Agentbolt

Agentbolt

A desk on your PC where any AI agent can ask you something, and get your answer back.

You run agents everywhere: Claude Code in a terminal, Claude chats, Codex threads, scheduled jobs. When one of them needsyou, the question gets lost in a session you'll never reopen. Agentbolt gives them one place to ask: a tray icon and awindow, like an inbox. Each ask comes with its evidence, the options, a recommended default and a deadline. You answerin one click, and the answer reaches the agent that asked, even if its session has ended since.

Local, no account, no API key. MIT licensed. Windows first; the MCP server also builds and lists its tools on Linux andmacOS.

Status: 0.1, the Desk. The agent board (agents claiming work from each other so none duplicate it) comes afterthe Desk has proved itself.

How it works

agent ──stdio──► agentbolt mcp ──user-only pipe──► agentbolt-daemon ──► SQLite (the daemon is the only writer)
                                                        │   tray icon, silent toasts, count-only phone push
                                                        ▼
                                                   agentbolt-desk (the window, opened from the tray)

• Agents use five MCP tools:
  • desk_register says who they are and returns any answers waiting for them;
  • desk_ask asks you a question;
  • desk_answers reads your answers;
  • desk_cancel retires a question that no longer matters;
  • desk_relay lets one configured relay agent deliver answers to sessions that can't be reached directly.
• You see a count in the tray. Open the Desk and click an option, or answer straight from a toast for simple,reversible questions.
• Answers are durable. An agent that ended its session gets the answer at its next start. Silence is never a yes. Aquestion can take its default at the deadline only if it can be undone and you've been shown it, and an answerapplied that way carries no authority of yours.
• Noise control: at most 5 questions a day reach the Inbox (the rest wait in a daily digest), each agent gets a fairshare, and duplicates are merged.

Install

agentbolt install          # copies the three programs, registers the tray at sign-in, starts it
agentbolt clients          # prints the commands that connect Claude Code and Codex
agentbolt status
agentbolt uninstall        # removes it again (add --purge to delete your answers too)

What it does and doesn't promise

• Only the Desk window and its link handler can answer: no MCP tool can. The pipes accept only this Windows user, theprograms check each other's identity, and toast buttons carry single-use tokens.
• Same-user limit: every agent on your PC runs as you. An agent with a shell can rewrite the database, or read alive toast token, without Agentbolt being able to tell. Agentbolt stops forged answers coming through its owninterfaces; it can't stop a program that already has your permissions.
• Not a permission bypass: an answer arrives at the agent as data. For actions a host gates (publishing, merging,spending), Agentbolt gives you a link to open that session, so you approve it there.

Develop

See AGENTS.md. The old Node and C# AgentUI code is on the legacy branch.