Funes Vault

Funes Vault Give AI agents your memory. Not all of it.

A free, open-source Mac menu bar app that keeps your personal context in a private vault on your Mac, and shares it with Claude, Cursor, Codex and other AI agents only as you allow. Its iPhone app captures thoughts anywhere and answers agents' requests from your pocket.

Download for Mac · iPhone app · Get started · Agent setups · Changelog

• Each agent gets only what you choose. Its own key, and the access you set: read, suggest or save; up to a sensitivity level; in the categories you pick. A new agent can start with nothing.
• You approve the exact text. Before a memory goes to an agent, a small panel shows it, and you can untick what shouldn't go. An approval is used once, within 15 minutes, and is cancelled if anything changes.
• Agents suggest; you decide. What an agent wants to remember waits in your Inbox, where you edit it, apply it or reject it.
• Answer from your iPhone. When an agent asks while you're away from your Mac, your iPhone shows the request, and you share, save or deny it there. Capture a thought anywhere; it reaches your vault when your Mac does.
• Everything stays on your Mac. No account, no server of ours, no cloud copy. Search runs on a small model built into the app. The iPhone app keeps no copy either: it talks to your Mac, end to end encrypted. Cloud agents such as claude.ai and ChatGPT can reach it only through a tunnel you run, with Remote Access (experimental, off by default).

Status: public preview (0.5), with best-effort support. Funes Vault for iPhone (iOS 18 or later, free on the App Store) pairs with it. Works with Claude Code, Claude Desktop, Cursor and Codex, with ready-made setups for VS Code (Copilot), Gemini CLI, Zed, Cline, JetBrains AI Assistant, Devin Desktop and any other MCP client. From the cloud (experimental): claude.ai, ChatGPT, Gemini Enterprise, the Anthropic and OpenAI APIs, and cloud coding agents, through Remote Access.

Get started

1. Install. Download FunesVault.dmg, open it and drag Funes Vault to Applications. If you open it from the disk image or Downloads instead, it offers to move itself there. Or use Homebrew:

   brew install --cask bereciartua/tap/funes-vault

Funes Vault needs macOS 15 or later, on Apple silicon or Intel.

1. Open the app. It lives in the menu bar: a click on its eye opens a panel with what waits for you, the Agents and Remote Access switches, a field to remember (⏎) or search (⌘⏎) and the last 24 hours; a right click has Open Funes Vault, Settings, Check for Updates and Quit. Its window opens on Home, with a short setup checklist:
2. Connect an agent. Add… opens Add Agent, with the agents found on your Mac first. Pick one and a starting access: the default, Read low-sensitivity memories, ask first, lets it read memories up to Low and asks you before each share. For Claude Code, Claude Desktop, Cursor and Codex, Add and Connect… shows exactly what it will change or run first, backs up a settings file before changing it, and never writes the key into the agent's settings. For other agents, copy the setup from the agent's Connect tab.
3. Approve its first request. Ask your agent something, for example *"Plan a week of dinners for me"* or *"Set up this TypeScript project the way I like it."* The agent asks Funes for context, you see the panel, and you choose what to share. The step is done when the agent's first request arrives.
4. Seed your vault. Answer a few optional questions, import your ChatGPT memories or paste Claude's, or import a Markdown file. What you add goes to the Inbox first, and anything that looks like a secret is never imported. The questions end with the categories agents should never see: those get Deny for every agent, including ones you add later.
5. Review your Inbox. Apply what's right; edit or reject the rest.

Search shows the part of each memory that matches, with your words in bold. With Search answers on (Settings ▸ AI ▸ Features, off by default), ⌘Return in the Vault's search, or Ask Funes, has the model you chose read the top results and answer in a few short claims, each quoting the memory it came from, with numbers that open that memory; claims it can't quote aren't shown. It can also answer on its own after a short pause, for searches that are questions or for every search. The iPhone has the same Ask Funes, answered by your Mac.

You can also capture a thought at any time with ⌥⌘M, File ▸ Remember… while a window is open, or Services ▸ Remember in Funes in any app, or type it on Home and press Return: it goes to the Inbox either way. ⌘Return on Home searches your vault for what you typed, and the microphone dictates, on your Mac (macOS 26 and later).

