Install and operate the Discord bot that records calls, transcribes each person, and creates minutes, decisions, and tasks.
The shortest path from a new server to your first recorded call.
git clone https://github.com/resolvicomai/kassinao.git
cd kassinao
cp .env.example .env && chmod 600 .env
mkdir -p recordings && chmod 700 recordingsDISCORD_TOKEN=paste_the_bot_token
APPLICATION_ID=paste_the_application_id
DISCORD_CLIENT_SECRET=paste_the_client_secret
APP_URL=https://kassinao.your-domain.comdocker compose up -d --build
docker compose logs -fTranscription and minutes are optional. Configure a provider after validating recording, login, and downloads.
Kassinão is a persistent voice bot. It must stay connected to Discord.
Vercel and Netlify do not keep the voice gateway WebSocket alive. Use Docker on a persistent machine.
Configure Discord first, then the public URL, and only then start the container.
In the Discord Developer Portal, create an application. Copy the Application ID, generate the bot token, and copy the OAuth2 Client Secret.
Register exactly APP_URL/auth/callback under OAuth2 Redirects.
Use the bot and applications.commands scopes. The project permission number is 68242432.
https://discord.com/oauth2/authorize?client_id=YOUR_APP_ID&scope=bot%20applications.commands&permissions=68242432Permissions: View Channels, Send Messages, Embed Links, Read Message History, Connect, and Change Nickname.
With Cloudflare Tunnel, point the public hostname to kassinao:8080. Set TUNNEL_TOKEN and COMPOSE_PROFILES=tunnel.
Direct IP is for testing only. Discord OAuth accepts HTTP only on localhost.
Start Compose, follow the log, and open /health. Recordings live in the ./recordings volume.
docker compose up -d --build
docker compose logs -fStart with the required block. Open the remaining groups only when you need the feature.
The .env file is already ignored. Generate COOKIE_SECRET and MCP_SECRET with openssl rand -hex 32 and never reuse the same value.
Discord automatically shows Portuguese or English names based on the client language.
/record [channel]
Joins your voice channel and starts a recording with one separate track per person. Admins can target another visible channel.
/stop
Ends the recording, provides the private link, and starts the transcript and minutes queue.
/note <text>
Saves a note at the current second. The panel also includes actions to mark a moment or write a note.
/status
Shows the current recording state when you have permission to follow it.
/recordings
Lists accessible recordings and opens the private workspace with search across transcripts, minutes, and notes.
/ask <question> [days]
Searches by topic, person, call date, or deadline and replies only to you with evidence and links to the exact second.
/autorecord on|off|view
Configures automatic recording per channel and the minimum number of people required to start.
/config minutes-channel|view
Chooses the channel for the generic processing notice or displays the current configuration. Details and links stay in authorized DMs.
/mcp new|revoke-all
Generates a connection code or revokes connectors. It only appears when MCP is enabled. Regular members use the connection page.
/help
Opens the interactive bot guide for recording, downloads, questions, privacy, and auto-record.
/about
Shows the author, AGPL-3.0 license, and source code.
That is where the bot can validate server, channel, and permissions. Replies from /ask are ephemeral and only visible to the person who asked.
From the voice-channel command to the private workspace.
The bot joins the channel, posts the panel, and adds [RECORDING] to its nickname. Capture starts only after the notice.
Opus packets are decoded to PCM and one ffmpeg process per person records continuous synchronized FLAC. No diarization guesses the speaker.
Use /note or the panel buttons. Marks appear on the page, in the transcript, and in Audacity labels.
Use /stop. The bot also ends when the channel empties, reaches the limit, or is disconnected. Extended silence triggers a warning, not a stop.
The preprocessed mix powers the player immediately. MP3, FLAC, mix, and Audacity projects are generated on demand and cached.
VAD normally sends only speech segments; if detection fails, fixed chunks keep the call from being lost. Then minutes create a summary, decisions, and tasks.
Recording works without AI. When enabled, AI runs after the call and never decides who spoke.
Build the image with LOCAL_TRANSCRIBE=1 and use the included wrapper. The command must write a JSON array with start, end, and text to {output}.
TRANSCRIBE_PROVIDER=command
TRANSCRIBE_COMMAND=python3 ./scripts/transcribe-local.py {input} {output}
WHISPER_MODEL=smalldocker compose build --build-arg LOCAL_TRANSCRIBE=1
docker compose up -dVoice is personal data. Server-side access control applies to every open, search, and connection.
