- Windows 10 / 11 on a 64-bit processor.
- macOS 12 or later, Apple Silicon or Intel.
- The installer is 300–400 MB; keep about 2 GB free.
- No Linux desktop build yet. Voice features ask for microphone access.
01 / DESKTOP APPUnsigned community build
OPENVZAGENT.
A long-running desktop AI agent — it remembers you, plans tasks, executes workflows and shows its own run trace in real time.
Latest · v2.2.0-rc.11Open source · MIT · Runs locally
- Version
- 2.2.0-rc.11
- Released
- Aug 1, 2026
- License
- MIT
- Price
- Free
One thing first
This is an unsigned community build, so Windows SmartScreen and macOS Gatekeeper will warn as designed — the steps below show how to allow this one app. Download only through this page, and never disable system security globally for it.
02 / INSTALL
THREE STEPS AND IT RUNS.
The runtime, native database modules and an offline Chromium ship inside the installer. No separate Node.js, Python or browser to set up — it works the moment it finishes.
WINDOWS · X6401 / 2
Windows
- 1Choose “Download for Windows” and save OpenVZ-Agent-Setup.exe.
- 2Open the installer. When SmartScreen appears, choose More info → Run anyway.
- 3Finish the wizard and launch OPENVZ Agent from the Start menu.
The “unknown publisher” warning is there because this community build has no code-signing certificate yet. The stable release will be signed.
MACOS · APPLE / INTEL02 / 2
macOS
- 1Apple menu → About This Mac: “Chip: Apple” means the Apple Silicon build, “Processor: Intel” means the Intel one.
- 2Open the downloaded DMG and drag OPENVZ Agent into Applications.
- 3On first launch, Control-click the icon and choose Open. Still blocked? System Settings → Privacy & Security → Open Anyway.
Allowing this one app that way is enough — no sudo, and no commands that turn Gatekeeper off globally.
03 / USING IT
WHAT TO DO ONCE IT OPENS.
It is not a chat box. It plans a task, does the work itself, and shows you every step while it happens. Three things get you started.
- 1
Add one API key
First launch opens the activation screen. Paste a key from any compatible provider — DeepSeek, Qwen, Moonshot, MiniMax, Zhipu — and save. The key is encrypted on your machine and never passes through us.
- 2
Say what you want, in one sentence
Brief it like a colleague: “every morning, turn the new posts on these three sites into a summary for me.” It drafts a plan first, then executes once you agree.
- 3
Watch it work, take over anytime
The side panel streams its reasoning, the page it is driving and the terminal output. Files, shell commands and browser actions each need your approval, and any step can be paused or rewritten.
Good first jobs to give it
01◆
A daily briefing
Poll sites, an inbox or a group chat on a schedule and hand you the digest — it keeps running with the window closed.
02◆
Repetitive web work
Sign in, filter, export, fill forms. The built-in stateful browser keeps the session so it does not start over.
03◆
Questions about local files
Point it at a folder, let it index, then just ask. Answers cite the source and nothing leaves the machine.
04◆
Your own systems
Attach internal tools or third-party services over MCP; new capabilities go through the same approval and audit path.
Upgrades back up config and the database first — chats, memories, workflows and MCP setup all survive. Uninstalling keeps your data by default.
04 / NEXT2.3.0 · in development
WHAT THE NEXT RELEASE ADDS.
These already work in the code and are not packaged into an installer yet. The downloads at the top of this page are still the current release, and that is what you get today.
01◆
The browser becomes something you can watch
Instead of driving a browser you never see, it drives a live web page embedded right in the interface — you watch it click and type, and you can pull that panel out into its own window and keep working in it.
02◆
Answers that cite the document
Import material into topic areas and ask questions against it; answers point back at the exact document and version. The files stay on your machine.
03◆
English and Chinese throughout
The whole interface, the activation screen and the startup sequence each ship in both languages, switchable at any time.
04◆
MCP servers you can manage
Add, remove, enable and disable MCP servers from settings, and see which tools each one contributed and whether it is connected. Credentials are stored encrypted.
05◆
Scheduled work
Have it wake itself at a set time to do one thing, without you being there.
06◆
Reach it from your phone or iPad
Turn on local network access and it issues its own certificate and hands you a pairing passphrase and QR code — open it on the same Wi-Fi and carry on the conversation.
Progress and source are public on GitHub; this page updates the moment the build is packaged.
05 / FAQ
WHAT PEOPLE ASK BEFORE INSTALLING
Why does my system say the app is unsafe?
Because this build has no code-signing certificate yet, and Windows SmartScreen and macOS Gatekeeper warn about any unsigned app. The installers are produced by GitHub-hosted runners from public source; follow the Install steps above to allow this one app, and leave your system security settings alone. The stable release will be signed and Apple-notarised.
Apple Silicon or Intel — which build?
Open the Apple menu → About This Mac. “Chip: Apple M1/M2/M3/M4” means the Apple Silicon build; “Processor: Intel” means the Intel one. This page picks for you on most browsers, but Safari and Firefox hide the chip, so confirm manually there. The wrong build harms nothing — it just runs far slower or refuses to launch.
Does it cost anything, and does my data leave the machine?
OpenVZ Agent is free and MIT-licensed. It runs entirely on your own computer, and chats, memories, tasks and the database stay local. The only outbound traffic is the model provider API you configure yourself, plus whatever pages and tools you explicitly ask it to reach.
It can drive my browser and files — is that safe?
Files, terminal, browser, MCP and workflows all pass through one permission layer: sensitive actions ask before running, every run is replayable in the audit record, and logs redact credentials. Browser work uses an isolated profile that blocks localhost and private-network addresses unless you grant access.
Will upgrading lose my data?
No. An upgrade writes a versioned backup of your config and database under backups/ before migrating in place. Chats, memories, tasks, media, workflows and MCP setup are all preserved, and a failed migration attempts an automatic restore. Uninstalling keeps your data by default.
Is there a Linux build?
No public Linux desktop installer yet. The repository runs on Node.js 24, so you can clone it and use npm start, or run the backend alone with npm run start:backend, which listens on http://127.0.0.1:3721. Watch GitHub Releases for packaging progress.
Still stuck? GitHub Issues ↗ · Contact →