Zero public ports
The host listens only on a private mesh network (Tailscale). No DDNS, no cloud, no port-forwarding.
Carabase Host
A privacy-first personal AI assistant that runs entirely on your hardware.
Why Carabase
Section titled “Why Carabase”Your data, your hardware
Postgres + pgvector + AES-256-GCM at rest. Every credential, every embedding, every conversation lives on a machine you own.
Single-tenant by design
One workspace per host. No centralized gateway, no shared infrastructure, no per-user billing.
Bring your own runtime
v0.1 ships OpenClaw. Claude and Codex providers ship in v0.2 — same MCP tool surface either way.
Where to start
Section titled “Where to start”- Quickstart —
git cloneto running host in 3 commands - First-run setup — what the in-app wizard walks you through
- Architecture — Client / Host / Gateway, in one diagram
- Threat model — what we defend against (and what we don’t)
Status
Section titled “Status”Carabase Host is in v0.1 as of 2026. Public alpha. The desktop client lives in a separate repo and connects over Tailscale. See the roadmap for what’s coming.