trenchcoat
Free · no sign-up
App report · 31 Oct 2026

garrytan/gbrain

Garry's Opinionated OpenClaw/Hermes Agent Brain

Template-written 81 evidence items MIT3671 source files scanned
What this means for you

gbrain has no known tracking or crash-reporting libraries, and its code names 68 outside services.E1E28E14E61

  • It's open source under the MIT License licence, so anyone can read and check its code.E2
  • AI: Uses AI models, either through an online provider or on your computer.E5E8
  • No tracking SDKs found: None of its dependencies is a known analytics, telemetry or crash-reporting library.E1
  • Internet access: It contains code to connect to the internet.E9

What it is

  • The project describes itself as: “Garry's Opinionated OpenClaw/Hermes Agent Brain”E1
  • It's written mainly in TypeScript (files: ts, json, mjs, tsx).E1
  • The latest release (v0.60.520.0) has downloads for Linux and macOS.E4
  • 31365 people starred it on GitHub; the code was last updated 2026-10-31.E3

Where your data goes

AI providersSend text or data to an AI model. 20
console.anthropic.comAnthropic: AI models (Claude) 2×E28
api.anthropic.comAnthropic: AI models (Claude) 1×E14
www.anthropic.comAnthropic: AI models (Claude) 1×E61
generativelanguage.googleapis.comGoogle Gemini: AI models 1×E11
api.groq.comGroq: hosted AI models 2×E35
console.groq.comGroq: hosted AI models 2×E36
huggingface.coHugging Face: AI models and demos 2×E24
console.mistral.aiMistral: AI models 2×E41
api.eu.mistral.aiMistral: AI models 1×E42
api.mistral.aiMistral: AI models 1×E40
api.openai.comOpenAI: AI models (ChatGPT's maker) 4×E16
auth.openai.comOpenAI: AI models (ChatGPT's maker) 2×E66
platform.openai.comOpenAI: AI models (ChatGPT's maker) 2×E50
status.openai.comOpenAI: AI models (ChatGPT's maker) 1×E12
openrouter.aiOpenRouter: AI model router 3×E51
www.perplexity.aiPerplexity: AI search 2×E54
api.perplexity.aiPerplexity: AI search 1×E53
api.together.aiTogether AI: hosted AI models 2×E56
api.together.xyzTogether AI: hosted AI models 1×E55
x.aixAI: AI models (Grok) 1×E21
Sign-in & accountsLog you in or manage accounts. 1
accounts.google.comGoogle Sign-In: log in with Google 1×E68
Backend & data servicesDatabases, search and APIs the app runs on. 5
www.googleapis.comGoogle APIs: Google services 9×E72
gmail.googleapis.comGoogle APIs: Google services 2×E71
people.googleapis.comGoogle APIs: Google services 2×E73
oauth2.googleapis.comGoogle APIs: Google services 1×E69
openidconnect.googleapis.comGoogle APIs: Google services 1×E70
CDNs & hostingDeliver files (scripts, images) quickly from servers near you. 1
raw.githubusercontent.comGitHub Pages / raw files: static file hosting 9×E18
Not identifiedServices we don't have in our list yet. 41
console.cloud.google.comnot identified 12×E23
code.claude.comnot identified 5×E63
tailscale.comnot identified 5×E81
opencode.ainot identified 4×E22
api.supabase.comnot identified 3×E79
dash.voyageai.comnot identified 3×E27
nan.buildnot identified 3×E46
open.bigmodel.cnnot identified 3×E60
aistudio.google.comnot identified 2×E34
build.nvidia.comnot identified 2×E48
chatgpt.comnot identified 2×E65
claude.ainot identified 2×E67
console.typesafe.ainot identified 2×E58
dashscope-intl.aliyuncs.comnot identified 2×E30
lmstudio.ainot identified 2×E37
login.tailscale.comnot identified 2×E80
myaccount.google.comnot identified 2×E25
ollama.ainot identified 2×E49
platform.deepseek.comnot identified 2×E33
platform.kimi.ainot identified 2×E44
www.minimaxi.comnot identified 2×E39
your.appnot identified 2×E17
api.cartesia.ainot identified 1×E15
api.deepgram.comnot identified 1×E13
api.deepseek.comnot identified 1×E32
api.minimaxi.comnot identified 1×E38
api.moonshot.ainot identified 1×E43
api.nan.buildnot identified 1×E45
api.typesafe.ainot identified 1×E57
api.voyageai.comnot identified 1×E59
brain.example.ts.netnot identified 1×E26
bun.shnot identified 1×E10
cognitiveservices.azure.comnot identified 1×E29
dashscope.aliyuncs.comnot identified 1×E31
dev.meta.ainot identified 1×E75
gbrain.ainot identified 1×E52
gbrain.ionot identified 1×E76
hermes-agent.nousresearch.comnot identified 1×E20
integrate.api.nvidia.comnot identified 1×E47
mail.google.comnot identified 1×E77
research.meta.ainot identified 1×E74

