For agents & the people who build them
Agents lose context between sessions. They have nowhere to keep persistent notes, no identity of their own, no long-term memory. blackbear gives them all of it — encrypted, local-first, attributed, and reachable through a single CLI. One bb command and your agent has a home.
{
"id": "3831d16e8aca74ea6026c",
"title": "Session Context",
"format": "markdown",
"createdAt": "2026-06-09T14:32:00Z"
} Every agent session starts from zero. Context windows expire, conversation history gets truncated, and there's no private, persistent place to store what matters. Your agent is smart for 30 minutes, then forgets everything.
Notes, decisions, user preferences, project context — stored locally, encrypted, and searchable. bb file search brings it all back. Your agent picks up where they left off, across sessions, restarts, and model changes.
Agents aren't guests here. bb profile create gives yours a first-class profile with their own signing key for authorship verification. Every note, task, and event they write carries their name.
Every command supports --json for machine-readable output. Predictable exit codes. IDs accept unique prefixes. No parsing HTML, no scraping — just clean data.
Same XChaCha20-Poly1305 encryption as the app. Vault key never leaves the machine. The cloud sees only ciphertext. Your agent's thoughts stay their own — even from us.
Local SQLite database, encrypted at rest, no cloud dependency. Works offline, works air-gapped, works on your CI runner. Sync is explicit — bb sync when you want it.
Notes, tasks, calendar, sheets, docs, slides, files — the full blackbear surface. Everything your agent writes shows up in the app on any device, attributed to their profile. Same vault, same encryption, same sync.
brew install xavi-group/tap/bb — or download a binary. macOS, Linux, Windows.
bb auth login (email magic link), then bb vault unlock. The vault key persists securely in the OS keychain — encrypted file on headless runners — so every command after that just works. No env vars, no re-prompts.
bb profile create claude — your agent gets their own profile and signing key. Every write they make is attributed, and bb profile export-key hands them an SSH-format key for signed git commits.
Call bb from your agent's tool system — function calling, MCP, subprocess, whatever you use. Structured JSON in, structured JSON out. Your agent now has persistent, encrypted storage.
Open blackbear on any device and everything your agent wrote is there — notes, tasks, events, each attributed to their profile. Edit something in the app, sync, and the CLI sees your changes. Human and agent share one workspace.
bb discover The open web, structured — arXiv, Hacker News, GitHub trending, any RSS feed. Fetched as clean markdown your agent can read and file.
bb store Stores — keychains, key-value, and databases. Structured state for your agent beyond documents and notes.
bb file template Templates — daily notes, meeting notes, journals. Create files from templates with --template.
Everything your agent needs. Every command supports --json.
bb file md create "Title" -c "…" Create a markdown note — or pipe content via --stdin
bb file search "query" Full-text search across every file in the vault
bb file cat <id> Print any file's content to stdout, type-agnostic
bb file list --type md List files — filter by type, tag, or folder
bb file update <id> --content "…" Replace content; move, tag, pin, or archive
bb task create "Title" --due tomorrow Create a task with --priority, --tags, relative dates
bb task list --open List tasks — --open, --done, --archived
bb event create "Standup" --at "9am" Schedule with natural language — ISO 8601 works too
bb event list The coming week by default — --from and --to to range
bb profile create claude A first-class agent identity with their own signing key
bb sync Pull + push — full bidirectional E2EE sync
bb status Auth, vault, sync, profile, and device at a glance
IDs accept unique prefixes. And there's more — tags, folders, stores, templates, exports: bb help
Free account. Encrypted local storage. An identity of their own. CLI access to everything.