A local-first AI agent framework. Your machine is the source of truth; the cloud is just a connector.
Nimbus is a headless agent runtime that builds a private, on-device index of your work across about 95 cloud services, then executes multi-step agentic workflows on your behalf — without your data ever leaving your machine unless you approve it.
- 🔒 Local-first — a private SQLite index lives on your machine. Cloud services are connectors, never the system of record.
- 🧑⚖️ Human-in-the-loop is structural — the consent gate lives in the execution engine, not in a prompt. It cannot be bypassed or configured away.
- 🔑 No plaintext credentials — in the gateway, secrets live only in the OS vault (Windows DPAPI / macOS Keychain / Linux libsecret). Never in logs, IPC, or config.
- 🔌 MCP-native — every integration is a Model Context Protocol connector. The engine never calls a cloud API directly.
- 🖥️ Platform equality — Windows, macOS, and Linux are first-class. CI gates on all three.
A growing roster of about 95 first-party connectors across Google, Microsoft 365, GitHub, GitLab, Slack, Jira, and Notion — plus observability, CI/CD, security & quality, feature-flags, GitOps, data & BI, deployment, finance, and support tools. Optional local-filesystem indexing rounds it out.
Clients — the CLI, a VS Code extension, and a Tauri 2.0 desktop app (built, not yet released) — talk to the headless Gateway over local JSON-RPC 2.0 IPC. A browser web clipper (Chrome + Firefox) saves what you read straight into your index over the gateway's paired, local HTTP surface. Any MCP client, a coding agent for example, reaches your index and the built-in agents through the MCP launcher. Install the gateway + CLI via Homebrew, Scoop, or native installers (.msi / .pkg / .rpm).
# Homebrew (macOS / Linux)
brew install nimbus-agent/tap/nimbus
# Scoop (Windows)
scoop bucket add nimbus https://github.com/nimbus-agent/scoop-bucket
scoop install nimbusLocal inference is supported through Ollama, so nimbus ask can run entirely offline.
| Repo | What it is |
|---|---|
| Nimbus | The gateway — Gateway, CLI and desktop UI; it bundles the first-party connectors |
| nimbus-mcp-servers | @nimbus-dev/connectors — the first-party MCP connectors in one package; each also runs standalone for any MCP client, without the gateway's vault, sandbox or ledger |
| nimbus-mcp | @nimbus-dev/mcp — launcher for the Nimbus MCP server, so any MCP client reaches your index and agents |
| nimbus-sdk | @nimbus-dev/sdk — MIT, dependency-free authoring contract for MCP connectors & extensions (published to npm) |
| nimbus-client | @nimbus-dev/client — MIT typed JSON-RPC 2.0 IPC client for the gateway, used by the CLI & extensions (published to npm) |
| nimbus-vscode | VS Code / Open VSX extension — ask + search your index from the editor |
| nimbus-web-clipper | Chrome + Firefox (MV3) browser extension — recognises the page you are on and runs the agents against it; also clips articles & selections into your index |
| create-nimbus-connector | Scaffolding generator for first-party-style MCP connectors |
| homebrew-tap | Homebrew distribution channel |
| scoop-bucket | Scoop distribution channel |
| linux-repo | Linux (apt / yum) package distribution channel |
| awesome-nimbus | Curated connectors, recipes, extensions & community resources |
| nimbus-security | Security model & vulnerability disclosure |
| nimbus-trust | The signed trust feed every install applies: key revocations, takedowns & verified publishers |
| nimbus-benchmarks | Public performance benchmarks & trend dashboards |
- Runtime: Bun v1.2+ · TypeScript (strict) · Biome
- Engine: multi-step executor with a structural HITL consent gate
- Index: local SQLite with hybrid embedding search
- Connectors: sandboxed first-party MCP servers
- License: AGPL-3.0 (Gateway / CLI / connectors) + MIT (SDK & client)
Security is enforced as code, not convention: a numbered set of security invariants, each with a production wiring site, a docs entry, and an enforcement test that all land in the same commit. Secret scanning with push protection, Dependabot security alerts, SHA-pinned GitHub Actions, and protected release branches & tags back the supply chain.
Found something? Please report it responsibly via a private security advisory on the Nimbus repo.
Built to keep your data yours. 🌩️