sherlock-second-brain
Named after the famous detective of Baker Street who inspired this project: the same way, we run rigorous investigations (symptoms, clues, hypotheses, evidence, conclusion) to debug, analyze code, and remember what we learn across multiple projects.
MCP server + skill for Sherlock's second brain: validated knowledge lives in MD fiches and skills; everything not yet validated lives in cases (JSON investigation files for debugging and troubleshooting). Standalone notes worth remembering without an investigation live in memories (MD + YAML frontmatter). A resolved case is promoted into a fiche or a skill through the MCP; a memory can also be promoted into a fiche.
source of truth (files) derived index (rebuildable)
──────────────────────────────────── ────────────────────────────
<data_dir>/
cases/<case-id>/case.json ──→ vector/ (chromadb, gitignored)
cases/<case-id>/evidence/*.log hybrid search: vector (Chroma)
memories/<id>.md + lexical (RRF)
fiches/*.md
skills/<slug>/SKILL.md
Stack
- Python 3.12+,
uv - FastMCP (stdio)
- ChromaDB + fastembed (vector index, multilingual MiniLM-L12 model)
- jsonschema (case validation)
- jinja2 (rendering of promoted fiches / skills)
- PyYAML (memory frontmatter)
- Hexagonal architecture:
domain/(pure pydantic) ·application/(use cases + ports) ·adapters/(filesystem, chroma, lexical, hybrid RRF, MCP DTO, templates)
Installation (in a project)
uv init
uv add sherlock-second-brain
Or from the repo:
cd sherlock-second-brain
uv sync
Two ways to run it
Your data (cases, fiches, skills, vector index) always lives on the machine where the server process runs. The server is local-first (stdio), so you choose where that machine is:
A. Self-hosted (data stays on your machine)
Install the package and run the stdio server locally — no third party ever touches
your data. Configure SHERLOCK_BRAIN_DATA_DIR to choose where the files live
(default ~/sherlock-second-brain-data).
B. Managed on Glama (opt-in)
Deploy your own instance on Glama's hosting from the Glama listing:
Glama builds the image, wraps the stdio transport into Streamable HTTP, and mounts
a persistent volume at /data. Set SHERLOCK_BRAIN_DATA_DIR=/data so your
knowledge survives redeploys. This is a paid managed option — the code itself is
free and open source (MIT).
Configuration
| Variable | Role | Default |
|---|---|---|
SHERLOCK_BRAIN_DATA_DIR |
Root data directory (cases + memories + kb + vector) | ~/sherlock-second-brain-data |
Wire the MCP server into opencode
Add to ~/.config/opencode/opencode.json:
{
"mcp": {
"sherlock-second-brain": {
"type": "local",
"command": ["/opt/sherlock-second-brain/.venv/bin/python", "-m", "sherlock_second_brain.server"],
"enabled": true,
"environment": {
"SHERLOCK_BRAIN_DATA_DIR": "/opt/infra/kb"
}
}
}
}
Install the agent globally
The agent is versioned in this repo (agent/sherlock-second-brain.md). To make it
available to all opencode agents:
ln -s /opt/sherlock-second-brain/agent/sherlock-second-brain.md ~/.config/opencode/agent/sherlock-second-brain.md
On another machine, clone the repo then create the same symlink pointing to the checkout. Restart opencode after installation.
MCP tools
Cases
| Tool | Role |
|---|---|
case_create |
Create an investigation (unvalidated topic) |
case_get / case_list |
Read / list (status, tag filters) |
case_search |
Semantic search (cases + KB) |
case_update |
Add findings / steps / hypotheses / conclusion / hypothesis result |
case_add_evidence |
Attach evidence (log, output, note) |
case_set_status |
open / in_progress / resolved / abandoned |
case_delete |
Delete a case and its evidence |
case_promote |
Promote a resolved case → fiche or skill |
Memories
| Tool | Role |
|---|---|
memory_add |
Add a standalone note to remember (no case) |
memory_get / memory_list |
Read / list memories (tag filter) |
memory_search |
Semantic search restricted to memories (hydrated) |
memory_update |
Update summary / content / tags / references / source |
memory_delete |
Delete a memory |
memory_promote |
Promote a memory → validated fiche |
KB
| Tool | Role |
|---|---|
fiche_list / fiche_read / fiche_write / fiche_delete |
CRUD validated fiches |
skill_list / skill_read / skill_write / skill_delete |
CRUD validated skills |
index_rebuild |
Rebuild the vector index from source files |
Hybrid search
case_search (and memory_search) combines two engines via Reciprocal Rank
Fusion (adapters/hybrid.py) over four sources: fiches, cases,
skills and memories.
