Your knowledge should remain yours.
Harbor is open at the core. Run it on your own machine, bring your own AI keys, and keep every byte of your knowledge on disk you control. Markdown for humans, SQLite for structure — no proprietary formats, no lock-in.
What we promise.
- — 01
Markdown is primary.
Every document is a real .md file on disk. Open it in any text editor. Round-trip without losing structure.
- — 02
SQLite for structure.
One database file per workspace. Self-contained, transactional, portable. Inspect it with any SQLite client.
- — 03
AI never bypasses you.
The AI cannot write to Markdown or SQLite directly. It calls scoped MCP tools that produce reviewable patches with full audit history.
- — 04
Approval is configurable.
Require approval for everything, trust trusted agents, or set rules by folder, document, database, agent, or tool.
- — 05
Export anytime.
Your full workspace exports as a folder of Markdown plus the SQLite file. Re-import into self-hosted, anywhere.
- — 06
No hidden memory.
Preferences, people, decisions — every piece of AI memory is stored where you can read, edit, or delete it.
What lives where.
Harbor stores each workspace as a single folder on disk. Markdown is the human artifact; SQLite is the operational state. Both live in plain files — no proprietary blobs, no opaque containers.
Permissions are explicit.
Every agent — internal or external — gets a written policy. Read, write, deny, or require approval — by folder, document, database, or block type. Policies are stored in SQLite and visible in your Settings.
Use any AI provider.
Harbor's model gateway speaks to multiple providers. Hosted Harbor includes usage by default; self-hosted users plug in their own keys. Local models work too — point Harbor at any OpenAI-compatible endpoint.
Open by protocol.
MCP is both Harbor's internal interface and its external one. ChatGPT, Claude, and any MCP-capable client can connect to your Harbor and use scoped, permissioned tools — never raw mutations.
Every write is logged.
The audit log records every operation — who proposed it, when, what changed, and what tool was called. It's an append-only file in your workspace folder. Inspectable forever, even after you cancel hosted Harbor or move to self-hosting.
Run your own Harbor.
The self-hosted edition is the same Harbor we run for paying customers, just without the managed parts. Same MCP. Same review UI. Same data on disk. You own it.
"Use Harbor hosted, or run it yourself. Your knowledge should remain yours."