Skip to content

Carabase Host

The engine that remembers last Tuesday. A personal context engine. Self-hosted. Yours.

Zero public ports

The host listens only on a private mesh network (Tailscale). No DDNS, no cloud, no port-forwarding.

Your data, your hardware

Postgres + pgvector + AES-256-GCM at rest. Every credential, every embedding, every conversation lives on a machine you own.

Single-tenant by design

One workspace per host. No centralized gateway, no shared infrastructure, no per-user billing.

Bring your own runtime

Chat runs through a pluggable engine seam: OpenClaw (the premium default), a host-native OSS engine, and read-only Claude Code / Codex CLI bridges — same MCP tool surface either way.

Multi-engine chat

One chat contract (POST /api/v1/agent/message) resolves to whichever engine you’ve configured: OpenClaw, a host-native AI-SDK loop that runs against your own model, or the codex_cli / claude_code bridges that drive your local CLI login (read-only).

14 retrieval tools

The host exposes a single MCP surface — semantic, graph, lexical, visual, multimodal, time-series, and more — served at /mcp and reachable by any tailnet AI client (Claude Desktop, Cursor, Codex).

Folios: your memory, organized

Folios are the unified substrate — plain collections plus synthesized taste / domain / project narratives the engine builds and refreshes from your data.

Knowledge graph + connectors

Connectors (GitHub, Google, Strava, Beeper, Apple Notes/Files/Photos, and more) feed an entity/edge knowledge graph with provenance and a daily-note timeline.

  • Quickstart — from your Carabase Host directory to a running host in 3 commands
  • First-run setup — what the in-app wizard walks you through
  • Architecture — Client / Host / runtimes, in one diagram
  • Threat model — what we defend against (and what we don’t)

Carabase Host is in public alpha as of 2026. The desktop and iOS clients are separate applications that connect over Tailscale. The host is a Fastify + PostgreSQL service you run yourself — no cloud account, no public ports.