What it can do on your computer

AI

Uses AI models, either through an online provider or on your computer. Signals: Anthropic SDK and OpenAI SDK.E5E8

Anthropic SDKOpenAI SDK

No tracking SDKs found

None of its dependencies is a known analytics, telemetry or crash-reporting library. Signals: dependency scan.E1

dependency scan

Internet access

It contains code to connect to the internet. Signals: WebSockets.E9

WebSockets

Local web server

Runs a small web server on your computer. Signals: local web server.E7

local web server

File watching

Notices when files on your computer change. Signals: watches files for changes.E6

watches files for changes

What it's built from

Libraries in its dependency files that tell you something about what it does. The many ordinary ones are left out.

LibraryWhat it's forDeclared in
@anthropic-ai/sdkE5Anthropic SDKpackage.json:205
openaiE8OpenAI SDKpackage.json:225
wsE9WebSocketsrecipes/agent-voice/package.json:16
expressE7local web serverpackage.json:219
chokidarE6watches files for changespackage.json:213

Evidence

Every sentence above points to one of these. Code references show the file, line:column and the short identifier that matched, never the site's code itself.

E1
Repository: garrytan/gbrain
Garry's Opinionated OpenClaw/Hermes Agent Brain
GitHub description · https://github.com/garrytan/gbrain
E2
Licence: MIT License
GitHub license · https://github.com/garrytan/gbrain
E3
31365 stars, last push 2026-10-31
GitHub activity · https://github.com/garrytan/gbrain
E4
Latest release v0.60.520.0 (2026-10-31) with 2 files
GitHub release · https://github.com/garrytan/gbrain/releases/tag/v0.60.520.0
E5
Depends on @anthropic-ai/sdk (Anthropic SDK)
package.json @ 205:None · “@anthropic-ai/sdk” · manifest scan
E6
Depends on chokidar (watches files for changes)
package.json @ 213:None · “chokidar” · manifest scan
E7
Depends on express (local web server)
package.json @ 219:None · “express” · manifest scan
E8
Depends on openai (OpenAI SDK)
package.json @ 225:None · “openai” · manifest scan
E9
Depends on ws (WebSockets)
recipes/agent-voice/package.json @ 16:None · “ws” · manifest scan
E10
Web address in source: bun.sh
evals/functional-area-resolver/harness.mjs @ 37:49 · “bun.sh” · source scan
E11
Web address in source: generativelanguage.googleapis.com/ws/google.ai.generativelanguage.v1beta.Generat
recipes/agent-voice/code/lib/twilio-bridge.mjs @ 88:24 · “generativelanguage.googleapis.com/ws/google.ai.generativelanguage.v1beta.Generat” · source scan
E12
Web address in source: status.openai.com/api/v2/status.json
recipes/agent-voice/code/lib/upstream-classifier.mjs @ 133:30 · “status.openai.com/api/v2/status.json” · source scan
E13
Web address in source: api.deepgram.com/v1/listen
recipes/agent-voice/code/pipeline.mjs @ 78:26 · “api.deepgram.com/v1/listen” · source scan
E14
Web address in source: api.anthropic.com/v1/messages
recipes/agent-voice/code/pipeline.mjs @ 177:26 · “api.anthropic.com/v1/messages” · source scan
E15
Web address in source: api.cartesia.ai/tts/bytes
recipes/agent-voice/code/pipeline.mjs @ 281:32 · “api.cartesia.ai/tts/bytes” · source scan
E16
Web address in source: api.openai.com/v1/audio/speech
recipes/agent-voice/code/pipeline.mjs @ 320:32 · “api.openai.com/v1/audio/speech” · source scan
