BusyBro

The AI teammate that remembers

Ответы из вашего собственного перехваченного трафика — не догадки. Помнит вас в дашборде, Telegram и чате.

A friendly robot with a spark antenna connects to four labeled surface tiles — dash, telegram, mcp and cli. Beside it an answer bubble trails a receipt of the tools it ran, each check-marked, and below, a personal memory card is separated from the team memory card by a filter mesh. dash telegram mcp { } cli >_ tools ran personal team

Что он умеет

Ask, understand, act

Превращает перехваченный трафик в ответы и действия в рамках вашей роли.

  • в рамках RBAC
  • с подтверждением
  • секреты скрыты

Обоснованно, а не наугад

Спросите «как это приложение выполняет логин?» — и получите реальный флоу прямо из ваших захватов, плюс готовый к запуску код репро с вырезанными секретами. Ответы приходят с доказательствами.

Помнит вас везде

Научите его факту один раз — и он следует за вами на каждой поверхности: дашборд, Telegram, MCP и терминал. Захотите стереть — одного «забудь это» достаточно.

Командный мозг без утечек

Общие знания дистиллируются из чатов всей команды за строгим PII-фильтром и очередью человеческой проверки. Личные факты архитектурно отделены от командного хранилища — перетечь туда они не могут по самой конструкции.

Специалисты по требованию

Привяжите настроенную персону к сервисной группе API — и BusyBro автоматически примет её, когда этот трафик окажется в фокусе. Эксперт по платежам появляется на платёжном трафике — без просьб.

Доказуемо честен

Трасса активности показывает, какие именно инструменты стоят за каждым ответом, а каждая запись BusyBro попадает в аудит-журнал платформы. Доверяйте, потому что можете проверить.

Ваша модель — ваш выбор

Запускайте стандартные модели Anthropic, направьте его на любой OpenAI-совместимый эндпоинт или подключите локальную модель. Ключи живут в зашифрованном хранилище, а память переживает смену модели.

How a conversation works

Ask once, it does the digging

One brain behind Telegram, the iOS app, the terminal, and your MCP-connected agents — same account, same memory, same rules.

  1. Link once

    01

    On Telegram, /login pairs the bot with your account via a short-lived code — no link, no LLM call at all. The iOS app and the bmc terminal already speak as you.

  2. Ask in plain language

    02

    Name a device by its name, PAC port, or URL; name a host; describe a bug. Attach a screenshot or a PDF on Telegram and it reads those too.

  3. Tools, not vibes

    03

    Answers come from real tool calls over your captured data — drawn from the same registry the dashboard and the MCP server consume — never from guessing at your traffic.

  4. You hold the pen

    04

    Reads flow at your role. Anything that changes state stops and shows you the exact payload first — an inline Confirm on Telegram, an action card elsewhere.

The guardrail model

Autonomy with a leash you hold

Every gate is re-checked at execution time, server-side — the model can neither grant itself a role nor press its own Confirm button.

BusyBro guardrails: what happens per class of request
You ask it to…What actually happensEnforced by
Read trafficOwner-scoped by default: it inspects your own devices' captures. Reading wider requires the devices-view capability on your real role.Row-level security plus your role — the same checks as the dashboard.
Change somethingIt stops and shows the exact change — the script body, the settings diff, the delete scope — and waits for your explicit approval.A single-use, server-side confirmation the model cannot forge or replay.
Do something admin-gradeAdmin-only tools re-resolve your current role at the moment of execution — not when you asked, and not from the chat context.Capability and admin gates re-applied at run time, defense in depth.
Touch the database directlyIt can't. Raw database and broadcast primitives are excluded from the free-text model entirely — no dashboard screen grants raw SQL, so neither does your mate.A code-level denylist between the model and the tool registry.
Handle a secretCaptured tokens and cookies are treated as secrets in its answers, and provider API keys are referenced by name only — the value never sits in chat-readable settings.The encrypted vault behind one audited decrypt boundary.
Anything at allEvery write, every denial, and every error is recorded with the surface, your role, and whether a real human tap approved it.The platform audit trail — the same one the dashboard tails live.

On your captured traffic

Things people actually ask

Each ask maps to a real, bounded tool — not a fuzzy summary of rows it never read.

How does this app's login flow work?

It deep-inspects your captured traffic for that host — the auth calls, token refresh, required headers, payload shapes — and hands back repro code with credentials treated as secrets.

What has my iPhone been doing for the last hour?

A bounded aggregation answers with top hosts and request counts — never a raw scan of your rows — then drills into the noisy host when you ask it to.

Clear the noise from that analytics host

A targeted, filtered delete — and because it mutates your data, it first shows the exact scope it would remove and waits for your confirmation.

FAQ

The questions sceptics should ask

Can it act without asking me?

Reads run freely at your role. Every write stops for an explicit confirmation — and even if you auto-approve a tool for a thread, destructive and admin-grade tools always still ask.

Does it see my whole database?

No. Raw database primitives are excluded from the model entirely, and every tool it can call runs through the same row-level security and role checks as the dashboard.

What does it remember, and can I erase it?

Personal memory is owner-scoped rows you can list, search, and delete — say 'forget that' or send /forget on Telegram to wipe it. The background memory writer can be switched off for your account.

Can my private details leak into the shared team brain?

The team store is a separate table with no user column at all, a deterministic code filter rejects names, emails, IPs, paths and token-shaped strings before anything is stored, and every candidate waits in a review queue before it becomes recallable.

Which model answers — and can we run our own?

Anthropic Claude by default, configurable per surface. Admins can point the fleet at any OpenAI-compatible endpoint or a local model — the key stays in the encrypted vault — and on non-frontier providers the tool surface automatically narrows to a read-only core.

Is there a record of what it did?

Yes — every write, denial, and error lands in the platform audit trail with the surface it came from, the role that ran it, and whether a real human tap confirmed it.

Say hi to BusyBro

Откройте busymate.ai — или напишите @busybrobot в Telegram и привяжите аккаунт.

Ask your mate