Security & privacy
You stay in control. Always.
Bring your own key, keep your keys secure, and stay in control when someone else joins your session — the design is host-sovereign from the ground up.
Pairing
Host-sovereign, end-to-end encrypted
A sighted teammate can join your session, but only ever as an assistant — never an owner.
- Remote pairing is end-to-end encrypted, so the relay that connects host and peer cannot read your session content
- Host-sovereign by design: a peer is always an assistant, never an owner
- View, send, and approve are three separate capabilities, each granted and revoked independently — no silent escalation
- Every peer prompt and tool decision is audited
- If the link drops, the system fails safe and sole control returns to the host
- The host is always informed, visually and audibly, of exactly who is connected
Keys & permissions
Your keys, your approval
Bring your own key, stored where the operating system keeps secrets — and approve every change the agent makes.
- Free, bring-your-own-key: use your own Anthropic credentials for the model
- API keys are stored in the operating system’s secure storage, never in a plain file
- Accessible Claude prompts for approval before every file write, edit, or shell command
Code the way that works for you.
Free, and it uses your own API key. Download for Windows, or join the waitlist for updates and other platforms.