorder trees.

If that grep ever returns anything else, this page is out of date and you should trust the grep, not the page. That is the intended relationship between the two.

This website measures nothing about you.

No analytics script, no event log, no cookie, no localStorage id. Vercel, the host, sees the ordinary requests any web host sees, and that is all.

None of this touches the tool. Installing brain-mcp does not connect it to this site, and the site never receives anything about what you record or search.

In short