Which program connected where?
A macOS network extension observes connections, their owning processes, destinations and byte counts. It does not open TLS or read encrypted request and response content. Some connections reveal only an IP address.
WATCHTOWER / HOW IT WORKS
Four sources. One local picture.
Runtime MCP traffic, agent hook events, per-process network flows and presence answer different questions. Watchtower brings them together without sending your records off the Mac.
Runtime activity, with presence as context.
What crossed the tool connection?
A local proxy records MCP messages between an agent client and its configured servers while forwarding the messages unchanged. This view depends on which servers you route through Watchtower.
Tool arguments can contain sensitive text. Secret-shaped values are redacted before storage; result previews are bounded. Review redaction and retention settings before using it with sensitive work.
What did the coding agent report?
Configured agent integrations add activity the MCP proxy misses, including built-in tool use. The current alpha includes Claude Code and Codex recording. This is a reported record, not proof that an agent reported every action.
Was the Mac present or away?
Lock, sleep, console-session and idle signals produce away-and-back transitions. Watchtower records a state, a reason and a time, without recording keystrokes, mouse movements or screen contents. Presence is context, not proof of intent or authorization.
A session has context.
Inspect tool records alongside process-attributed connections and the Mac’s presence state. An action while you were away deserves a closer look; it may also be an expected background task. Watchtower helps you review that distinction without deciding for you or blocking the work.
THE RECORD AND THE READING
Evidence first.
Interpretation labelled.
Sensor records provide the timeline. Rules and the on-device model add flags and readings, with their origin visible. A flag is a reason to inspect the underlying record, not a verdict that an action was malicious.
Model features use Apple’s on-device Foundation Models framework. They require Apple Intelligence and model availability. When the model is unavailable, deterministic records remain useful.
PRIVACY & DATA
Your activity belongs on your Mac.
- No event uploads, account, cloud sync or app telemetry.
- The model has no tools or network access. Its readings are labelled as interpretations.
- Export and delete remain available regardless of license status.
- The default retention is 30 days of full records and twelve months of session rollups.
- The optional automatic update check contacts the release feed. Watchtower discloses the request in Settings and shows its own network flows. You can turn automatic checks off.
These product pages add no analytics, cookies or third-party runtime scripts. Downloading from GitHub, sending email or making a future website purchase involves the service you choose to use. The app does not send your activity records to those services.