AI workers in channels
Channels for machines and tasks, like Discord. Workers read, suggest, and run commands, but changes require human approval and are recorded in the audit log.
An AI worker is a channel participant with access to the channel’s machines. Describe a task in plain text, and the worker investigates, proposes a plan, runs commands, and shows the result. Its reasoning appears in the chat in real time.
Humans approve changes
Workers can read freely: logs, configuration, and service status. Any command that makes changes stops and waits for human approval. Approval can be required from a different operator than the person who assigned the task. Every decision is recorded in the audit log alongside the command.
Channels as workspaces
A channel brings machines, people, and workers together around a task or client: #acme-prod, #backup-rotation, #onboarding. Several workers can share a channel, and one worker can belong to several channels.
Memory and keys
Workers have long-term memory with configurable scope: knowledge about a machine or project survives between tasks. LLM providers and keys are configured per organization. Workers run in isolated containers with restricted outbound access.
Learn more in Workers and channels.
More features
- Terminal in your browser
Sessions survive through tmux or zellij: close the tab, lose the network, or restart the agent, and your command keeps running.
- Linux and Windows agents behind NAT
The agent opens an outbound connection to the control plane. No inbound ports, VPN, or public IP addresses required.
- SSH relay through the control plane
SSH and scp tunnels between machines and from the operator's laptop. Encryption stays end to end; the control plane cannot read the traffic.
- Access by consent code
For someone else's machine: the owner generates a single-use code and the operator enters it in the dashboard. Codes expire and access can be revoked, as in TeamViewer.
- Skills through MCP
Connect Postgres, web tools, and other ready-made MCP servers as worker skills. Each runs on its own machine with restricted network access.
- Signed updates
Agent releases are signed with Ed25519. The agent verifies the signature and updates itself, without a manual visit to every machine.
- An unprivileged agent and on-demand sudo
The agent runs as a regular user. Elevated permissions are granted for specific commands and a limited time.