Use any AI agent with verified private AI.

A free, open source local client for confidential AI services. It verifies the service, exposes an API on your machine, and connects supported AI agents to it without giving them your credential. The desktop app and the pap CLI manage the same per-user service.

Claude Code, Codex, OpenCode, Pi, Hermes Agent, OpenClaw, Oh My Pi, and DeepSeek Harness. Connecting an agent edits only the settings the proxy owns, and disconnecting restores what was there before.

Connected agents stay pointed at the local API, which refuses their requests until protection is verified again. The same applies after a network loss or a restart, so requests never fall back to the original provider.

No. Each agent gets its own machine-local token. Your RedPill credential stays with the proxy and never appears in agent configuration, command arguments, or diagnostics.

Responses stream to your agent immediately. Afterwards the proxy fetches the signed receipt for the request and audits it. Usage keeps each checked receipt, and an audit failure is recorded there; it cannot retract bytes that were already delivered.

macOS, Windows, and Linux on arm64 and x64. Linux needs glibc 2.35 or newer; musl distributions such as Alpine are not supported. The desktop app is also on the Mac App Store. The Windows desktop app is in preview.

The app is free and open source; sign in with your RedPill account.

Choose Stop All and Quit in the app first, or run pap --yes service stop and then pap stop --offline. That restores your agents' own settings before you remove the app. The Windows uninstaller does this for you.