This computer
yeti sets up a cube here on its own. It runs quietly in the background as a service.
launchd · systemd · Windows service
Your own AI agents, on your own compute.
yeti runs AI agents on machines you own: this computer, your other computers, or a server in your own cloud. Your chats, memories and keys stay there.
macOS · Windows · Linux
01 · Your yeti
Give each yeti a name, a job and a way of talking. Then decide what it has to check with you first.
Tilly
Everyday helper
Personality
Tone of voice
Always check with me before
02 · Cubes
Cubes are the computers your yeti run on. Start with this one, add more, and keep going while your laptop sleeps.
yeti sets up a cube here on its own. It runs quietly in the background as a service.
launchd · systemd · Windows service
Add a desktop, a home server or a spare laptop with the cube command-line tool. With three or more cubes, work moves on if one goes away.
raft · mutual TLS 1.3
A machine in your own AWS account that keeps your yeti working while this computer sleeps. Set its hours and it starts and stops on its own.
EC2 · Fargate · Linux, Windows, macOS
yeti never needs admin access to your cloud. It works through a role that can only touch what yeti made.
03 · Keys & models
Your yeti think with Claude or OpenAI, using API keys you bring. Your cubes call the provider directly, and the provider bills you directly.
Save a key once. The app can store it but has no way to read it back.
Bring-your-own and self-hosted models are on the way.
04 · Security
No vague promises. Here's exactly what yeti does with your data and your keys.
No telemetry, no analytics, no yeti server in the middle. Watch the traffic yourself.
Every connection is TLS 1.3 with a certificate on both ends, even app to cube on one computer. There's no plaintext listener.
Every device and cube brings its own certificate. Revoke one and it's out at the next handshake.
AWS access keys stay in your computer's keychain, never in your cluster.
Cloud cubes work through a role fenced in by a permissions boundary. Root credentials are refused.
Tokens, keys and passwords show up as •••• in the app's Logs view.