E17
Web address in source: your.app
recipes/agent-voice/code/server.mjs @ 336:80 · “your.app” · source scan
E18
Web address in source: raw.githubusercontent.com/garrytan/gbrain/latest-stable
src/commands/check-update.ts @ 65:26 · “raw.githubusercontent.com/garrytan/gbrain/latest-stable” · source scan
E19
Web address in source: github.com/garrytan/gbrain/blob/latest-stable/CHANGELOG.md
src/commands/check-update.ts @ 68:28 · “github.com/garrytan/gbrain/blob/latest-stable/CHANGELOG.md” · source scan
E20
Web address in source: hermes-agent.nousresearch.com
src/commands/claw-test.ts @ 419:28 · “hermes-agent.nousresearch.com” · source scan
E21
Web address in source: x.ai/cli/install.sh
src/commands/claw-test.ts @ 422:52 · “x.ai/cli/install.sh” · source scan
E22
Web address in source: opencode.ai/install
src/commands/claw-test.ts @ 425:53 · “opencode.ai/install” · source scan
E23
Web address in source: console.cloud.google.com/auth/audience
src/commands/creds.ts @ 117:27 · “console.cloud.google.com/auth/audience” · source scan
E24
Web address in source: huggingface.co/datasets/xiaowu0162/longmemeval
src/commands/eval-longmemeval.ts @ 166:26 · “huggingface.co/datasets/xiaowu0162/longmemeval” · source scan
E25
Web address in source: myaccount.google.com/permissions
src/commands/google.ts @ 818:86 · “myaccount.google.com/permissions” · source scan
E26
Web address in source: brain.example.ts.net/mcp
src/commands/mcp.ts @ 62:118 · “brain.example.ts.net/mcp” · source scan
E27
Web address in source: dash.voyageai.com/api-keys
src/commands/providers.ts @ 494:77 · “dash.voyageai.com/api-keys” · source scan
E28
Web address in source: console.anthropic.com/settings/keys
src/core/ai/recipes/anthropic.ts @ 15:17 · “console.anthropic.com/settings/keys” · source scan
E29
Web address in source: cognitiveservices.azure.com
src/core/ai/recipes/azure-openai.ts @ 23:47 · “cognitiveservices.azure.com” · source scan
E30
Web address in source: dashscope-intl.aliyuncs.com/compatible-api/v1
src/core/ai/recipes/dashscope-rerank.ts @ 13:22 · “dashscope-intl.aliyuncs.com/compatible-api/v1” · source scan
E31
Web address in source: dashscope.aliyuncs.com/compatible-api/v1
src/core/ai/recipes/dashscope-rerank.ts @ 38:42 · “dashscope.aliyuncs.com/compatible-api/v1” · source scan
E32
Web address in source: api.deepseek.com/v1
src/core/ai/recipes/deepseek.ts @ 74:22 · “api.deepseek.com/v1” · source scan
E33
Web address in source: platform.deepseek.com/api_keys
src/core/ai/recipes/deepseek.ts @ 77:17 · “platform.deepseek.com/api_keys” · source scan
E34
Web address in source: aistudio.google.com/apikey
src/core/ai/recipes/google.ts @ 40:17 · “aistudio.google.com/apikey” · source scan
E35
Web address in source: api.groq.com/openai/v1
src/core/ai/recipes/groq.ts @ 21:22 · “api.groq.com/openai/v1” · source scan
E36
Web address in source: console.groq.com/keys
src/core/ai/recipes/groq.ts @ 24:17 · “console.groq.com/keys” · source scan
E37
Web address in source: lmstudio.ai
src/core/ai/recipes/lmstudio.ts @ 53:17 · “lmstudio.ai” · source scan
E38
Web address in source: api.minimaxi.com/v1
src/core/ai/recipes/minimax.ts @ 128:22 · “api.minimaxi.com/v1” · source scan
E39
Web address in source: www.minimaxi.com/document/guides/embeddings
src/core/ai/recipes/minimax.ts @ 132:17 · “www.minimaxi.com/document/guides/embeddings” · source scan
