> tool_os

The governed agent workspace.

A browser-based operating system where AI agents work inside your rules. 27 app surfaces, a policy engine on every tool call, and a manifest-driven ecosystem.

Sign in with GitHub. No credit card. No trial limits.

Three things, done right

A workspace for building, a policy engine for governing, and an ecosystem for extending. All in one browser tab.

Workspace

27 app surfaces in a spatial window manager. Chat, browser, code editor, canvas, notebook, task board, and more. The agent sees what you see.

Governance

Every tool call passes through the policy engine. RBAC for humans and agents. Quarantine flow for high-risk operations. Full audit trail via OpenTelemetry.

Ecosystem

Manifest-driven tools, plugins, and MCP servers. 9 capability kinds. Install from the registry, governed by default. opentool.json is the universal contract.

A desktop in your browser

Floating windows, a taskbar, and an agent that works alongside you. No extensions. No plugins. Just open a tab.

Chat
Browse HN and summarize the top stories
Navigating to news.ycombinator.com...
Write a report and save it
main.rs
use axum::Router;
use tower_http::cors;
 
// Policy engine intercept
async fn intercept() {
  evaluate(&call)
}
Canvas

Everything your agent needs

Six core tools in one workspace. Your agent has access to all of them — and so do you.

Chat

Talk to your AI agent. Ask questions, give instructions, iterate in real time. The agent sees your workspace and responds in context.

Browser

Built-in web automation. Your agent can navigate, click, fill forms, and extract data from any website. No extensions needed.

Files

Syntax-highlighted code editor with full file system access. Your agent reads, writes, and refactors code alongside you.

Canvas

Visual design surface. Drag blocks, arrange layouts, build UIs. The agent can create and modify canvas layouts from a prompt.

Policy Engine

Every tool call is intercepted and evaluated. ALLOW, BLOCK, QUARANTINE, or REDIRECT. The agent cannot bypass this. Nobody can.

Cost Ledger

Real-time cost tracking per session, per provider, per model. Know what you are spending on inference. Budget caps prevent surprises.

Three steps. Zero setup.

No downloads. No installs. No configuration files. Just open it.

1

Sign in

One-click GitHub OAuth. No credit card. No trial limits. You're in.

2

Workspace loads

Your desktop initializes. The agent connects to providers and mounts tools.

3

Start building

Chat with the agent, browse the web, write code, design on the canvas. Everything is connected.

Built in the open

Rust backend. React frontend. Apache 2.0 license. Self-host it, fork it, contribute to it.

Rust + Axum React + Tailwind Apache 2.0 OTEL instrumented Self-hostable
# clone and run
$ git clone https://github.com/Opentool-io/opentool
$ cargo run --bin opentool-web
[boot] loading runtime...
[boot] mounting workspace...
[ready] tool_os on :9900