A home for the agent you already run. Follow its work live, and approve its next move from anywhere.
The same turn from your agent, rendered two ways.
In a group-chat app
[tool] edit services/proxy.ts --- a/services/proxy.ts +++ b/services/proxy.ts @@ -41,7 +41,7 @@ - bodyLimit: "100mb", + bodyLimit: "2gb", [approval required] pnpm test Reply YES to approve, NO to deny. > YES [tool] run pnpm test Tests: 86 passed, 0 failed Done. Large uploads go through, and the new test locks it in.
In Macchiato
Run the test suite?
ApprovalLong runs do not need you at the desk. When your agent hits a permission gate, your phone gets a push.

Set the server port to 8080
nowNeeds your decision
Terminal sessions vanish. Macchiato keeps every conversation synced, searchable, and on all your devices.

Every thread, one tap away.

Search across everything.
A small connector links your agent to Macchiato. Pick yours.
Anthropic's coding agent
OpenAI's coding agent
Open-source personal assistant
Self-hosted personal agent
Macchiato is the front end. Your agent keeps running wherever it lives.
Keep the agent you already have, on your own machine. Macchiato does not host it.
Pair once from the app. No ports to open, no tokens to copy around.
Your agent dials in, and its replies stream straight into the conversation.
Record a voice note and your agent transcribes it. No separate dictation step.

Attach files inline. They render in the thread, not as a download dump.
Watch the answer arrive token by token, and interrupt the moment you have enough.
A one-time code to your email. Nothing to forget, nothing to leak.
Your agent — and everything it remembers — runs on your own machine. Macchiato is the encrypted line to it, not a place your data moves to. You pick how private each conversation is.
Encrypted in transit and at rest. The agent and its context stay on your machine — our server is a searchable mirror, so your chats sync across devices, stay searchable, and reach you by push.
Flip on end-to-end encryption for any single conversation. Its text becomes ciphertext our server can't read — the keys live only on your device and your own agent. Available on iOS today, for message text.
We don't sell them.
We don't use them to target ads.
We don't train models on them.
See exactly what’s covered — including the honest limits, like attachments not yet being end-to-end encrypted.
Claude Code, Codex, OpenClaw, and Hermes today. Each connects through its own open-source connector, and more are on the way.
A small open-source process that runs next to your agent and dials out to Macchiato over a WebSocket. No inbound ports, no tunnels, and you can revoke it from the app at any time.
They sync to Macchiato's cloud. That is what makes cross-device history and full-text search possible. Everything is encrypted in transit and at rest, and never sold, used for ads, or used to train models.
Yes. Turn it on per conversation, and only your iPhone and your own agent hold the keys. The server relays ciphertext it cannot read.
No. Your agent keeps running on your machine, with your keys and your setup. Macchiato is the messenger in front of it.
It is free to use today. If paid plans arrive later, the free tier stays useful.