Local-first and safe by process

Stays on your machine. Writes stay guarded

Core features run on your computer, and every change to agent configuration is checked, backed up and reviewed before it is written

Stays on your machine

  • Core discovery, diagnostics, Skill management and session handoff need no AgentKib account, cloud database or model API
  • Ordinary discovery and diagnostics do not call a model or upload project assets
  • Credentials, cookies, tokens, private keys, environment files and message databases are not cataloged as assets or written to logs
  • Quota collection is off by default. When you turn it on, the bundled third-party tool CodexBar may read claude.ai cookies, Claude Code OAuth credentials and local logs to fetch usage

Guarded writes

  • Before a write, AgentKib checks path boundaries and original hashes, creates a backup and asks for your review
  • Changes to an Agent Home use a separate high-risk confirmation
  • Report vulnerabilities privately through the security policy
Security policy