exobrain-harness
A self-hosted AI exobrain. Claude Code plus 50+ skills, launchd watchers, and MCP servers, pulling voice transcripts, handwritten notes, calendar, tasks, and health data into one place so I stop losing track of things.
Warning. Serious findings were identified. Review the full report before connecting. Grades reflect the full trust pyramid: code, verification depth, and reputation. New projects cap at C until adoption is earned.
How we verified
Verified is a snapshot. Live keeps it current, and builds your track record.
⚡ Connect GitHub → continuous verification on every pushwhy connect →Who stands behind it
BaesTheorem
Source: github_repo_search
Claim it to get a verified publisher badge, a free copy of our full audit findings, and direct contact for any high-priority issues we find. Or connect your repo for our deepest verification, Live Monitored: read-only, revoke anytime. What we access →
Install from
The grade above is for the source repository. Registries can serve a different version, so we mark the ones we were not able to read.
These names and descriptions are the publisher's own, read from the source code. We print them as written. Our assessment is the findings above, not this list.
get_heart_rateget_heart_rate_by_date_rangeget_food_logget_nutritionget_nutrition_by_date_rangeget_temp_skin_by_date_rangeGet nightly skin temperature variation (relative to a personal baseline, in °C) from Fitbit for a date range. Returns one entry per night where data was recorded. Useful for illness early-detection — illness elevates nightly skin temp +0.2°C / +0.4°F or more, while stress/anxiety does not. Requires …
get_breathing_rate_by_date_rangeGet nightly average breathing rate (breaths per minute, full sleep + by sleep stage) from Fitbit for a date range. Useful as an illness confirmer — respiratory illness elevates breathing rate. Requires 'startDate' and 'endDate' (YYYY-MM-DD). Max range 30 days.
get_hrv_by_date_rangeGet nightly heart rate variability (HRV) from Fitbit for a date range. Both stress and illness lower HRV, so this is best used alongside skin temp / RHR / breathing rate for triangulation. Requires 'startDate' and 'endDate' (YYYY-MM-DD). Max range 30 days.
get_spo2_by_date_rangeGet nightly average SpO2 (blood oxygen saturation, %) from Fitbit for a date range. Drops during respiratory illness and sleep apnea. Requires 'startDate' and 'endDate' (YYYY-MM-DD). Max range 30 days.
search_311_requestsSearch Kansas City 311 service requests (March 2021 - present).
get_311_requestLook up a 311 request by its case number (the number given when a request is filed, e.g. from the myKCMO app) or by work-order number. Returns the full record(s) including status, dates, and department.
get_311_requestsLook up several 311 requests at once by case or work-order number. Returns a map of the number you asked for to its record(s); a number with no match maps to an empty list (usually means it is newer than the feed's 2-7 day lag).
nearby_311_requestsList 311 requests near a point (defaults to MYKCMO_HOME_LAT/LON env vars if coordinates are omitted). radius_m is meters. Useful for "what's reported near me / near this address" once you have coordinates.
kc_311_statsAggregate counts of 311 requests. group_by is one of: issue_type, issue_sub_type, current_status, department_work_group, council_district, report_source, source_category. Dates are YYYY-MM-DD.
list_311_issue_typesList the distinct issue types and sub-types used since a date (YYYY-MM-DD), with counts. Use this to find the right issue_type filter value before searching.
report_issue_infoHow to actually file a new 311 request with Kansas City, MO. Filing is not automatable (the web form is captcha-gated on purpose); this returns the official channels and deep links to hand to the user.
list_report_categoriesList the report types Kansas City accepts (pothole, illegal dumping, streetlights, etc.). Pass one of these to get_report_subtypes and prepare_311_report.
get_report_subtypesFor a report type (label like "A Pothole" or a raw "10871_x" value), return its sub-types, the template kind, whether a location/description is required, and any disclaimer text. Only "Standard" template types can be auto-filed here; custom "form_type" types need the app/web form.
prepare_311_reportStage a real 311 request and fetch its captcha for MIST to read.
submit_311_reportFile the report staged by prepare_311_report. This creates a REAL 311 case with Kansas City. Requires confirm=True (get Alex's OK first) and the captcha_answer MIST read from the prepared captcha image.
