Sync · SAML · PIV/CAC · Self-hosted

AI belongs to whoever runs it.

The sovereign agent platform.

14-day Pro trial · no card · no account

How AZMX works · the whole thing in one shape

The agent acts. The gate restrains. You bridge them.

Two interpenetrating tetrahedra. The upward triangle is what the agent does. The downward triangle is what the trust gate enforces. Where they cross is where you press ↩.

▲ Agent · what it does ▽ Trust · what it refuses

Hover or tap any node

Two tetrahedra. Six steps. One bridge.

The upward triangle is the agent at work — plan, propose, execute. The downward triangle is the trust gate — approve, record, refuse. They interpenetrate at one point: your ↩.

The Agent (amber)Plan · Propose · Execute

The Trust (teal)Approve · Record · Refuse

YouThe keystroke that crosses

▲ Agent ▽ Trust

AZMX AI — ~/app — zsh

Explorer

▾ app

▾ src

app.ts

server.ts

db.ts

compose.yaml

package.json

AZMX.md

server.ts

compose.yaml

11const db = await connect(process.env.DATABASE_URL)

13+ app.get("/healthz", async (_, res) => {

14+ const ok = await db.ping().catch(() => false)

15+ res.status(ok ? 200 : 503).end()

16+ })

18 app.listen(PORT)

● server.ts — proposed by agent · pending review ⏎ Accept⌫ Reject

Agent · local

you

deploy is failing — the app starts before postgres is up

azmx

Last 300 lines: ECONNREFUSED postgres:5432. Compose maps the port but db has no healthcheck, so the app races it. Added a /healthz probe and a depends-on condition.

compose.yaml · 1 hunk

+ db: healthcheck: pg_isready

+ app: depends_on: { db: { condition } }

Ask AZMX · ⌘K commands · ⌘; shell

⎇ main~/appUTF-8 · TS◷ 1.9k tokens · $0.003 · your model — BYOK

★ Star on GitHub No accountNo telemetry Public, signed releases ↗

The product

One window. The whole loop.

Shell, editor, agent, and connections — every dangerous verb behind one approval gate, on hardware you own.

PTY · OSC 7/133

Workspace

A real shell, not a transcript — native PTY, multi-tab, split panes, SSH picker.

PER-HUNK DIFFS

Editor

Edit with AI, diff by diff — CodeMirror 6, vim, accept or reject each hunk.

READS AUTO · WRITES WAIT

Agent

Asks before it acts — sub-agents, MCP, local context, your approval gate.

YOUR AUTH · NO PASTE

Connections

GitHub · K8s · AWS · SSH — through the auth you already have.

↻ one window — the loop closes

Everything it does

One window. Every verb.

Pricing

Pay only for scale.

Individual

Free · forever

The whole product · 83 skills
Any provider · fully offline
No account · no telemetry

Download

Pro · most popular

$20 / mo

E2E-encrypted sync · 2 devices
Strict / Paranoid approval modes
Parallel agents · audit-log export

Buy Pro

Teams

$40 / user·mo

Admin console · SAML · SCIM
DLP egress · org policy · agent sandbox
Shared MCP registry · spend & anomaly alerts

Buy Teams

Enterprise / Gov

Custom

Self-hosted · air-gap policy gate
PIV / CAC · FIPS allowlist
SBOM · SIEM · SOC 2 evidence bundle

Contact sales

Compare every plan & capability →

Your code never leaves your machine. Start free.

The agent that asks before it acts. The keys that stay in a 0600 file. The sync that’s end-to-end encrypted. The Free tier that’s actually the whole product.

Download free Get Pro — $20/mo

14-day Pro trial · no card · no account

Already on a paid plan? Admin console · Enterprise pilot? Talk to sales