E40
Web address in source: api.mistral.ai/v1
src/core/ai/recipes/mistral.ts @ 55:22 · “api.mistral.ai/v1” · source scan
E41
Web address in source: console.mistral.ai/api-keys
src/core/ai/recipes/mistral.ts @ 58:17 · “console.mistral.ai/api-keys” · source scan
E42
Web address in source: api.eu.mistral.ai/v1
src/core/ai/recipes/mistral.ts @ 109:54 · “api.eu.mistral.ai/v1” · source scan
E43
Web address in source: api.moonshot.ai/v1
src/core/ai/recipes/moonshot.ts @ 24:22 · “api.moonshot.ai/v1” · source scan
E44
Web address in source: platform.kimi.ai/console/api-keys
src/core/ai/recipes/moonshot.ts @ 27:17 · “platform.kimi.ai/console/api-keys” · source scan
E45
Web address in source: api.nan.build/v1
src/core/ai/recipes/nan.ts @ 38:22 · “api.nan.build/v1” · source scan
E46
Web address in source: nan.build/docs/getting-started
src/core/ai/recipes/nan.ts @ 41:17 · “nan.build/docs/getting-started” · source scan
E47
Web address in source: integrate.api.nvidia.com/v1
src/core/ai/recipes/nvidia.ts @ 31:22 · “integrate.api.nvidia.com/v1” · source scan
E48
Web address in source: build.nvidia.com
src/core/ai/recipes/nvidia.ts @ 34:17 · “build.nvidia.com” · source scan
E49
Web address in source: ollama.ai
src/core/ai/recipes/ollama.ts @ 13:17 · “ollama.ai” · source scan
E50
Web address in source: platform.openai.com/api-keys
src/core/ai/recipes/openai.ts @ 50:17 · “platform.openai.com/api-keys” · source scan
E51
Web address in source: openrouter.ai/api/v1
src/core/ai/recipes/openrouter.ts @ 256:22 · “openrouter.ai/api/v1” · source scan
E52
Web address in source: gbrain.ai
src/core/ai/recipes/openrouter.ts @ 263:48 · “gbrain.ai” · source scan
E53
Web address in source: api.perplexity.ai/v1
src/core/ai/recipes/perplexity.ts @ 33:22 · “api.perplexity.ai/v1” · source scan
E54
Web address in source: www.perplexity.ai/settings/api
src/core/ai/recipes/perplexity.ts @ 36:17 · “www.perplexity.ai/settings/api” · source scan
E55
Web address in source: api.together.xyz/v1
src/core/ai/recipes/together.ts @ 20:22 · “api.together.xyz/v1” · source scan
E56
Web address in source: api.together.ai/settings/api-keys
src/core/ai/recipes/together.ts @ 23:17 · “api.together.ai/settings/api-keys” · source scan
E57
Web address in source: api.typesafe.ai/v1
src/core/ai/recipes/typesafe.ts @ 25:22 · “api.typesafe.ai/v1” · source scan
E58
Web address in source: console.typesafe.ai
src/core/ai/recipes/typesafe.ts @ 29:17 · “console.typesafe.ai” · source scan
E59
Web address in source: api.voyageai.com/v1
src/core/ai/recipes/voyage.ts @ 31:22 · “api.voyageai.com/v1” · source scan
E60
Web address in source: open.bigmodel.cn/api/paas/v4
src/core/ai/recipes/zhipu.ts @ 44:22 · “open.bigmodel.cn/api/paas/v4” · source scan
E61
Web address in source: www.anthropic.com/legal/aup
src/core/behavior-change-notice.ts @ 702:116 · “www.anthropic.com/legal/aup” · source scan
E62
Web address in source: api.github.com/repos/garrytan/gbrain/attestations/sha256
src/core/binary-self-update.ts @ 67:4 · “api.github.com/repos/garrytan/gbrain/attestations/sha256” · source scan
E63
Web address in source: code.claude.com/docs/en/hooks
src/core/bootstrap/host-specs.ts @ 50:8 · “code.claude.com/docs/en/hooks” · source scan
E64
Web address in source: cli.github.com
