Lanes Link

One endpoint you own, holding everything your agents need to know you: connections, memory, tasks, files, contacts, and secrets.

Connect your mail, calendar, files and notes once. Every agent you use, Claude, ChatGPT, and anything else that speaks MCP, reaches all of it through that one endpoint. Change your AI and you keep your context, because none of it ever lived in the agent.

Quickstart

Needs Bun 1.3.11+ and a Lanes sign-in.

$ bun install -g @lanes-sh/link
$ lanes auth login
$ lanes link profile add personal
$ lanes link start
ok    serving http://127.0.0.1:7337/mcp
      profiles: personal

Leave that running. In a second shell, point every agent you have installed at it:

$ lanes link mcp add
ok    registered lanes-link with Claude Code (user scope)
ok    registered lanes-link with Codex

Your memory, tasks, files, skills, entities and vault work now, with nothing to authorise. Mail and calendar are the next step: lanes link connect gmail.

Full quickstart

Related MCP server: Enterprise MCP Server

Why

• Connect once, use everywhere. No per-agent integrations, no re-authorising every new tool.

• You decide what agents can touch. Permissions default to deny, and the runtime enforces them rather than asking the model to behave.

• Work and personal never mix. Separate profiles, separate credentials, separate stores.

• Every call is recorded. An append-only log of what was reached, and what was refused.

• It is yours to move. Plain files on your own disk, readable in an editor and portable to another machine. There is no export to ask for.

What people use it for

• A personal assistant on your phone. A deployment is a URL, so the claude.ai or ChatGPT app reaches your mail, calendar and files from anywhere. This is the one case that needs your own cloud; everything else here works on your machine.

• Inbox triage you sign off on. An agent searches, reads, labels and composes, and saves a draft for you to send rather than sending it.

• Coding agents that start from your context. Claude Code and Codex reach the same Linear issues and Notion pages you do, so a session begins from what you already know.

• One set of notes behind every agent. What Claude Code writes down, claude.ai reads back.

• A to-do list your agents share. "Remind me to chase the invoice" lands somewhere with a status, so whichever agent you talk to next knows it is still open.

• Your own procedures, followed rather than guessed. How a standup update reads, where an invoice gets filed, who gets cc'd. Written once, and every agent follows the same one.

What you keep in it

Not "what your agent gets". These are yours, and you decide per profile how far in a visitor comes.

Everything except connections arrives switched on, because it holds your own material rather than an account. Memory, tasks and skills are plain Markdown, and an asset keeps its own filename, so a text editor and an agent reach the same bytes. Each belongs to one profile: what you add under work is invisible under personal.

Memory is what is true, tasks is what is to be done, assets is a file. "Remember to chase the invoice" is a task. Filed as memory it becomes a note nothing can ever close. Your agents are told this too.

Keep memory and skills in a private GitHub repository instead, and get history, diffs, and the same notes from anywhere you run this:

$ lanes link knowledge use github --repo <owner/name> --migrate

Credentials and the vault stay where they are. There is no setting that would put them in a repository.

Connect an account

Over a hundred accounts and services, one command each. Run it again to add a second mailbox, a second calendar, a second anything.

Most need nothing set up: connect opens a browser, you approve, and it is live. The rest ask for an app password, a token you paste, or an OAuth client of your own, and the guide says which is which.

Connect your accounts covers every provider, what each one gives your agent, and how to add one that is not on the list.

Two worth knowing before you connect them. bunq can move money: its payment tool executes immediately and is not reversible, so set a spending limit on the API key and read Connecting bunq first. Most providers are untested against a real account, and the tables mark which with a †. See src/providers/README.md for what that means.

Run it anywhere

The same code and the same config in all three. Only the storage adapters change.

Start local; most people stay there. Go self-hosted when you need to reach it from claude.ai, ChatGPT or a phone: lanes link deploy creates the project, the bucket, the service account and the revision on its first run.

Docs

Security

Lanes Link holds live credentials to your email and documents. The security model states its limits plainly rather than implying guarantees the code does not deliver. Read it before you trust it with an account.

To report a vulnerability, see SECURITY.md. Please do not open a public issue.

Notes

Why the sign-in. A profile declares who may use it, and the endpoint cannot check that against anything if it does not know who is asking. The network is needed to sign in and to refresh, not per call, so a machine offline for a day keeps serving.

Who reaches a profile. An empty members list means nobody, not everybody. profile add puts you on the profile it creates, so a profile you made while signed in already reaches you. One created before you signed in has nobody on it: add yourself with lanes link profile members add --me --profile <name>.

Why mcp add names no profile. One endpoint serves every profile in the workspace, and each call names one in its profile argument, so registering is about the endpoint. Which profiles a client actually reaches is decided when its owner signs in: every profile whose members: lists them, and no others. For a runner with no browser, lanes link token issue --me mints a static token that reaches exactly what its subject is a member of.

Why no --workspace flag. local is the default in a fresh config. Commands that publish or destroy (deploy, sync, secrets push, profile remove, disconnect, token rotate) refuse the default and make you type the name.

Where the decision records live. docs/detailed/adr/, kept with the source as engineering history rather than documentation.

License

Apache-2.0