A desktop agent for sensitive work.
Trusted Cowork delivers frontier models for work on local files in an open source harness - with maximum privacy.
Work locally, compute confidently.
- Give it a task in your projectIt reads, edits and runs commands in the folders you open, and asks before exposing any data to tool use.
- Pick a model, or keep the defaultnyte/confidential routes to a qualified confidential model. Name one when you need a specific model.
- Keep everything on your MacConversations stay local. Telemetry is off, updates are manual and your API key is encrypted by macOS.
Only trusted tokens.
Sign in with your TrustedRouter account, and get verified confidential compute for your most sensitive work. Use the latest AI features without sacrificing encryption.
Common questions
Do I need a new account?
No. Sign in with your TrustedRouter account in the browser, or add an API key. Your balance and key limits carry over.
Which models can it use?
The default route, nyte/confidential, or any confidential, tool-capable model in the catalog, chosen by name. Standard routes are blocked and there is no fallback.
What stays on my Mac?
Your conversations and settings. Approved tools run with your user permissions and can reach files and the network. The app is not an OS sandbox.
Is it open source?
Yes. Trusted Cowork is based on OpenCode 2.0.32 and keeps its MIT license. The source, security boundaries and release checks are on GitHub.
Download Trusted Cowork.
macOS 13 or newer, on Apple silicon or Intel.