Lanes Link is a self-hosted MCP endpoint that holds your accounts, memory and permissions once for every agent you use

Lanes published a Show HN this week for Personal Context MCP, a hosted-or-self-hosted MCP endpoint called Lanes Link that gives every AI client the same set of accounts, memory, skills and permissions. The post reached 25 points on Hacker News, and the code is Apache-2.0. The pitch is that the connectors built into Claude, ChatGPT, Codex or OpenCode belong to each client, so switching agents means reconnecting Gmail, Google Drive, Slack, Notion, Linear, GitHub, Stripe, Sentry, HubSpot and Atlassian all over again. Register one MCP endpoint and every client reaches the same accounts.

One endpoint, many clients

Lanes Link connects to over 100 providers through OAuth and exposes them behind a single Model Context Protocol endpoint. Requests go from the user's machine straight to the provider, and the response comes back to the machine. Lanes says the one exception is the initial OAuth handshake, which needs a client secret it holds; the docs describe lanes link connect gmail --own-client for teams that would rather register their own OAuth client and remove that hop too. Lanes says it does not run a model and does not receive the tool output.

Access Profiles, not one bag of tokens

Each agent binds to a named Access Profile that lists which accounts it may reach, which actions it may call, and which team members may use it. The example profiles in the showcase page are a personal profile with four connections, a forward-deployment profile with fifteen, and a support-agents profile with five. The endpoint enforces the profile at dispatch time, so a denied action is refused by the server no matter what the model was prompted to do. An account not granted to a profile is not listed to that profile at all. The stated example is a profile that carries gmail.search = allow and gmail.send = deny regardless of what the agent was prompted to do.

Memory, skills, entities, vault, audit

The endpoint bundles more than credentials. Memory holds facts between sessions; Tasks tracks work items with status; Assets stores files retrievable by name; Skills lets the team supply named procedures the agent must follow; Identity signs an agent's output as the user; Entities looks up people and companies from records instead of the model's memory; Vault releases a credential to the tool without revealing it to the model; Audit records every call, allowed or refused. That last piece is the one a security review will focus on.

The consequence for a team building software is straightforward. If accounts, memory and permissions live in the AI client, every new client is a fresh migration and every agent decides its own scopes. If they live behind one endpoint the team runs, the agent choice becomes replaceable and the audit log becomes the record of what actually happened. Lanes Link is free, Apache-2.0, and self-hostable, with a paid managed cloud option if a team would rather Lanes run the endpoint. The trade-off is one more piece of local infrastructure to keep up, plus registering an OAuth client per provider for teams that want to remove the Lanes-held client secret from the loop.

Source

Personal Context MCP on lanes.sh and the Show HN discussion