A security-first, local-first operating system for personal AI agents with 30+ LLM providers and 14 messaging channels, fully self-hosted. Built on Electron + React + Node.js 24+, primarily supporting macOS.
Overview#
CoWork OS is an open-source operating system for personal AI agents with a security-first, local-first design philosophy. Built on Electron + React + Node.js 24+, it primarily supports macOS with 949+ commits and 70 releases.
Core Capabilities#
Multi-LLM Provider Support (30+)#
- Built-in 12 Providers: Anthropic (Claude), OpenAI (GPT-4o, o1), Google Gemini, AWS Bedrock, OpenRouter, Ollama (local free)
- Compatible/Gateway Providers 20+: Groq, xAI (Grok), Kimi (Moonshot), Mistral, Cerebras, GitHub Copilot, Qwen, MiniMax, Venice AI, etc.
Multi-Channel Messaging Gateway (14 channels)#
- WhatsApp, Telegram, Discord, Slack, Microsoft Teams, iMessage, Signal, etc.
- Security modes: paired, whitelist, open; rate limiting, environment modes, scheduled tasks
Skills System (100+ built-in skills)#
- File Operations: read/write/delete/rename/search files
- Document Generation: Excel (.xlsx), Word (.docx), PDF, PowerPoint (.pptx)
- Browser Automation: Playwright integration (12 tools for navigation, screenshots, clicks, form filling)
- Web Search: Tavily, Brave, SerpAPI, Google Custom Search
- Web Scraping: Scrapling integration (anti-bot bypass, Cloudflare penetration)
- Code Tools: glob/grep/edit_file (Claude Code style)
Advanced Features#
- Digital Twin Personas: Role-specific AI avatars (Software Engineer, Product Manager, VP, etc.)
- Agent Teams: Multi-agent collaboration with persistent teams
- Think With Me Mode: Socratic brainstorming (read-only)
- Build Mode: Idea-to-prototype 4-stage workflow
- Knowledge Graph: SQLite-based entity/relationship memory
- Usage Insights: Task statistics, cost/token tracking
MCP (Model Context Protocol)#
- MCP Client: Connect to external MCP servers
- MCP Host: Expose CoWork tools as MCP server
- MCP Registry: One-click server installation
Security Mechanisms#
- 3200+ tests (132+ security unit tests, 259+ WebSocket protocol tests)
- Configurable guardrails: Token budget (1K-10M), cost limits ($0.01-$100), iteration cap (5-500)
- Approval workflows: Destructive operations require user consent
- Sandbox isolation: macOS sandbox-exec or Docker containers
- Encrypted storage: OS keychain + AES-256 fallback
- ZeroLeaks security audit report publicly available
Installation#
Option 1: DMG Installer (macOS)#
# Download latest .dmg from GitHub Releases
xattr -dr com.apple.quarantine "/Applications/CoWork OS.app"
Option 2: npm Global Install#
npm install -g cowork-os
cowork-os
Option 3: Build from Source#
git clone https://github.com/CoWork-OS/CoWork-OS.git
cd CoWork-OS
npm install && npm run setup
npm run build && npm run package
Enterprise Integration#
Supports Salesforce, Jira, HubSpot, Zendesk, ServiceNow, Linear, Asana, Okta, and cloud storage services including Notion, Box, OneDrive, Google Workspace, Dropbox, SharePoint.