The bot joins the channel, posts a panel, and changes its nickname to [RECORDING] before capturing audio.
The page requires Discord OAuth and current server membership. Leaving the server ends access.
In every channel, only call participants, including muted participants, the starter, or a current admin can open it. Later permission does not unlock the past.
If Discord cannot confirm access, the page denies it. The MCP API returns a temporary error when the check is unavailable.
Audio can expire before transcripts, minutes, and notes. The operator can also delete only audio or delete everything.
Cookies and MCP use different secrets. Rotating MCP_SECRET revokes every connector without changing access rules.
Replace DISCORD_TOKEN, DISCORD_CLIENT_SECRET, TUNNEL_TOKEN, and API keys. Security issues must be reported privately.
Bring meeting memory to Claude, Cursor, or another MCP client without copying the archive to the machine.
It does not serve audio, delete recordings, or widen permissions. Every request goes through the same web access check.
Set a dedicated MCP_SECRET with at least 32 bytes and restart. The /app/conectar-ia page and API exist only when this secret is present.
openssl rand -hex 32Open /app/conectar-ia, sign in with Discord, and create a named connection. Copy the one-time code and run the displayed command: it asks for the code with hidden input, saves the token in a protected local file (0600 on macOS/Linux; inherited profile ACL on Windows), and prints a secret-free config. The computer needs Node.js 20 or newer.
{
"mcpServers": {
"kassinao": {
"command": "npx",
"args": ["-y", "kassinao-mcp@1.0.5"],
"env": {
"KASSINAO_URL": "https://YOUR-KASSINAO",
"KASSINAO_PROFILE": "PROFILE_PRINTED_BY_THE_COMMAND"
}
}
}
}The same flow works without a browser: an ID listed in OWNER_IDS generates a code with /mcp new and exchanges it in the terminal.
npx -y kassinao-mcp@1.0.5 exchange --stdin --url https://YOUR-KASSINAOlist_meetingsLists meetings in a time range.
pending_actionsCombines pending actions and deadlines.
search_meetingsSearches transcripts, minutes, and notes.
who_saidFinds what someone said about a topic.
get_meetingOpens a complete meeting dossier.
The refresh token lives under ~/.config/kassinao-mcp, protected by mode 0600 on macOS/Linux and by the inherited profile ACLs on Windows, and rotates on renewal. Revoke one connection on the page, use /mcp revoke-all, or rotate MCP_SECRET to revoke everyone.
Always start with docker compose logs -f. The bot validates configuration on boot and explains invalid variables.
Confirm DISCORD_TOKEN, APPLICATION_ID, and DISCORD_CLIENT_SECRET. Also verify that APP_URL is an HTTP or HTTPS origin without a path, query, or hash.
docker compose logs --tail=200 kassinao
Confirm the invite included applications.commands and that the bot is already in the server. Restart the bot. If GUILD_ID is set, commands are registered only in that server.
Register exactly APP_URL/auth/callback under OAuth2 Redirects. In production, APP_URL must use HTTPS. After changing the origin, update the redirect and restart.
The service is in a profile. Set COMPOSE_PROFILES=tunnel or run docker compose --profile tunnel up -d. In Cloudflare, the internal target is kassinao:8080.
Confirm TRANSCRIBE_PROVIDER is not none and that its provider key exists. Check queue logs. Recording and downloads remain valid without AI.
With MINUTES_ENABLED=auto, minutes only enable when OPENROUTER_API_KEY or GROQ_API_KEY is set. Also verify MINUTES_PROVIDER and provider limits for long calls.
This is expected when MCP_SECRET is empty. Generate a dedicated secret of at least 32 bytes, different from COOKIE_SECRET, and restart the bot.
Confirm they are still in the server. In every channel, they must have joined the call, started the recording, or be a current admin. Later channel access does not unlock history.
Free disk space on the host or carefully adjust MIN_FREE_MB_START and MIN_FREE_MB_ABORT. The abort threshold cannot exceed the start threshold.
This is tiered retention. RETENTION_DAYS controls audio and TEXT_RETENTION_DAYS controls transcript, minutes, and notes. Use zero to disable automatic expiration.
Code, MCP, configuration, and the right support channels.
Try a command such as record, a variable such as APP_URL, or a topic such as privacy.