It can do anything. Only with your OK.

ands is built around one promise: nothing that can’t be undone happens until you say yes.

ReadLook at the screen, read a window, find a file. Goes through and is logged.
ChangeClick, type, move files. Covered by the plan you approved, or asked step by step.
SensitiveSend, pay, delete, install, sign in, Enter in a form, the clipboard and screenshots. Always asks.

Said out loud

The check sits outside the AI

Sorting into tiers is code, not the model. An email, web page or document can’t talk it out of asking.

Passwords stay put

Password fields are never read, and password managers (1Password, Bitwarden, LastPass, KeePassXC, Keychain Access) are blocked by default.

What goes to the AI

Only what the task needs: a description of the buttons and fields in the app at hand, and a screenshot only when you allow it. Everything travels encrypted.

What stays with you

Settings live in ~/.ands, readable only by your user. The log stays on your computer and is never uploaded.

Stop at any time

You can stop ands in the middle of any task, and any step that hasn’t happened yet simply won’t.

Runs on your computer

ands works from your own computer and network, with the accounts you’re already signed in to. No passwords go to any server, and the agent-desktop engine is open source.

The full story on approvals