The Catalog
Every daemon has a library, and out of the box it is this list. Nothing is fetched until somebody
opens it; the daemon reads it from one host over TLS, with every skill body and plugin artifact
inline, so installing never fetches from a second place. Point NOCTURN_CATALOG_URL somewhere
else for your own catalog, or at off for none — see the command line.
Plugins
Section titled “Plugins”Code, sandboxed. A plugin brings typed tools and often a skill that says when to reach for them. Every plugin entry is signed with a key compiled into the daemon: a compromised catalog host can offer text nobody vouched for, never code. Installing one grants exactly what its manifest asks, shown on its page below, and in the app before you tap: the tools it adds, the base tools its guest may call, the hosts a credential would ride to, and the scopes a sign-in would ask for.
| Plugin | What it is |
|---|---|
| Gmail (read-only) | Search, read and list labels in your Gmail. Read-only. Connect it once with your own Google OAuth client — Gmail scopes are restricted, so no shared client can be shipped. · site |
Skills
Section titled “Skills”Instructions, no authority at all (ADR-10) — a skill can tell the assistant how to work, and everything it then does still meets the gate.
| Skill | What it does |
|---|---|
| Daily brief | The morning round-up: date, what is due, what matters today. Built to be run by a scheduled agent. |
| Crunch a data file | Totals, averages and groupings over a workspace CSV or JSON — computed in the sandbox, not estimated by eye. |
| Home Assistant | Read and control the house through Home Assistant’s REST API — states, services, history. Needs a long-lived token bound to the Home Assistant host. · site |
| Link to note | Read a URL, distil it, and file it in memory with its source and date. |
| Meeting notes | Raw notes in, decisions and owned action items out — with reminders offered, never assumed. |
| Proofread | Corrects and tightens text while keeping the writer’s voice. Uses no tools at all. |
| Remember this | How to write a memory note that is still worth its tokens in six months. |
| Research brief | Answers from the workspace knowledge base first, sourced, with the gaps named. Needs an embedding endpoint. |
| Summarize a URL | Fetch a web page and summarize it faithfully. |
| Watch a page | Snapshot a page into memory, compare on the next run, report what actually changed. |
| Weather | Current conditions and a short forecast, from Open-Meteo. No account, no API key. · site |
| Weekly review | Notes and open reminders pulled into done, open, slipped, and the one thing for next week. |
MCP servers
Section titled “MCP servers”Remote servers over HTTPS, declared and never carrying a credential. Signing in happens afterwards, from the app or the command line, and the first call still asks about the host.
| Server | What it is |
|---|---|
| Cloudflare | Cloudflare’s own MCP server: DNS, Workers, and account data. Signs in with OAuth. · site |
| DeepWiki | Ask questions about a public GitHub repository’s documentation. No account needed. · site |
| GitHub | GitHub’s own MCP server: repositories, issues, pull requests, code search. Signs in with OAuth. · site |
| Hugging Face | Search models, datasets, papers and Spaces on the Hugging Face Hub. Works without an account. · site |
| Linear | Issues, projects and cycles from Linear. Signs in with OAuth. · site |
| Notion | Search and edit Notion pages and databases. Signs in with OAuth. · site |
| Sentry | Errors, issues and releases from Sentry, including Seer’s root-cause analysis. Signs in with OAuth. · site |
| Stripe | Stripe’s own MCP server: customers, payments, invoices and the docs. Signs in with OAuth. · site |