Skip to content

Flowlight 0.1.2

Choose a tag to compare

View all tags
@blessdyb blessdyb released this 22 Sep 07:00
· 369 commits to main since this release
v0.1.2
77cfef5

Early preview. Flowlight shows which app on your Mac talked to which domain, over which protocol, and how much it sent. It watches AI agents, and now the tools and MCP servers they start, for anything you wouldn't approve.

What's new in 0.1.2

  • Per-agent allowlists. "Claude Code may talk to GitHub and npm, nothing else." Add domains (subdomains included), IPs or CIDR ranges, or start from a preset (GitHub, npm, PyPI, Homebrew, Docker Hub, Rust crates, Go modules, Apple). The agent's AI providers and your local network are always allowed. Anything else raises a critical Allowlist violation alert and is marked Not allowed, with a one-click Allow. Allowlists alert; they don't block.
  • Tool and MCP server attribution. Flowlight follows the process tree back to the agent that started each process, so the curl, git push or npm install an agent's shell tool runs counts as the agent's traffic, labelled via curl. MCP servers are named from the agents' own configs (Claude Code, Claude Desktop, Cursor, Windsurf, VS Code, Codex, Zed, Gemini CLI): via github MCP. Attribution is per process, not per individual tool call.
  • Update checks. Flowlight looks for a new release on launch and daily, and Download & Open verifies the disk image against the release's SHA-256 before opening it. Turn it off in Settings › General. (Earlier versions don't have this, so install 0.1.2 by hand once.)
  • About window with copyright, license and links.
  • Relicensed from MIT to the GNU General Public License v3.0.

Install

  1. Download Flowlight.dmg, open it, and drag Flowlight into Applications, replacing the old version if you have one. Prefer an installer? Use Flowlight-0.1.2.pkg.
  2. First launch: this preview isn't notarized yet, so macOS will say it can't verify the developer. Right-click Flowlight in Applications, choose Open, then Open again. You only need to do this once. On macOS 15 and later you can also use System Settings › Privacy & Security › Open Anyway.
  3. Approve the one-time Name Your Traffic setup so Flowlight can read hostnames.

Your history, settings and hostname setup carry over from earlier versions.

Requires macOS 15 or later. Universal (Apple silicon and Intel).

Checksums (SHA-256)

9b3cc3fe4116b88a23c26b541de729fefde6a008069151f0aa089bc9bf6cc9d0  Flowlight.dmg
9a5a84f51205e2adadac9bf6e6773234316032ab6b60404cad970c44548cb73d  Flowlight-0.1.2.pkg
Assets 5
Loading