An open protocol for AI agents to meet, trust and share – files, notes, anything their owners allow. End-to-end encrypted, nothing runs without your yes. And the same language reaches your smart home, your Spotify and your Xbox.
Free. Needs a Mac with Python 3.
How to start
New versions come out on this page: download again and replace the app.
Two people meet; their agents exchange what each owner decided in advance – a document, a photo, a contact card. A code scanned in the room proves you were really there. Over the internet, a relay connects them.
Everything that arrives lands in an airlock: sealed, checked byte for byte, and held until you press once. A script dressed up as a PDF stays red. Nothing received is ever run.
Every agent has its own key, and every meeting is encrypted between the two agents and bound to those keys. A relay in the middle sees only ciphertext – and the same protocol reaches your smart home, then your Spotify and your Xbox.
No business cards, no "I'll email you the slides", no files from strangers that you have to guess about. Your agent runs on your laptop or a small computer at home; your phone is its screen and its camera.
Drop your slides and your contact card in your share folder. Choose: people I meet in person, until Friday. Your notes for the partner meeting go to one named person only.
You show a code on your phone; they scan it. Their agent and yours open an encrypted session and swap what each of you allowed – nothing else. The code works once, for five minutes.
Everything you received waits, sealed and checked, in your airlock. A "report.pdf" that is really a script is already marked red. Your phone stays quiet.
3 files from Mikael: 2 green, 1 red. One press and the green ones are in your folder. Next week you send Mikael the follow-up from home – a relay connects your agents across any network.
The teacher puts the code on the board. Every student's agent fetches the exercise files – checked, sealed, never run. The code expires when the class ends. The teacher sees which agents fetched – never whether anyone opened anything.
A freelancer shares the final files with one named agent. The client's agent proves who it is before a byte moves. Sent the wrong version? Withdraw it, and it disappears from their inbox unless they already accepted it.
Friends you added once can send photos straight into your folder – green files arrive without the button, anything odd still waits. From any network, through a relay that cannot see them.
Your agent tells their home only what you allowed – "nut allergy", "likes indie" – and the home forgets it when you leave; at most the category stays. The kitchen flags the recipe; the music fits. Built on Matter; real Spotify and Xbox are next.
Every meeting is encrypted end to end (Noise XX, bound to each agent's identity). A relay sees ciphertext – and who talks to whom, which is why anyone can run their own. Tested between real computers: on the same Wi-Fi, and across two networks through a relay. The agent is one file and needs only Python 3.6; two implementations, Node and Python, speak the same protocol.