Open source · MIT · runs on your machine

Your own AI agent.
Knows you. Works on your goals.

It browses, builds and follows up — in your chats, on your machine, with any model.

$ curl -fsSL https://polyrob.dev/install.sh | bash
Chat: the agent checks a project, runs the tests, deploys a private preview and leaves the public release for approval

Ask in plain words. Watch every step, its time and its cost.

Features

One agent. Real work, done where you talk.

#1 Connect

Lives in your chats

Telegram, WhatsApp, Discord, Slack, Signal, email, terminal and web. One agent, one memory, wherever you talk.

#2 Pursue

Durable goals

A goal board that survives restarts. With autonomy on, it schedules runs and follows up.

#3 Build

Ships real apps

It edits code in a real shell, tests it in a sandbox and puts the app live behind a public URL you approve.

#4 Browse

Uses the web

A real browser that logs in, clicks and fills forms — plus structured data from popular sites.

#5 Commerce

Commerce-ready

Its own wallet on EVM and Solana. Pays and charges over x402, capped per day. Opt-in, unaudited.

#6 Serve

Ship it as a product

REST, A2A, MCP, /v1. Per-user isolation, metering, credits. One MIT install, no seats.

#7 Remember

Remembers you

Local memory across sessions. With autonomy on, it drafts skills from what worked; you review them first.

#8 Delegate

Tasks multiplied

It hands subtasks to parallel sub-agents with a narrower toolset.

Apps & cloud

Everywhere you work. Coming soon.

Native apps for desktop and phone, and a hosted cloud for people who do not want to run a server. Self-hosting stays free.

DesktopmacOSComing soon
DesktopWindowsComing soon
DesktopLinuxComing soon
MobileiOSComing soon
MobileAndroidComing soon
CloudPOLYROB CloudHosted for you · paid plansComing soon
Commerce-ready

A wallet with guards you set.

Opt-in. Unaudited. Start on a testnet. Every on-chain write goes through the same checks.

  1. 1Declarewhat leaves, what must arrive
  2. 2Simulateon a pinned RPC
  3. 3Assertbalances match the claim
  4. 4Capper-tx, daily, owner queue
  5. 5Sign & recordone readable ledger
EVM chainsSolana
Pay
x402 for resources; above the ceiling, you tap
Charge
x402 paywall on its own endpoints
Call
Contract calls — simulation decides
Signer
Optional separate process, own OS user, own caps
Identity
ERC-8004 on-chain agent registration
NFTs
Hold, send, revoke — no approval-grant verb

Payments & wallet guide →

Channels

One agent. Every place you talk.

Same memory, same goals, everywhere. Send it photos and files; it sends files back.

TelegramWhatsAppDiscord SlackSignalEmail TerminalWeb console
terminal
$ polyrob chat                # talk to it
$ polyrob run "…"             # one task, then exit
$ polyrob gateway             # every channel, one process

› /inbox                      # what needs you
› /goals                      # what it is working on
› /model                      # pick the model
› /pause                      # stop all autonomous work
Toolbox

Real tools, out of the box.

Connect

MCP, both ways

Use any MCP server, or serve its tools to others.

Run

Docker and SSH

Optional Modal, Daytona and Vercel packs.

Mail

Its own mailbox

Read, reply, forward, file. Every recipient gated.

Social

Its own X account

Posts and DMs. Posts wait for your tap.

Decide

One inbox

Approvals on every channel. They fail closed.

Context

@file @url @diff

Plus a knowledge base from your folders.

Voice

Local transcription

Send a voice note; it reads it.

Profiles

Many agents

Own keys, memory and goals per profile.

All capabilities → Skills →

Safety

You stay in charge.

  • Off until you turn it on. Autonomy, wallet and money features are separate switches.
  • Untrusted input is data, never instructions. Pages, emails and tool output are marked.
  • Four access roles. Owner, correspondent, group member, denied.
  • High-impact actions wait for you. Approvals fail closed.
  • Skills are quarantined. Scanned and reviewed before they act.
  • Your machine, your keys. Self-hosted needs no account and no dependency on us.

Security model →

Under the hood

Python and SQLite. No external database.

Runtime
Python 3.11+ · Linux, macOS, WSL2 · SQLite, no external database
Models
OpenAI, Anthropic, Gemini, DeepSeek, OpenRouter, NVIDIA NIM · Ollama, LM Studio, vLLM · switch mid-chat
Interfaces
CLI + REPL · REST · A2A · web console · opt-in /v1 and MCP server
Extend
Skills (SKILL.md) · MCP servers · custom model providers · packs
Deploy
Installer or pipx · Docker · systemd · Fly.io · updates with rollback

Architecture → Compare with other agents →

FAQ

Questions

Is it free?

Yes. The engine is MIT and self-hosting is free, with nothing behind a paywall. You pay only your model provider — or nothing with a local model. A paid cloud is coming for people who do not want to run it themselves.

Which models can it use?

OpenAI, Anthropic, Gemini, DeepSeek, OpenRouter and NVIDIA NIM are built in. Any OpenAI- or Anthropic-compatible endpoint (Ollama, LM Studio, vLLM, a company gateway) goes in one providers.yaml.

Does it act on its own?

Only if you ask. A fresh install answers you and does the task you give it. Switch autonomy on and it keeps a goal board, runs schedules and follows up.

Should I give it a wallet?

The wallet is off by default and unaudited. When on, every write is simulated and checked against what the agent declared, then a per-transaction limit, a daily cap and your approval queue apply. Start on a testnet with a small cap.

How do I stop it?

Send /pause from any channel, the CLI or the console. It stops all autonomous work, or one scope such as the wallet, and survives a restart. /resume starts it again.

Where does my data go?

It stays on your machine. Calls go out to your model provider and the tools you enable. The installer sends one anonymous count after a fresh install; --no-telemetry or DO_NOT_TRACK=1 turns it off.

Is it a coding agent?

It edits code and runs tests, but it is a general agent: it browses, messages, schedules, remembers and can hold a wallet — as a long-lived service, not only in one terminal.

Can I move from Hermes or OpenClaw?

Yes — see the Hermes and OpenClaw migration guides and the dated comparison.

Can I run it for other people?

Yes. Run it as a service with the console, the REST API or the OpenAI-compatible API. Per-user isolation, metering and credits are built in. Isolation is a software boundary; run separate instances for hostile tenants. See deployment postures.

Can I run more than one agent?

Yes. Named profiles give each agent its own keys, persona, skills, memory and goals on one machine.

Running in three steps

1

Install

One command. It finds Python 3.11+ and runs a setup wizard.

2

Connect a model

Paste any provider key, or point it at a local model.

3

Give it work

polyrob chat to talk, polyrob run "…" for one task.

$ curl -fsSL https://polyrob.dev/install.sh | bash

Prefer pip? pipx install "polyrob[all]" — see the install guide.