Who it is for
Mind Marshal suits people who want the power of a modern workspace tool without handing their thinking to a cloud service.
Solo founders & freelancers
- Client projects, notes and invoices in one place
- No per-seat subscription
Writers & researchers
- AI help on demand, never by default
- Drafts stay on the machine
Consultants & PMs
- Boards, timelines, rollups
- Client data never enters a shared cloud
Privacy-critical work
- Legal, medical, finance, journalism
- On-device as a hard requirement
Journalers
- A daily page already waiting
- Crisis-aware safety behaviour
Small teams
- Realtime co-editing when needed
- On a relay server you run
Editor
Writing
- Headings, lists, to-dos, quotes, code, dividers, images
- Slash commands for every block type
- Drag-and-drop block reordering
- Drop images and code files straight into a page
- Colour, highlight, font, underline, alignment
- KaTeX mathematics
- On-device dictation and local neural read aloud in Free Core
Connections
[[mention]]links between pages- Backlinks listed on every page
- Related pages by overlapping content
- Markdown import and export
On request
- Continue writing at the cursor
- Turn a selection into a checklist
- Six inline chart styles: bar, ranked, line, area, pie and donut
- AI analysis of chart data
Databases
One set of rows, six ways to look at it. Changing a card on the board changes it everywhere, because there is only ever one copy of the data.
| View | Best for |
|---|---|
| Table | Editing many rows and properties at once. |
| Board | Moving work through stages, with stuck-card detection. |
| Timeline | Seeing a quarter of work as bars, with a today marker. |
| Calendar | Anything driven by dates and deadlines. |
| List | A quiet, readable index. |
| Gallery | Visual work, moodboards and ideas. |
Properties
- Text, number, select, multi-select
- Date, checkbox, URL
- Every row opens as a page
Computation
- Formulas:
prop(),if,dateAdd,now() - Relations across databases
- Rollups that aggregate across links
- A bad cell errors alone, never the view
Working with data
- Filters, sorts and grouping
- Scoped row search
- Board sections or swimlanes from a second select property
- Drag updates stage, section, and row order together
- One-click AI analysis
- Designed empty states
AI & agents
Mind Marshal does not provide the AI. It provides the wiring: the editor actions, the workspace chat, and the agents that use whichever model you connect. You bring a ChatGPT, Claude or Kimi plan you already pay for, your own API key, or a local model through Ollama. There is no Mind Marshal AI service in the middle, no resold tokens, and no usage billed by us.
The other half of the promise: opening a page or a board never sends anything to a provider. Assistance happens because you asked for it, using the provider you chose.
Assistance
- Ask AI on any selection
- Chat scoped to a page or the workspace
- Source citations from your own notes
- Attach extra pages as context
- Reopen past conversations
- Live web research when asked
Agents
- Stage-gated workflow automations
- Manual, interval and on-card-enter triggers
- Proposals wait for your approval
- Digest pages summarizing runs
- Inbox ideas promoted to projects without deleting the source
- Five-stage guided journeys with one focused next action
- Proposal-first action plans: discard writes nothing
- Inbox triage with per-item undo
- Project Atlas maps files, stages, tasks, prompts, approvals, recent runs, and failures
Guardrails
- A daily cap on agent calls
- Keys held in the operating system’s own credential store
- Journal crisis support overrides AI tools
- Eligible local actions appear in Activity with Undo
- Irreversible or external effects are blocked, qualified, or require explicit user action
Organization
Projects can stay freeform or use a guided journey. The stage is derived from the work already present, so there is no hidden project-state field to drift out of sync. Guide me reveals one focused next action at a time.
CapturedPreserve the source idea
ShapedClarify outcome and scope
PlannedApprove useful tasks
In motionWork the next action
RealisedClose with a result
Structure
- Nested pages and a sidebar tree
- Rename, duplicate, archive, favourite
- Emoji page icons
- Templates saved with sub-pages
- Thirteen starter templates, including Trading journal and Travel planner
- Template assistant chips for useful next actions
- One-action project scaffold
- Captured → Shaped → Planned → In motion → Realised project journey
- Optional Guide me mode and Continue your journey on Home
Finding things
- Full-text search over titles and content
- Command palette on ⌘ K
- Index rebuild if it ever needs a reset
- Trash with restore
Daily use
- Home with today’s focus
- Daily notes created automatically
- Review today for dated and reminded items
- Review the week for Inbox and the next seven days
- Inbox with an unfiled badge
- Today’s Mac calendar events
- Dark and light, following macOS
- Custom workspace backgrounds
Privacy & data
| Area | What actually happens |
|---|---|
| Workspace storage | One SQLite database in the app’s local data container on your own computer, Mac or PC. No product account is needed to write, organize, search or plan. |
| Credentials | API keys and sign-in tokens are held in the operating system’s own credential store, the macOS Keychain or the Windows Credential Manager, never in the workspace file and never written to a log. |
| Telemetry | No analytics SDK, no crash reporting, no tracking of any kind inside the application. |
| Speech | Dictation asks for microphone access only after you press Dictate and transcribes locally. The built-in neural read-aloud voice works offline. The optional ElevenLabs Chris voice sends selected or current-page text only after explicit consent. |
| Health & recovery | Integrity checks are read-only. Restore is preview-first, the replaced workspace is preserved, and the in-app guide covers safe handling of the SQLite database with its -wal and -shm companions. |
| Backups | AES-256-GCM encryption with an Argon2id key from your passphrase. Restores are staged, and the replaced workspace is kept so a mistake is reversible. |
| Web content | A Content Security Policy is enforced, closing the prompt-injection image-exfiltration class of attack. |
| Calendar | Read locally through the macOS system store, with your permission. No sign-in, and nothing is uploaded. |
| Distribution | The macOS 0.1.24 Universal build is signed with a Developer ID, notarized by Apple, stapled, and delivered through a verified signed updater feed. The Windows 0.1.24 installer includes the same redesigned Home command center, Project Atlas, and unlimited Free Core tier, is Authenticode signed and timestamped for publisher Thomas Whiteford, and also uses a verified signed updater feed. Microsoft Defender scanned every packaged Windows artifact clean. |
Integrations
Every integration is optional, and each one is off until you turn it on.
