Runs on your machine
Daemons, models, and browsers execute locally. No telemetry home, no cloud dependency to inspect a secret or run a model.
Inspectable tools for local models, agent runtimes, and knowledge workflows.
Independent research and open source. Every release ships with its source, verification date, and commit, so you can check it before you adopt it.
/how it’s built
Three commitments under every release
Not features, constraints. They hold across the whole catalog, from the security daemon to the docs you are reading.
Boundaries you can read
Capability scopes, allowlists, and hook contracts are explicit config, not opaque policy. You see exactly what an agent may touch.
Verified before you adopt
Every artifact carries its source repo, release commit, and verification date. The site ingests immutable release assets, never a checkout.
/flagship
Watch what your agents send
The newest CAVI release turns agent egress into something you can see, and catches a leaking secret before it leaves the machine.
New · flagship
secure-agent
An egress-inspection and secret-leak firewall for local AI agents. It watches the process tree, correlates a sensitive-file read with the socket that follows, and flags the leak before your key walks out the door, so you stop rotating credentials three times a week.
- In-harness secret guard gates PreToolUse reads of keychains, SSH keys, and cloud credentials.
- Sliding-window correlation engine ties file activity to outbound sockets outside the vendor allowlist.
- Rotation advisory scores blast radius and writes copy-paste remediation, read-only, nothing rotates itself.
- Pure-Go daemon on macOS Endpoint Security: under 30 MB RAM, under 2% CPU.
installmacOS 14+
Download SecureAgent.dmg → Applications
- License
- MIT
- Status
- Pre-release
- Runtime
- Go daemon + Swift menu bar
- Hooks
- Claude Code · Cursor · OpenCode
/explore
Everything CAVI ships
Seven released artifacts across editors, browsers, runtimes, and packages. Each one links straight to its documentation, source, and install path.
MLX Agent
Discover, adopt, and safely wire local MLX models on Apple Silicon.
Companion for Claude
In-vault companion experience for Obsidian-powered knowledge and agent continuity.
Antigravity
Connect OpenClaw to Google's Antigravity CLI (agy) as a subscription-backed model provider.
Obsidian Agent
Portable, CLI-powered Obsidian workflows packaged for Claude, Codex, Gemini, OpenCode, and AgentSkills.
Bobby Browser
Capability-scoped browser automation across SDK, MCP, and authenticated CDP surfaces.
MCP Eval
Measure the operational cost MCP servers impose on agents and turn repeated friction into queryable findings.
@cavi-ai/
Typed HTTP, WebSocket, and SSE surfaces for compatible agent runtimes, with versioned reference documentation.
install
pnpm add @cavi-ai/api-client/solutions
Or start from an outcome
Each solution connects the job you want done to the products and skills that complete it.
Run models locally
Find MLX models that fit your Apple Silicon host, verify them against an installed runtime, and wire a selected model into an agent workflow.
Open solutionKnowledge workflows in Obsidian
Use companion-for-claude and Obsidian Agent skills for research, note workflows, and handoff.
Open solutionBrowser automation with an audit trail
Give each agent a capability-scoped token, drive the browser through one runtime with shared idempotency and evidence contracts, and restart long workflows from a checkpoint instead of replaying side effects.
Open solution/trust
Check the release before you adopt it
CAVI publishes source, verification dates, and immutable provenance for every featured release. Inspect the boundary, cross runtimes carefully, keep local control.
Featured releaseMLX Agent v0.5.2
- License
- MIT licensed
- Verification
- Verified Jul 2026
- Release commit
- 3498f6e (opens in new tab)