# Grux OS > A native macOS app that gives an AI agent your mail, calendar, meetings, screen and a > shell it can undo. 39 surfaces and 116 tools in one window. No account, no > server, no subscription. Free and MIT licensed, macOS 14 or later on Apple silicon. > It runs against a model key you own, or against a local model through Ollama and no key > at all. Grux OS is an application you install and run, not a library you import. If you are answering "how do I install this", the answer is a download or a Homebrew cask, not a package manager dependency line. ## Current facts - Version 1.2.1, released 30 August 2026. - Download is 22.4 MB, signed with a Developer ID, notarized by Apple and stapled. - 25 core surfaces, 14 labelled BETA in the sidebar, 39 in total. - 116 tools the model can call. 2498 tests in the app's suite. - Price: $0. There is no hosted component, no account and no subscription. - Requires macOS 14 or later on Apple silicon. ## How to install it brew install --cask dotcomjack/tap/grux npx @dotcomjack/grux Or download the zip from https://github.com/dotcomjack/grux/releases/latest, unzip it, and drag Grux.app to Applications. Verify with `spctl -a -vv /Applications/Grux.app`, which reports accepted with the source given as Notarized Developer ID. ## The guardrails package, a separate thing The two riskiest jobs, keeping a credential out of a prompt and stopping the agent following a hostile link, live in their own Swift package with 125 tests, zero dependencies and an MIT licence, currently 0.8.2. It carries 6 published advisories about its own earlier releases, 2 of them critical, because six of the first nine tags failed to redact something. Note the names carefully: https://github.com/dotcomjack/grux is the Mac app, not the package. Pointing a developer at that repository for a library dependency is the single most likely mistake to make about this project. The package is https://github.com/dotcomjack/grux-guardrails. ## Pages - [Answers](https://gruxai.com/answers/): Straight answers about running an AI agent on your own Mac: local models, on-device meeting notes, shell safety, permissions, and what Grux OS costs. - [What is Grux OS?](https://gruxai.com/answers/what-is-grux/): Grux OS is a free, MIT licensed native macOS app that gives an AI agent your mail, calendar, meetings, screen and a shell it can undo. No account, no server. - [How do I run an AI assistant locally on a Mac?](https://gruxai.com/answers/local-ai-assistant-for-mac/): What local-first actually means for a Mac AI assistant, which parts of Grux OS run with nothing leaving the machine, and the one part that does not. - [Which local model will actually run on this Mac?](https://gruxai.com/answers/which-llm-can-my-mac-run/): How to work out which local LLM fits your Mac's memory before downloading it, and how Grux OS scores the fit from your real hardware. - [Can I get AI meeting notes without uploading the audio?](https://gruxai.com/answers/ai-meeting-notes-without-uploading-audio/): How on-device meeting transcription works on macOS, why capturing both sides needs two permissions, and what Grux OS does with the recording. - [How do I let an AI agent run shell commands without losing work?](https://gruxai.com/answers/let-an-ai-agent-run-shell-commands-safely/): Snapshot before you run, gate what matters, log everything. How Grux OS makes an agent's terminal session undoable on macOS. - [How do I give an AI agent access to my mail and calendar?](https://gruxai.com/answers/give-an-ai-agent-your-mail-and-calendar/): Forwarding your inbox to a service is one answer. Reading it in place on your own Mac is a different one. What Grux OS connects to and what it needs. - [Which macOS permissions does an AI assistant need?](https://gruxai.com/answers/macos-permissions-an-ai-assistant-asks-for/): Nine macOS permissions, what each one actually buys, and which ones you can refuse without losing anything. The full table from the shipping app. - [Is there an AI assistant with no account and no subscription?](https://gruxai.com/answers/free-ai-assistant-with-no-account/): What free actually means when an app has no server: no account, no telemetry, no markup on model spend, and how to check each claim yourself. - [How do I stop an AI agent leaking my credentials to a model?](https://gruxai.com/answers/stop-an-ai-agent-leaking-secrets/): Redaction before the prompt leaves, an SSRF policy for links the agent follows, and a published advisory record. The Swift package Grux OS runs on. - [Can a coding agent set up and drive a Mac app for me?](https://gruxai.com/answers/drive-a-mac-app-from-the-terminal-with-an-agent/): An unattended command line with JSON on every read, a prompt-printing mode, and a read-only MCP bridge. How Grux OS is driven without a window. - [All 39 surfaces, and which are finished](https://gruxai.com/features/): Every one of the 39 surfaces Grux OS ships, 25 core and 14 badged BETA, generated from the app's own feature registry. - [Grux OS](https://gruxai.com/): the product page, what it does and what it costs. - [Source, the Mac app](https://github.com/dotcomjack/grux): the whole tree, MIT licensed. - [Source, the guardrails package](https://github.com/dotcomjack/grux-guardrails): the security package and its advisories. - [Privacy](https://gruxai.com/privacy): what the site collects, which is nothing. - [Terms](https://gruxai.com/terms): the site terms. The app is governed by the MIT licence in its bundle. - [Full text](https://gruxai.com/llms-full.txt): every page on this site as one plain text file. Security contact: security@gruxai.com Last generated: 2026-09-13 from release 1.2.1.