FITBIT_CLIENT_IDFITBIT_CLIENT_SECRETMYKCMO_SOCRATA_APP_TOKENMYKCMO_HOME_LATMYKCMO_HOME_LONMYKCMO_CONTACT_FIRSTMYKCMO_CONTACT_LASTMYKCMO_CONTACT_EMAILMYKCMO_CONTACT_PHONEAGENT_MODELVOICE_PINPUBLIC_WS_URLTTS_PROVIDERTTS_VOICEMY_PHONE_NUMBERALLOWED_CALLERSGOOGLE_OAUTH_CREDENTIALSGOOGLE_CALENDAR_MCP_TOKEN_PATHMIST_TTS_URLMIST_STT_URLAPPSHELL_TITLEAPPSHELL_URLAPPSHELL_HEALTHAPPSHELL_LABELAPPSHELL_PLISTAPPSHELL_LOGAPPSHELL_WAPPSHELL_HAPPSHELL_ICONEXOBRAIN_HARNESS_DIRBACKUP_STAGING_DIRBACKUP_DRIVE_FOLDER_NAMEGOOGLE_OAUTH_CLIENT_IDGOOGLE_OAUTH_CLIENT_SECRETBACKUP_SYNC_TIMEOUT_MINKEEP_DAILYKEEP_WEEKLYKEEP_MONTHLYVOR_BIAS_STRENGTHIMESSAGE_DBDEVELOPER_DIRMEMWD_CHECK_SECSMEMWD_WARN_GBMEMWD_KILL_GBMEMWD_EMERGENCY_GBMEMWD_SWAP_WARN_GBMEMWD_SUSTAINEDMEMWD_TOP_NMEMWD_WARN_THROTTLEMEMWD_AUTO_KILLMEMWD_EXPENDABLE_KILL_GBMEMWD_EXPENDABLEMEMWD_LOG_MAXMIST_MUSIC_SPACEHF_TOKENHUGGINGFACE_TOKENTWILIO_ACCOUNT_SIDTWILIO_AUTH_TOKENTWILIO_FROM_NUMBERUINTERACT_USERNAMEUINTERACT_PASSWORDAMI_PLAY_PASSWORDAMI_PLAY_SESSIONIG_DEBUGKCURBEX_CALENDAR_IDMEETUP_COOKIEMIST_PORTPHONE_STT_MODELTool annotations
No tools have read-only/destructive annotations
Add readOnlyHint or destructiveHint annotations to every tool so hosts can warn users before invoking.
All four hints declared on every tool
20/20 tools missing one or more hints — get_heart_rate (missing: readOnlyHint, destructiveHint, idempotentHint, openWorldHint); get_heart_rate_by_date_range (missing: readOnlyHint, destructiveHint, idempotentHint, openWorldHint); get_food_log (missing: readOnlyHint, destructiveHint, idempotentHint, openWorldHint), +17 more. OpenAI's directory rejects tools where any of the four hints are missing or non-boolean.
For every tool, set all four hints (readOnlyHint, destructiveHint, idempotentHint, openWorldHint) to explicit true/false values that match the handler’s actual behaviour.
Tool inputs are validated
16/20 tool handlers declare input schemas (80%)
Declare an inputSchema with zod/joi/yup on every tool definition.
Tool test coverage
Only 5/20 tools referenced in tests (25%)
Write tests that reference each tool by name so every tool has at least one test.
No access to sensitive paths
Reads sensitive paths: ~/.claude/channels/discord/.env
Remove reads of sensitive system paths. If you genuinely need them, document why in the README.
Secrets not logged
2 secret values sent to print
Redact or omit secret values from log output.
Claim the listing to review these findings one by one and send us a correction where you disagree, straight to the team. Claiming also means we tell you when the grade moves, and reach you first if we find anything urgent.
[](https://m8ven.ai/mcp/baestheorem/exobrain-harness)?variant=verified from the URL.Vetting this one by hand? Tool Check is an MCP that scores other MCPs. Add it once and ask Claude, ChatGPT, or any MCP client to grade a server, surface CVEs, check the publisher, and suggest safer alternatives — before you install.
https://m8ven.ai/api/mcp/tool-check