- Vector (
adapters/chroma.py): multilingual embeddings (MiniLM-L12, ~0.22GB, French included), persistent collection invector/, rebuildable viaindex_rebuild. - Lexical (
adapters/lexical.py): token overlap, zero dependency — a doc relevant for an exact term but missed by the vector engine still surfaces.
RRF fusion: score(d) = 1/(k + vector_rank) + 1/(k + lexical_rank), k = 60. The first index_rebuild downloads the model.
Memories
A memory is a low-friction capture ("remember that the NAS runs Fedora 44"), with
no case workflow. It is stored as memories/<id>.md with YAML frontmatter
(metadata) and a free-form markdown body. Memories are indexed on every mutation
(create included) so they are immediately searchable. A memory is not
validated; promote it with memory_promote once it becomes validated knowledge.
Case schema
Defined in
src/sherlock_second_brain/schema/case.schema.json
— source of truth, shipped inside the package. Every case written through the MCP
is validated against this schema (works from PyPI installs too).
Tests
uv run ruff check src/ tests/ # lint
uv run ty check # type checking
uv run pytest tests/ -v # tests
Metadata
Release files for sherlock-second-brain 0.1.0
For a detailed explanation of source distributions (sdists) and built distributions (wheels), please see the package formats documentation.
Source distribution (sdist)
| File | Size | Uploaded | Provenance | Actions |
|---|---|---|---|---|
| sherlock_second_brain-0.1.0.tar.gz | 222.5 kB | Without provenance | Details for sherlock_second_brain-0.1.0.tar.gz |
Built distribution (wheel)
| File | Interpreter | ABI | Platform | Actions Reset |
|---|---|---|---|---|
| sherlock_second_brain-0.1.0-py3-none-any.whl | Python 3 | none | any | Details for sherlock_second_brain-0.1.0-py3-none-any.whl |
Total release size: 257.1 kB
Release files / sherlock_second_brain-0.1.0.tar.gz
| Download URL | sherlock_second_brain-0.1.0.tar.gz |
|---|---|
| Size | 222.5 kB |
| Tags | Source |
|
SHA-256 checksum How to use checksums |
e85657bfb1dea7b441b824d13c63d8d8b02e9076ba289aa0c2d37741c82ec1b8
|
|
BLAKE2b-256 checksum How to use checksums |
c2166cf0eab7e91ce5b1995f148fa56121c88265485414aad3b01e69f6b6d6d0
|
| Upload date | |
|
Uploaded using Trusted Publishing? What is trusted publishing? |
Yes |
| Uploaded via |
uv/0.12.3 {"installer":{"name":"uv","version":"0.12.3","subcommand":["publish"]},"python":null,"implementation":{"name":null,"version":null},"distro":{"name":"Ubuntu","version":"24.04","id":"noble","libc":null},"system":{"name":null,"release":null},"cpu":null,"openssl_version":null,"setuptools_version":null,"rustc_version":null,"ci":true}
|
Release files / sherlock_second_brain-0.1.0-py3-none-any.whl
| Download URL | sherlock_second_brain-0.1.0-py3-none-any.whl |
|---|---|
| Size | 34.6 kB |
| Tags | Python 3 |
|
SHA-256 checksum How to use checksums |
a1efe0869c76a9350e184a82c39a7e93578455d4d704509bf75ff872f00337a4
|
|
BLAKE2b-256 checksum How to use checksums |
54169c7e73233afdd694462028d969941862bc8749c52e9ffb0c7c0179f04d00
|
| Upload date | |
|
Uploaded using Trusted Publishing? What is trusted publishing? |
Yes |
| Uploaded via |
uv/0.12.3 {"installer":{"name":"uv","version":"0.12.3","subcommand":["publish"]},"python":null,"implementation":{"name":null,"version":null},"distro":{"name":"Ubuntu","version":"24.04","id":"noble","libc":null},"system":{"name":null,"release":null},"cpu":null,"openssl_version":null,"setuptools_version":null,"rustc_version":null,"ci":true}
|
Security for sherlock-second-brain 0.1.0
Provenance
Provenance describes where a file came from. On PyPI, provenance is shared via attestations, which provide a verifiable record of the build or publishing details. View details, limitations and caveats.
No provenance found
None of the files in this release were uploaded with provenance metadata.
A note on package security
PyPI is a repository for distributing packages, not a service for auditing them. While third-party security researchers and our staff do their best to detect and remove malicious packages, PyPI cannot guarantee the quality, security or suitability of any given package.
To learn more about protecting yourself from malicious actors, visit our package security documentation.