Skip to content

Repository files navigation

Switchboard

The gateway between your AI and everything you use it for.

Switchboard is a Mac app that sits in your menu bar and brokers every call. Apps ("wrapps") run through your Claude Code or Codex runtime, or a supported local model. Your tools, your files, your context are lent to them through one consent gate — never copied out, never handed over.

It runs both ways, and that's the point:

  • Wrapps use Claude. A wrapp is just a page — no backend, no API key of its own. It asks Switchboard, which lends it your AI, your connected tools, and your project context.
  • Claude uses Switchboard. A Claude Code session connects to the same gate and runs your wrapps — picking work off your board, calling a wrapp's actions, driving your apps. Your AI gets hands.

Same broker, one consent gate, on your machine.

Building an app? See model discovery and provider compatibility for Codex support, model selection, and live capability updates.

Your AI, your tools, your data — patched through one board you own.


Why Switchboard?

Today's AI is scattered across dozens of apps. Context gets lost, subscriptions are fragmented, and your data is spread across multiple providers.

Switchboard brings everything together in one private workspace where AI apps share context, not your data. The model, the tools, the context, and the files stay on your machine. Apps bring only a UI — they never hold your API key and never see your data.


The notch — where your AI reaches you

The black pill around your camera is dead space. Switchboard turns it into the place your AI talks to you.

Anything that needs you — a decision, an approval, a guided step, a heads-up — appears as a card right at the notch. You answer with a keystroke and never leave what you're doing:

  • ⌥1 / ⌥2 / ⌥3 pick an option · ⌥→ confirm the ⭐recommended one · ⌥↑ back · ⌥↓ type your own answer · Esc dismiss.

Every card carries a provenance headerwho is asking (which thread, which app) and which project it belongs to — so it's never a mystery prompt. The card can speak (on-device voice), and when a picture lands better than prose it shows a diagram instead of options.

The notch is presence, not just this Mac. A card here can come from a wrapp, from a Claude Code session finishing a task, from Guru mid-walkthrough — or from a teammate, over Slack (see Teams & Slack below).

The tray. Minimise a surface — the whiteboard, a card, a live feed — and it docks as a chip at the notch instead of vanishing. Hover to see what's there; a deliberate tap opens the full panel; click a chip to bring it back exactly where it was.

Answer by drawing. A decision card doesn't have to be letters. Open the whiteboard, and a card can be answered by sketching on it — Claude reads the drawing back.


The assistants — always there

  • God — ⌃⌥ click. Your all-purpose assistant. It sees your screen and helps: points at the right thing, types, clicks, and runs apps for you — always under your consent. Talk to it, and it talks back.
  • Ask — ⌃⌃. Type a question across everything you're working on — projects, tasks, notes, history — and God answers grounded in your own work, not a blank slate.
  • Guru. A live guide. It walks you through any task on any app, step by step, pointing a cursor and adapting to what's actually on your screen — a manual can't do that.
  • Flow — ⌃⌥ hold. Dictation, done right. Hold, talk, and it types — anywhere on your Mac, transcribed on-device.

The surfaces

Switchboard is a launcher, a sketchpad, and a full private workspace — always one keystroke away, all sharing the same context.

The whiteboard — sketch straight to Claude

Open a floating board, draw the thing, hit send — no screenshots, no describing a layout in words. It's an infinite canvas with shapes, sticky notes, connector arrows that stay bound to what they point at, and pasted screenshots you can mark up. Claude draws too: it can seed the board with an editable diagram, and a decision card can be answered by drawing on it. Past boards reopen from a filmstrip — still editable, not flattened to an image.

The launcher — ⌥⌥

A spotlight for your work: jump to a project, launch an app, find a file, or ask across everything — from anywhere, without leaving what you're doing.

The workspace — ⌘O

A full private workspace built over your vault. Thirteen surfaces, each a lens on the same data — never a separate silo:

Home · Tasks · Calendar · Bank (your projects) · Dashboard · Needs · Routines · Workflows · History · Graph · Dictionary · Apps · Store.

Add a task and it lands on the calendar; finish a run and it's a receipt in History; establish a project in Bank and every surface — and your Claude — reads the same context.

Tasks is a real kanban — Backlog → Todo → Doing → Blocked → Review → Done, drag to move. Paste a scattered brain-dump and your own Claude turns it into detailed cards, bundled together, with blockers marked between them — parked in Backlog for you to promote when you're ready.

Claude runs your wrapps — the reverse flow

This is the half most people miss. Connect a Claude Code session to your workspace (one click — a Connect Claude Code card appears in your notch during setup) and it can pick up work from your board: move a task to Todo, then tell Claude "pick up the next task" — it claims the top unblocked one, does it, and marks it done, moving the card across as it goes. It can run your apps headless and scaffold new ones the same way. This is how Guru and the workspace get real hands.

The store

Native and web apps that share your context and run on your AI. Install what you need, nothing you don't.

Your vault

A project is a few .md files you own — essence, tasks, notes, artifacts. Every app reads the same context; nothing is copied out, and you can revoke any grant at any time.


Teams & Slack — send work to someone's Mac

Switchboard is single-player by default, but the same broker runs a whole team on one shared folder — no new protocol, no server that sees your data.

  • Team Mode. N people, N Claudes, one folder. The shared vault syncs over a sealed channel (AES-256-GCM, star topology); each person points the team at a real local folder, and each person's own model works on it under their own grants. There's no login — membership is an invite code.

Slack → someone's notch

Link your Slack handle and a slash command lands work straight on a teammate's Mac. Two modes, same route — the command name picks which:

  • /notch @handle <task> — the passive drop. The task lands on their board and raises a "New task" card at their notch. They deal with it whenever; an agent can draft it for review.

