dot, a small white ball with two dark eyes

localDot

An AI with a computer of its own.

dot does real work on a computer of its own, right on yours: a Linux desktop with a browser, a
terminal and everyday apps, running in Docker. You watch from your browser or your phone, step in
whenever you like, and every task is recorded.

Install

macOS (Apple silicon) or Linux (x64), in Terminal:

curl -fsSL https://downloads.localdot.dev/install.sh | bash

Windows, in PowerShell (alpha, runs through WSL 2):

irm https://downloads.localdot.dev/install.ps1 | iex

The installer checks Docker and walks you through anything missing, then prints a link. Open it,
pick a model, and give dot something to do.

localdot open prints a fresh sign-in link, localdot update installs the latest release and
keeps your data, and localdot doctor diagnoses a problem.
Install guide · Use it from your phone or a server

What dot does

localDot at work: dot's computer shows Kiyomizu-dera's website in Chromium, dot says what it is doing under the screen, and the chat lists what it found while planning three days in Kyoto

Watch it work. Live, from your laptop or your phone. You see every click and keystroke as it
happens.
Step in any time. Take control and the mouse is yours. Hand it back and dot picks up where
you left off.
You decide how often it asks. Custom, Auto or Full access. Even with full access, dot asks
before buying anything or deleting things online.
Use any model. An API key from 25 providers, your ChatGPT or Claude plan, or a model on
your own machine. Switch any time.
Rewind anything. Every task is recorded step by step. Scrub back to see exactly what dot
did.
Share the good part. Trim to the moment, speed it up as much as 16 times, add captions and
save it as a video.
A dot for every job. Everyday, coder, researcher, finance, video editor or designer. Each
brings only the skills its work needs, so it stays focused and spends nothing on the rest.
Open source, and yours. The app, dot's computer and every recording stay on your machine,
and your keys live in a local vault.

Pencil sketch of what dot can do on its own computer: use the screen, a web browser that keeps your sign-ins, a terminal and files; search the web and do deep research with numbered sources; talk with voice; use your apps as tools; run routines on a schedule; keep an editable memory; and ask you before it acts as you.

Models

dot needs a model that can read screenshots and use tools. Add one in Settings → Models, then
pick it from the message box.

API keys: Anthropic, OpenAI, Google Gemini, Azure OpenAI, xAI, Mistral, DeepSeek, Groq,
OpenRouter, Together, Fireworks, Cerebras, Perplexity, Cohere, DeepInfra, Moonshot, Alibaba,
Z.ai, Zhipu AI, MiniMax, Volcengine Ark and SiliconFlow.
Plans: your Claude plan through Claude Code, your ChatGPT plan through Codex, and the
MiniMax and Alibaba token and coding plans.
Your own: any OpenAI- or Anthropic-compatible server, including Ollama and LM Studio on your
machine.

Hosted models see screenshots and the task's context. Model options

Safety

Pencil sketch of six walls between dot and the internet: hard checks, purpose check, approvals, the isolated computer, the network gate and stand-in keys. Searching, reading and clicking pass straight through; sending an email as you asks; posting your notes to a random site asks; poking the router is blocked; smuggling out an API key only gets a stand-in.

dot works on its own computer, not yours. Reading, searching, clicking and running code there just
happen. How often it asks first is up to you:

Custom, the default, asks before dot sends or posts anything as you, pays for something,
uploads your files, changes your account's security, or changes or deletes things online.
Auto lets a reviewer model approve routine steps. Purchases, sign-ins and online deletions
still ask you.
Full access gets on with it, and still asks before every purchase and before deleting
things online (once per site).

Your LAN, your router and cloud metadata are always blocked. Your real keys stay in keyd, a small
local service: dot only ever holds stand-ins, and the real key is added on the way out, for that
key's own hosts. Passwords go through a private form straight into the site, so dot never sees
them.

Pages, search results and app responses reach the model marked as untrusted. An optional purpose
check flags private data heading somewhere unrelated to the task. This is alpha software, so
review what dot does with your accounts. How the agent runs ·
Purpose check

How it works

Your browser talks to the localDot daemon on your machine, which serves the app, runs tasks,
streams dot's desktop and records every step. dot's computer is a set of containers: the desktop
you watch, a web browser that keeps your sign-ins, the agent's loop, and a gate that is its only
way out to the network.

Pencil sketch: your browser and phone talk to the localDot daemon on your machine, which runs an isolated computer of four containers: desktop, web browser, brain and gate. The gate leads to keyd, which holds the real keys and adds them on the way out to model providers, the web and your apps. Web search and page reads go through keyd with no sign-ins or keys, and each app that runs as a program gets an app cell of its own.

A task goes round a simple loop: act, take a fresh look at the screen, say what happened, and
repeat until it's done. When dot needs you, it asks in the chat.

Pencil sketch of one task: ask, plan, act, look, narrate, replay. Act, look and narrate repeat until the task is done; when dot needs you, it asks in the chat.

Folder	What's in it
`apps/daemon`	The daemon: API, agent loop, safety checks, tools and recordings (TypeScript on Node)
`apps/web`	The app you open in your browser (React)
`apps/site`	localdot.dev and the film
`packages/protocol`	Types shared by the daemon and the app

Run it from source: development guide.

Help

Open an issue with what you did and what
localdot doctor says.
Other devices: Tailscale, an SSH tunnel, or the optional relay in Settings
(remote access).
localdot uninstall removes localDot and keeps your data in ~/.localdot.

Licence

MIT. Third-party notices are in THIRD-PARTY.md.