| Provider | Authentication | Notes |
|---|---|---|
| OpenAI (ChatGPT account) | Browser sign-in | Uses a ChatGPT Plus or Pro plan you already have. No API key. |
| Claude (Pro/Max account) | Browser sign-in, PKCE | Uses your existing Anthropic subscription. No API key. |
| Kimi | Device code | Approve a short code on kimi.com. No API key. |
| OpenAI-compatible | API key | Any /v1/chat/completions endpoint, including Azure, proxies and gateways. |
| Anthropic | API key | Claude models billed per token. |
| Google Gemini | API key | Gemini models billed per token. |
| Ollama | None | Local models. No cost, and nothing leaves the Mac. |
| Integration | Direction | Notes |
|---|---|---|
| Slack | In only | Read scopes only, because nothing is ever posted back. Subscribed channels become inbox items. |
| Discord | In only | A bot in your own server. Personal DMs are never reachable by design. |
| GitHub | Capture in; explicit file push | One-click sign-in or a fine-grained token. Capture-in stays read-only; the editor’s Push code button commits one file through the Contents API only when you press it. |
| Google Drive selected-file links | Read links, manual refresh | Configured builds can link files chosen in Google's Picker with exactly drive.file. No whole-Drive sync, no workspace import yet, and no uploads, edits, moves, deletes, sharing or organizing. |
| Apple calendars (macOS only) | Read, local | iCloud, Google, Outlook and Exchange accounts already on the Mac, via the system store. |
| OS credential store | Local | Storage for every key and token: macOS Keychain, or Windows Credential Manager. |
| Global shortcut | Local | System-wide quick capture. |
| Web research | Out, on request | Fetches and reads sources only when you ask a question that needs them. |
| Markdown | Both | Import and export of block content. |
| Encrypted archive | Both | Portable .mmbackup files. |
| Collaboration relay | Optional | A y-websocket server you run yourself. |
| Updates | In | Signed update feed served over HTTPS. |
Collaboration
For shared editing, run the bundled relay on your own machine or server and point the app at it. Editing is multi-cursor and offline-first, with conflict-free merging, so two people can work on a page and reconcile later. Leave the field empty and the app stays entirely local.
Pricing
| Free | The full local workspace: pages, databases, journal, capture-in, search and export. No account, card or time limit. |
|---|---|
| Pro | $29 USD, paid once. Unlocks the AI and automation features, which you connect to an AI provider of your own. |
| Who supplies the AI | You do. Mind Marshal is not an AI provider and does not resell model usage. Sign in with a ChatGPT, Claude or Kimi plan you already pay for, use your own API key, or run a local model through Ollama at no cost. |
| AI running costs | Nothing extra to us. Whatever your chosen provider charges is between you and them, and Ollama is free because it runs on your own machine. |
| Trial | 14 days with every Pro feature enabled. No email address required. |
| Machines | Up to three of your own computers per license, in any mix of Macs and Windows PCs. Deactivate one to free its seat. |
| If Pro lapses | The local workspace stays editable; the AI and automation features return to the Free limits. |
| Requirements | macOS 10.15 or later, or Windows 10/11 (64-bit). The Mac download is universal, covering Apple Silicon and Intel. |
| Updates | Delivered in-app through a signed feed. |
How it compares
| Mind Marshal | Cloud workspace tools | Local markdown editors | |
|---|---|---|---|
| Where data lives | A file on your own computer | The vendor’s cloud | Files on your disk |
| Cost model | Local workspace free; Pro $29 once, 3 machines | Monthly, per seat | Free, paid sync |
| Databases and views | Six views, formulas, rollups | Yes | Usually plugin-dependent |
| AI | Optional, your own provider | Usually a paid add-on | Plugin-dependent |
| Automation | Built-in, with approval gates | Varies | Plugin-dependent |
| Works offline | Yes | Limited | Yes |
| Telemetry in the app | None | Typically yes | Usually minimal |
Fair questions
| Is there cloud sync? | Not at launch, and deliberately so. Encrypted backup moves a workspace between computers today, in either direction between Mac and Windows. Sync deserves real cryptographic design rather than a rushed feature. |
|---|---|
| What if the publisher disappears? | Your notes are a standard SQLite file you own, readable with or without this app, plus markdown export and portable encrypted backups. |
| Does my writing reach an AI company? | Only when you invoke an AI action, and only to the provider you configured. Choose Ollama and nothing leaves the machine. |
| Could AI costs surprise me? | A daily ceiling on agent calls is enforced in the app. |
| Am I locked in? | SQLite storage, markdown export and portable backups. Leaving is always possible. |
| Windows or Linux? | The current public downloads are macOS and Windows 0.1.24, both with the redesigned Home command center, Project Atlas, and unlimited Free Core. The macOS build is Developer ID signed and Apple notarized, and the Windows installer is Authenticode signed and timestamped. Linux builds are not a supported public launch platform. |