AGI Desktop

Some work cannot happen in a tab.

A web page cannot start a process on your computer. That rules out a shell, a sandboxed run, an MCP server sitting on your disk, and a model answering from your own hardware. Desktop is the build with a process of its own, written in Rust and shipped as a Tauri 2 application.

See installer availability How Local mode works

Why a native app

Each of these needs a process running on your computer.

Local modelsRuntimes on your hardwareDesktop talks to Ollama, LM Studio, llama.cpp, and vLLM on the ports they already listen on, and it can pull or remove an Ollama model without leaving the app.

Your filesAllowed DirectoriesA path outside the folders you added stops the run and opens an approval naming the exact directory. Protected system paths are refused outright.

ExecutionAn OS sandboxTool commands run under macOS Seatbelt or Linux bubblewrap. When a run needs the network switched off and neither is present, Desktop refuses to execute at all.

ConnectorsMCP over stdioA connector can be a program on your own disk, launched by the app and spoken to over stdio. SSE and streamable HTTP servers attach the same way.

Folder access

The first path outside your list stops the run.

Desktop resolves every local path a tool asks for before that tool runs. Paths already inside your Allowed Directories go straight through. A path outside them raises this, naming the exact directory and the capability being asked for, and a protected system path is refused without a prompt at all.

How the other tool gates work

file_read · readHigh risk · reversible

you

Read the specs in ~/work/handbook and summarize what changed.

Allow file read to access new folders

The agent requested local paths that are outside your current Allowed Directories.

directories

~/work/handbook

undo

Persistent folders can be removed in Settings → Allowed Directories.

Specifications

The whole thing is ordinary local software.

Engine	Tauri 2 · Rust backend · React frontend
Ollama	http://localhost:11434
LM Studio	http://localhost:1234/v1
llama.cpp	http://localhost:8080/v1
vLLM	http://localhost:8000/v1
Shells	Zsh · Bash · Fish · Sh · PowerShell · Command Prompt · Git Bash · WSL
Sandbox	macOS Seatbelt · Linux bubblewrap
MCP transports	stdio · SSE · streamable HTTP
Provider keys	Encrypted with a key held by the OS credential store
Storage	SQLite on your own disk, encrypted at rest

Desktop availability

Desktop installer availability

macOS gets the AGI Cloud desktop app (cloud accounts only) when a signed build is published. Linux x64 package assets exist, but a download is offered only after the release API verifies the matching updater signature. Windows installers have not been published, and no release dates are available for them.

macOS
Checking the release channel…
Windows
Windows installer not published
Linux x64
Checking the signed release channel…

On your disk

The chats stay in a database on your machine.

Desktop keeps conversations, projects, and settings in a local SQLite database that is encrypted at rest, keyed from a per-install secret the operating system's own credential store holds.

How the database is keyed

Installer verification and platform support live on the download page

AGI