Mac app is out · Open source

A crew of AI agents. On your Mac and your servers.

A native Mac app for Claude Code, Codex and Grok. Give each agent a role and a schedule, let the crew work on your own servers, and approve every risky step with one click.

macOS 14+ · Apple Silicon and Intel · All versions on GitHub

ForgeCodexNeeds you
Today
Add tests for the billing webhook and open a PR.
Wrote 14 tests. Two failed on currency rounding — fixed by keeping amounts in cents.
$ cargo test billing::
   Compiling billing v0.4.2
    Finished test profile in 3.1s
test result: ok. 14 passed; 0 failed
Needs youForge wants to runrisky: git push*
$git push origin feat/billing-webhook-tests

Runs the agents you already use

Official command-line tools only, signed in by you, on your own server.

How a job goes

One job, start to finish

Watch a task travel from one sentence to an open pull request, and see where you step in.

  1. 01

    You say what you need

    Write it in plain words. The main agent hands the work to the crew.

  2. 02

    The crew gets to work

    Forge writes the code and the tests, Scout reads the diff, Quill updates the docs.

  3. 03

    Risky steps wait for you

    A push is exactly what Bandito stops. The card shows the command, word for word.

  4. 04

    One click, and it ships

    Approve, and Forge pushes the branch and opens the pull request.

  5. 05

    Your phone knows too

    Approvals and replies also reach you in Telegram, so you can answer from anywhere.

The crew

Meet the crew

Six raccoons, one job each. Hire your own in a minute.

Atlaslead

Hands out the work and never takes the credit.

Forgebuilder

Pushes at 3 a.m., but always asks first.

Night Owlauditor

Never sleeps. Reads every dependency.

Quilldocs

Fixes your README before you notice.

Scoutreviewer

Reads every line of your diff.

Watchon-call

Awake when you are not.

Schedules

While you sleep

Schedules run on the server, not on your laptop. Close the lid and the night shift clocks in.

  1. 02:00Night Owl audits the dependencies
  2. 04:00Forge runs the full test suite
  3. 06:30Watch reads the production logs
  4. 08:00Scout’s summary is waiting for you
Inside the app

Try it right here

Services, skills and bots in one store

Connect a service once and every agent can use its tools. Install ready-made bots and skills, or publish your own and share a link.

Your servers, in one window

See load, disks, ports, secrets, devices and backups of every server. Add a server over SSH, Tailscale or a direct connection, and move an agent between servers with its settings, memory and chat history.

Screen

Watch the server screen, take control and hand it back. On Linux servers.

Browser

A real browser on the server for your agents. Take over when a page needs you.

Terminals

Panes, splits and layouts. A terminal can open inside a container.

Files

Browse, preview, edit and upload files on the server.

Everything in the window is clickable

Setup

Ready in 2 minutes

  1. 01

    Get the app

    Download Bandito for Mac and open it. Signing in is optional.

    Download for Mac
  2. 02

    Connect a server

    Use this Mac, or run one command on a VPS or home server and pair it with a code.

  3. 03

    Build your crew

    Create agents, give them roles and schedules. They keep working on the server; anything risky waits for your yes.

dev@vps-tokyo-1: ~
$ curl -fsSL bandito.dev/install | sh
→ downloading bandito (linux, x86_64)
→ checking the SHA-256 … ok
→ installing to ~/.local/bin/bandito
→ starting the service (systemd) … ok
$ bandito pair
amber-lamp-river-oak-fern-mist
vps-tokyo-1 is connected
Privacy and safety

It all stays on your machines

Bandito has no cloud for your code. Agents run on your servers and talk to the model providers directly.

Tap a node to see what lives there

Agents ask first

Commands that can hurt wait for you. A command Bandito cannot read in full is asked about, never allowed silently.

Your code and keys stay put

Code, API keys, sign-ins and chat history live on your servers. We never receive them.

Some things are off limits

Agents can never touch Bandito’s own files or stop its service, in any mode and under any rule.

Your model providers

Claude, Codex and Grok receive what your agents send them, under their own terms. Bandito is not in between.

An account is optional

Signing in only syncs your server list, shortcuts and prompts. Usage statistics are anonymous and you can turn them off.

Agents talk to the providers directly, from your server.

Read the privacy page

Open source

Read every line that touches your servers.

The daemon and the apps are source-available under FSL-1.1 and become Apache 2.0 two years after each release. Use it, change it, self-host it.

Yes. The Mac app and the server daemon are out, and we build them in public. Download the app above.

Bandito doesn’t replace Claude Code, Codex or Grok: it runs them. It adds what a terminal doesn’t: a crew of agents with roles and schedules, work that goes on a server while your Mac is closed, one-click approvals (Telegram too), and servers, terminals, files and a browser in one window. It isn’t a code editor, so it sits next to Cursor, not instead of it.

Bandito runs the official Claude Code, Codex and Grok command-line tools, signed in by you, on your own server. API keys work too. Each provider’s terms decide how their plans may be used.

No. Pick “This Mac” and Bandito runs a small service on your Mac. A VPS or a home server is better for agents that should keep working while your Mac sleeps.

The app needs macOS 14 or later on a Mac with Apple Silicon or Intel. The daemon runs on Linux and macOS: a VPS, a home server, or this Mac.

Yes, from version 0.1.13: one universal app for Apple Silicon and Intel, macOS 14 or later.

No. Agents run on your server and talk to the model providers directly. We only see your email if you join the waitlist, plus anonymous usage statistics you can switch off.

No. Signing in is optional. It only syncs your server list, shortcuts and prompts between devices.

Approvals for risky actions, your own allow, ask and deny rules, and protected actions that are always refused. It is a safety net, not a wall, so keep agents you do not trust in a sandbox.

You can download it, and the source code is public. Pricing isn’t final yet. We’ll share it before anything becomes paid, and people on the waitlist will hear first.

Hire your first crew.

Download Bandito, connect a server, and your first agent is at work in about five minutes.

Follow the build

Release news and early invites. One email when something big ships.

No spam. We only write about releases.

A Bandito productionNo raccoons were harmed