  • /hijack @handle <task> — the pester (not screen control). The one-line task is specced into concrete steps + a time estimate, and the recipient runs a tiny state machine at their notch while a MacCat — a real pixel cat, coloured to the sender — runs and jumps across their screen after their cursor, until they actually start.

    The MacCat. A cat shows up chasing your pointer and you have to work out who sent it. The heads-up card shows status + estimate ("✓ specced & loaded · 4 steps · ~20 min") and lets you Do it now, See the plan (watch how it broke down first), or bail with Not now if you're mid-something. The cat shakes off the moment you begin, comes back if you abandon it, and is gone for good once you finish. Nobody drives anyone's pointer — it's a nudge you can't ignore.

Realtime, over a shared wrapp

Both people load the same wrapp locally, so the coordinate space is free — what's shared live is the overlay. Teammates appear as live sprites (MacCats) trailing their real cursors over the shared surface. It's what native screen-share can never be: everyone in the same app, on their own machine, at full fidelity. Frames stay sealed end-to-end; the relay can't read them.


Keyboard shortcuts

Shortcut What it does
⌃⌥ + click God looks at your screen and helps
⌃⌥ hold Dictate (Flow) — talk, it types at your cursor
⌥V Re-paste your last dictation (a voice clipboard, separate from ⌘C/⌘V)
⌃⌃ Ask across your work
⌥⌥ Launcher / spotlight
⌘O Open the workspace

On a notch card: ⌥1/2/3 pick · ⌥→ confirm · ⌥↑ back · ⌥↓ type your own · Esc dismiss.


Apps

Included (native, in the box)

  • Flow — dictation, done right. Talk and it types — anywhere on your Mac, transcribed on-device.
  • God — your all-purpose assistant. It sees your screen and can point, type, click, and run apps for you, always under your consent.
  • Guru — a guide for anything. It walks you through any task on any app step by step, adapting live to what's actually on your screen.

In the store — 94 wrapps, all free

Every one runs on your own AI. A few of them:

Brandbrain — brand studio Ideabrain — pressure-test an idea Redline — review + edit
Crest — logos and marks Deck — build the slide deck Autopilot — plan your week
Clone — clone a voice Cut — video timeline Prism — research + synthesis

Browse the whole board → · or scaffold your own with the wrapp skill.


Bring your own AI

Codex support includes headless runs, separate warm conversations, streamed responses, and Switchboard-gated MCP tools. Choose the app’s default at the connection notch; existing conversations keep their starting model. See Codex setup and compatibility.

Switchboard runs on your infrastructure — your choice:

  • Your subscription — connect Claude Code or Codex and choose the model each app can use.
  • A local model — keep everything on-device.
  • Hybrid — local by default, reach for the cloud only when you opt in.

The broker never holds a key and never sees your data — it only routes the calls you've consented to.


Install

Switchboard is a macOS app for Apple Silicon (macOS 13+). Download the signed, notarized Switchboard.dmg, drag it to Applications, and launch it — the workspace lives in your menu bar. First run walks you through the one-time setup (your model, permissions, first app).

The Chrome extension is an optional layer-2 upgrade — it lets you run your Claude on any website. You never need it to get value from the app.


How it works

A local daemon holds your model and your connected MCP tools. Apps — native or web — request capabilities through a single consent broker: they can only ever touch what you've granted, for as long as you've granted it. Your project context (a vault of .md files you own) is lent to apps, so they share what you're working on without copying it anywhere. An optional browser extension injects the same provider into web pages, so any site can run on your own model, tools, and data under per-site consent.

Isolation is structural: every app is scoped to its own sandbox and the context you explicitly lend it.


Privacy — the five noes

  • No account to create.
  • No data leaves your Mac without a grant.
  • No key resold — you bring your own.
  • No lock-in — your vault is plain .md files you own.
  • No training on your data.

For developers

Switchboard is open source — an npm-workspaces monorepo:

  • packages/protocol — the wire types + error codes (BYOP).
  • packages/sdkgetRelay / whenRelayReady + the connect chip.
  • packages/extension — the MV3 browser extension.
  • packages/sidekick — the Node daemon (Claude Code, Codex App Server, local runners): WS server, consent broker, model backends, context library, storage.
  • packages/menubar — the macOS menu-bar app (Swift) that supervises the daemon.
  • packages/bank-mcp — an MCP server that exposes your vault to any Claude thread.
  • packages/relay — the Cloudflare Worker that relays sealed team frames + Slack /notch and /hijack.
  • examples/apps — the app store and the bundled web apps.

Run it locally:

# the daemon (prints a pairing token)
node packages/sidekick/dist/index.js

# the app store (Prism, BrandBrain, …)
cd examples/apps && node serve.mjs

Load packages/extension as an unpacked MV3 extension and paste the pairing token into the side panel.

Security invariants (never violated)

  • The broker never holds a user's API key and never sees app data in the clear.
  • An app can only reach a capability the user has explicitly granted, scoped to that app's origin.
  • Context and files are lent, never copied out; the user can revoke any grant at any time.
  • Team frames are sealed end-to-end (AES-256-GCM); the relay routes ciphertext it can't read.

License

MIT.

About

MetaMask, but for AI. A local consent-broker daemon + browser extension inject window.claude into any site, so websites run on the visitor's own Claude, tools & context — no API keys, no resold inference, explicit per-action consent. God: an ambient screen-aware assistant that speaks a voice you clone on-device.

Topics

Resources

Stars

1 star

Watchers

0 watching

Forks

Releases

Packages

Contributors

Languages