Your agents edit your repos all day. af360 is the thing that watched. It reads everything, changes nothing, and tells you what changed, what is quietly going wrong, and what exists only on this disk. Answers your AI agents read-only, over MCP. Free.
**Deterministic by design.** af360 reads everything and changes nothing.
You know the feeling. An agent ran for an hour, twelve files moved, and
you cannot say which. A project from four months ago is sitting on your
disk and nowhere else. A key you rotated is still in git history. A cert
expires on a Sunday.
af360 watched all of it. Ask it.
ā” **Ask it from your agent.** Claude Code, Cursor, VS Code and Claude
Desktop connect over MCP in one click. `blast_radius`, `changed_since`,
`session_verify`, `agent_handoff` and four more. Read-only by
construction: nothing an agent asks can change anything, and text found
on your machine is returned as content, never followed as instructions.
š **Quiet checks, written as suggestions, never alarms.** *"Found: a
key-shaped string in orbit-cli's git history. Worth doing:
config/deploy.yml at commit a91f2c has something shaped like an API
token. Removed later, but history keeps it. Rotate it if it was real."*
Secrets stay masked everywhere they travel, including the clipboard.
š **It finds infrastructure you forgot you owned.** Reads your own
project files, spots a hostname in an `.env.example`, offers to watch
it. Names the file and the line.
š **Nothing expires without warning.** Cert dates read from the sites
themselves, domain renewals, trials you add. One timeline.
š **The brag card.** Whole estate on one image: lines of code, language
split, oldest project and its first commit, what is unpushed, which
agents asked what. Save it and post it.
š Day and night, simple and dev views, full Arabic interface, and a
tray icon that keeps watching after you close the window.
**On the network:** af360 makes no connection on its own. Site checks,
domain lookups and GitHub each have their own switch, domain lookups off
by default. No account, no telemetry, no servers of mine. GitHub is
device flow against a read-only App and af360 refuses the connection if
GitHub ever reports more than read access. `af360 --verify` checks the
install is what shipped.
Windows, free, no caps.
**Post your estate card. I want to see how bad other people's machines
are.**
Show me your cards :)