src/core/bootstrap/repo.ts @ 624:65 · “cli.github.com” · source scan
E65
Web address in source: chatgpt.com
src/core/connectors/providers/chatgpt.ts @ 31:34 · “chatgpt.com” · source scan
E66
Web address in source: auth.openai.com/oauth/authorize
src/core/connectors/providers/chatgpt.ts @ 57:18 · “auth.openai.com/oauth/authorize” · source scan
E67
Web address in source: claude.ai
src/core/connectors/providers/claude.ts @ 37:33 · “claude.ai” · source scan
E68
Web address in source: accounts.google.com/o/oauth2/v2/auth
src/core/creds/providers/google.ts @ 30:33 · “accounts.google.com/o/oauth2/v2/auth” · source scan
E69
Web address in source: oauth2.googleapis.com/token
src/core/creds/providers/google.ts @ 31:34 · “oauth2.googleapis.com/token” · source scan
E70
Web address in source: openidconnect.googleapis.com/v1/userinfo
src/core/creds/providers/google.ts @ 32:37 · “openidconnect.googleapis.com/v1/userinfo” · source scan
E71
Web address in source: gmail.googleapis.com/gmail/v1/users/me/settings/sendAs
src/core/creds/providers/google.ts @ 33:34 · “gmail.googleapis.com/gmail/v1/users/me/settings/sendAs” · source scan
E72
Web address in source: www.googleapis.com/auth/gmail.readonly
src/core/creds/providers/google.ts @ 37:11 · “www.googleapis.com/auth/gmail.readonly” · source scan
E73
Web address in source: people.googleapis.com/v1/people/me
src/core/google/api-access.ts @ 58:10 · “people.googleapis.com/v1/people/me” · source scan
E74
Web address in source: research.meta.ai/blog/security-and-safety-for-ai-agents-our-approach-with-mus
src/core/harness/registry.ts @ 45:23 · “research.meta.ai/blog/security-and-safety-for-ai-agents-our-approach-with-mus” · source scan
E75
Web address in source: dev.meta.ai/docs/muse-code/extending
src/core/harness/registry.ts @ 48:23 · “dev.meta.ai/docs/muse-code/extending” · source scan
E76
Web address in source: gbrain.io
src/core/onboard/hosted-option.ts @ 15:28 · “gbrain.io” · source scan
E77
Web address in source: mail.google.com/mail/u/
src/core/output/scaffold.ts @ 78:16 · “mail.google.com/mail/u/” · source scan
E78
Web address in source: git-lfs.github.com/spec/v1
src/core/persistence/sync-git-stream.ts @ 304:33 · “git-lfs.github.com/spec/v1” · source scan
E79
Web address in source: api.supabase.com/v1/projects
src/core/supabase-admin.ts @ 68:31 · “api.supabase.com/v1/projects” · source scan
E80
Web address in source: login.tailscale.com/admin/dns
src/core/tailscale.ts @ 52:41 · “login.tailscale.com/admin/dns” · source scan
E81
Web address in source: tailscale.com/kb/1223/funnel
src/core/tailscale.ts @ 54:41 · “tailscale.com/kb/1223/funnel” · source scan

Limits

  • We read the app's code and its official download without running it. Code that exists may never run for you, and behaviour decided by servers is invisible.
  • Web addresses and libraries show what the app can talk to or do, not that it does so every time you use it.
  • Only open-source apps with a public GitHub repository are analysed. The release we inspected may differ from builds in app stores.
  • This text was written from fixed templates because no AI writer was available. It uses exactly the same evidence.

Facts, not judgements: this page describes what the code and traffic show, not anyone's intent. Not financial advice. Case id wuMwY1Ew.