Home also shows your vault's pulse: what came in each day, from you, your iPhone, agents, imports or the tidy-up, and what went out to each agent, with refused requests marked. Hover a day for its numbers and click it to see that day in Activity. Below it: your memories and their growth, their sensitivity next to what was shared, your rhythm (a square for each day you saved memories, as many weeks as fit, today ringed), and who reads your vault. It shows counts only, never a memory's text.

Setups for every agent, the tool reference and troubleshooting are in the MCP guide.

On your iPhone

Get Funes Vault for iPhone, free on the App Store (iOS 18 or later). On the Mac, open Settings ▸ iPhone, turn on Allow iPhone access and click Pair iPhone…; on the iPhone, tap Pair with Mac and scan the code, then click Allow on the Mac. The two reach each other on the same Wi-Fi, through Tailscale, or through your Remote Access tunnel.

• Home has the box to remember something, typed or dictated, the agents' requests waiting for you, and your vault at a glance in tiles like its widgets: this week across the top, then Memories, Rhythm, Sensitivity and Who reads. Counts only, never a memory's text.
• Capture from Home, the share sheet, Shortcuts and Siri ("Remember in Funes"), a Control or the Remember widget. Captures wait on the iPhone until your Mac has them, even offline.
• Answer agents from a notification, with the same Share, Save and access panels as on the Mac. The notification names the agent and the count, never memory text. It reaches the iPhone through a record holding only a random name and a tag in your own iCloud (ADR-0019); the request itself comes from your Mac, end-to-end encrypted. This needs the same Apple Account on both.
• Search, edit and review the Inbox while your Mac is reachable. Search shows the sentence that matches, and Ask Funes has your Mac answer, with Search answers on. Every Inbox card can be answered on the iPhone, the tidy-up's included. The iPhone keeps no copy of your vault.
• Widgets for your pulse and rhythm, from the last counts your Mac sent, and one to remember something.

No Mac yet? Try Demo on Home shows every screen with sample data. The app's version is at the bottom of its Settings.

From cloud agents (experimental)

claude.ai, ChatGPT and cloud coding agents run on their vendor's servers, so they can't reach an app on your Mac directly. Remote Access lets them, through a tunnel you run, such as Tailscale Funnel:

1. Open Remote Access in the sidebar and follow its four steps: choose a tunnel, turn Remote Access on and start the tunnel, paste its address, test. Funes never starts a tunnel; it shows the command.
2. Add the agent on the Cloud · Experimental tab of Add Agent… (claude.ai, ChatGPT, …), or turn on Allow cloud access on an agent's Cloud tab.
3. Connect it: apps that sign in (claude.ai, ChatGPT, Gemini Enterprise) use Connect a Cloud App… and a six-digit code you compare on the Mac; the others use the agent's remote token. The agent's Cloud tab shows the steps for each.

A cloud agent gets exactly the access you set for it, and the same panels on your Mac: if you're away, its requests wait and expire as for any agent. While Remote Access is on, the vault is reachable through a public address, and what you share with a cloud agent goes to its vendor's servers. It's off by default, and the Remote Access switch in the menu bar panel turns it off at once, cutting every cloud agent off. The MCP guide has the details.

How you stay in control

Funes is the only thing that holds your memories. Agents talk to it, never to the vault directly, and it checks every request against what you allowed.

You choose what each agent may see

Every agent has its own access: whether it may Read, Suggest or Write; a maximum sensitivity (Public, Low, Internal, Sensitive, Restricted or Secret); the categories it may or may not use (a denied category always wins); whether Funes asks before sharing and asks before saving; and an optional expiry date. Health, Finance and Legal memories are Sensitive by default.

<img alt="Claude Code's page: the sidebar lists each agent with a short status, Claude Code with a badge for its two waiting requests. The page shows its status and a summary of its access, the two pending requests with their memory count, time left and Review…, and the Access tab, with switches for Read, Suggest and Write, a slider for the maximum sensitivity,