PocketPaw — Your AI Agent. Modular. Secure. Everywhere.
Open Source · MIT Licensed · Python 3.11+
PocketPaw mascot — a friendly puppy waving from a denim pocket

PocketPaw

Your AI agent. Modular. Secure. Everywhere.

One-click install

macOS Coming soon Windows Coming soon
or
$ curl -fsSL https://pocketpaw.xyz/install.sh | sh
30 seconds to your first message
The Problem

Most AI agents take thirty minutes to set up. Docker, OAuth, tunneling, fifty config options, all before you send your first message.

Your API keys sit in plain‑text config files. Dashboards get exposed on Shodan. Safety controls can be toggled via API while the agent runs. You install hundreds of packages whether you need them or not. One bad dependency update breaks everything, even features you never asked for.

Typical AI Agent
  • 1 Provision a VM or VPS 10 min
  • 2 SSH setup & authentication 5 min
  • 3 Clone repo & Docker setup 8 min
  • 4 Edit 50+ config variables 5 min
  • 5 Set up OAuth & tunneling 10 min
  • 6 Install 200+ dependencies 8 min
  • 7 Debug dependency conflicts 10 min
  • 8 Configure AI provider 4 min
Total ~60 min
PocketPaw
30s
to your first message
$ curl -fsSL https://pocketpaw.xyz/install.sh | sh
  • Dashboard running
  • Credentials encrypted
  • Channels connected
  • Memory initialized
  • Ready to chat
Fast Secure Modular Encrypted Open Source
The Solution

Batteries included,
choose your pack.

One install gives you everything you need. Add channels when your life demands them. Never carry what you don't use.

$ curl -fsSL https://pocketpaw.xyz/install.sh | sh # Interactive installer $ pip install pocketpaw[memory] # Add Mem0 semantic search $ pip install pocketpaw[all] # Everything, all channels

The full includes:

Web Dashboard Command Center Telegram Bot 3 LLM Backends Encrypted Credentials Persistent Memory Browser Automation Guardian AI Skills Audit Log
~30
Packages
~80MB
Footprint
30s
To Install
The Thin Core

Everything you need.
Add the rest later.

Multi-Channel

Telegram, Discord, Slack, WhatsApp, and web dashboard. Same agent, same context, every channel.

3 LLM Backends

Claude Agent SDK, OpenAI, or Ollama for fully local models. $0 API cost with local inference.

Encrypted Credentials

Fernet AES with machine-derived PBKDF2 key. Real encryption, not base64 obfuscation.

Guardian AI

Secondary LLM reviews dangerous commands before execution. 3-tier tool policy with deny-lists.

Persistent Memory

Session history and long-term facts. Upgrade to Mem0 semantic vector search when ready.

Browser Automation

Playwright-powered with accessibility tree snapshots. Navigate, extract, interact.

Modular Install

pip extras for genuine dependency isolation. Toggle channels from the dashboard. Auto-install, no restart.

Skills

Self-installing plugin system. Add capabilities from a registry or build your own. The agent installs what it needs.

Audit Log

Append-only JSONL. Every tool execution logged with severity levels. Tamper-evident by design.

Security

Security was the
starting point.

Your AI agent has terminal access, file access, browser control, and your API keys. The security architecture should match that power.

Fernet AES encrypted credentials
Machine-derived PBKDF2 key. Auto-migrates from plain text.
3-tier tool policy with deny-lists
Minimal, coding, full. Deny always wins. No override possible.
Guardian AI safety check
Secondary LLM reviews dangerous commands before execution.
Append-only audit log
Every tool execution. Tamper-evident. Severity levels.
No exposed ports by default
Telegram-first. Nothing for Shodan to find.
WebSocket auth via message body
Not URL params. Not in logs. Not in scan results.
Command Center

One agent is useful.
A team gets real work done.

Describe your goal. Command Center breaks it into small meaningful tasks, assigns agents, streams progress live, and pauses for your approval before anything ships.

command-center
Live
You
0%
Progress
Pending
Pending
Pending
Pending
Pending
By The Numbers
5
Channels
3
LLM Backends
30s
To First Message
~30
Packages
~80MB
Memory
MIT
Licensed

Open Source · MIT Licensed · No Telemetry · No Cloud Dependency

Your agent.
Your machine.
Your rules.

$ curl -fsSL https://pocketpaw.xyz/install.sh | sh
beta