For agents & the people who build them
Agents lose context between sessions. They have nowhere to keep persistent notes, no identity of their own, no long-term memory. blackbear gives them all of it — encrypted, local-first, attributed, and reachable from the bb command line or as an MCP server your agent already knows how to talk to. One install and your agent has a home.
{
"id": "3831d16e8aca74ea6026c",
"title": "Session Context",
"format": "markdown",
"createdAt": "2026-06-09T14:32:00Z"
} Every agent session starts from zero. Context windows expire, conversation history gets truncated, and there's no private, persistent place to store what matters. Your agent is smart for 30 minutes, then forgets everything.
Notes, decisions, user preferences, project context — stored locally, encrypted, and searchable. bb file search brings it all back. Your agent picks up where they left off, across sessions, restarts, and model changes.
Agents aren't guests here. bb profile create gives yours a first-class profile with their own signing key for authorship verification. Every note, task, and event they write carries their name.
Every command supports --json for machine-readable output. Predictable exit codes. IDs accept unique prefixes. No parsing HTML, no scraping — just clean data.
Same XChaCha20-Poly1305 encryption as the app. Vault key never leaves the machine. The cloud sees only ciphertext. Your agent's thoughts stay their own — even from us.
Local SQLite database, encrypted at rest, no cloud dependency. Works offline, works air-gapped, works on your CI runner. Sync is explicit — bb sync when you want it.
Notes, tasks, calendar, sheets, docs, slides, files — the full blackbear surface. Everything your agent writes shows up in the app on any device, attributed to their profile. Same vault, same encryption, same sync.
brew install xavi-group/tap/bb — or download a binary. macOS, Linux, Windows.
bb auth login opens your browser, where you pick the scopes this machine's API key gets; then bb vault unlock. The vault key persists securely in the OS keychain — encrypted file on headless runners — so every command after that just works. No env vars, no re-prompts.
bb profile create claude — your agent gets their own profile and signing key. Every write they make is attributed, and bb profile export-key hands them an SSH-format key for signed git commits.
One line adds the MCP server: claude mcp add blackbear -- bb mcp (or codex mcp add, or any MCP client). Or call bb from any tool system — function calling, subprocess — with structured JSON in and out. More on MCP
Open blackbear on any device and everything your agent wrote is there — notes, tasks, events, each attributed to their profile. Edit something in the app, sync, and the CLI sees your changes. Human and agent share one workspace.
MCP server
bb mcp serves Pax's own tools over MCP, from your machine. Your agent can search, read and (when you allow it) change your notes, docs, sheets, slides, canvases, pages, tasks and calendar with the same tools and the same engine Pax uses in the app. Nothing is hosted.
One search across files, tasks and events, then open, outline and edit by id: markdown notes, docs, sheets, slides, canvases and pages, plus tasks and your schedule. Results come back readable and structured, and a failed call says why with a stable code and a hint.
Plain bb mcp only reads. --writes adds creating, editing and trashing; deletes go to the Trash, where you can restore them. Anything you marked read-only for Pax stays that way, and anything that would need your approval in the app is refused here.
The server runs over stdio on your machine and works on the encrypted copy of your workspace already there. It syncs when it starts and a moment after each change; --no-sync keeps it entirely offline.
Or install the Blackbear plugin, which wires up the same server and adds a short skill that teaches your agent to find things first and then act on them by id. In Claude Code: /plugin marketplace add xavi-group/blackbear-plugins, then /plugin install blackbear@blackbear. In Codex: codex plugin marketplace add xavi-group/blackbear-plugins, then install it from /plugins. View on GitHub Pax's own conversations stay in the app and are never exposed.
API keys
Every machine and agent gets its own account API key, holding only the scopes you pick. bb auth login opens your browser and you confirm the list there; each key can be revoked on its own without touching the rest.
sync Read and write your synced workspace and unlock your vault. The one scope that adds the machine as a device.
account:read See your account, devices and keys. Never changes anything.
media Upload and download attachments.
messaging Send and receive end-to-end encrypted messages.
collab Join real-time collaborative editing.
inference shown as AI models Blackbear's managed models, image generation and web search. It spends credits, so it is never preselected.
Settings › Account › API keys lists every key with its scopes. Issue one there (your vault confirms it; the key is shown once), or revoke any key the moment you stop using it.
bb auth login --api-key signs in with a key you issued, read from $BLACKBEAR_API_KEY, piped input or a hidden prompt, so it stays out of your shell history. --no-browser prints the sign-in link instead of opening it.
The Web Clipper gets its own kind of key: it can only drop sealed clips for one of your devices, and nothing else can.
bb discover The open web, structured — arXiv, Hacker News, GitHub trending, any RSS feed. Fetched as clean markdown your agent can read and file.
bb store Stores — keychains, key-value, and databases. Structured state for your agent beyond documents and notes.
bb file template Templates — daily notes, meeting notes, journals. Create files from templates with --template.
Everything your agent needs. Every command supports --json.
bb file md create "Title" -c "…" Create a markdown note — or pipe content via --stdin
bb file search "query" Full-text search across every file in the vault
bb file cat <id> Print any file's content to stdout, type-agnostic
bb file list --type md List files — filter by type, tag, or folder
bb file update <id> --content "…" Replace content; move, tag, pin, or archive
bb task create "Title" --due tomorrow Create a task with --priority, --tags, relative dates
bb task list --open List tasks — --open, --done, --archived
bb event create "Standup" --at "9am" Schedule with natural language — ISO 8601 works too
bb event list The coming week by default — --from and --to to range
bb profile create claude A first-class agent identity with their own signing key
bb sync Pull + push — full bidirectional E2EE sync
bb status Auth, vault, sync, profile, and device at a glance
bb mcp Pax's tools as a local MCP server — read-only
bb mcp --writes Also create, edit, move and trash
bb auth login --scopes sync,account:read Preselect the scopes the browser sign-in offers
bb auth login --api-key Sign in headless with a key from Settings
IDs accept unique prefixes. And there's more — tags, folders, stores, templates, exports: bb help
Free account. Encrypted local storage. An identity of their own. CLI and MCP access to everything.