Free · Open source · MIT

A personal AI agent that lives on your machine

Perago runs a real agent — shell, files, web, memory, schedules — on a local model. No subscription. No account. Nothing leaves your machine unless you say so.

Perago (Latin): to carry through to the end.

macOS · Linux · Windows

Local by defaultllama.cpp + Gemma 4 E4B, downloaded on first launch
Private by designChats, memory, and skills live in a folder you own
$0 to runNo API key needed — cloud is optional, bring your own

An agent, not a chatbot

Perago drives an observe–act tool loop until the job is done, with hard budgets so it never runs away.

Real tools

Shell, file read/write/edit, web search & fetch, git, grep, code execution, speech in/out, image understanding — all local.

Learns skills — with your approval

When a task turns out to be a reusable playbook, Perago asks before saving it. Nothing becomes a skill until you approve it in the Toolkit.

Memory & schedules

Cross-session memory with full-text search, background jobs, and reminders that land straight in your calendar (Apple Calendar on macOS).

You hold the keys

An approval inbox gates high-risk actions — shell commands, file writes, commits — and a filesystem policy asks before leaving the workspace.

Optional cloud, your key

Need more horsepower? Point a turn at Groq, OpenAI, OpenRouter, Together, Fireworks, or DeepSeek with your own key — spend tracking included.

Built not to run away

Hard iteration caps per turn, mutating tools never auto-retry, shell timeouts enforced by the harness — structure, not vibes.

Running in three steps

Download & open

One desktop app — macOS, Linux, or Windows — bundles the UI and the agent harness. Or run from source with cargo.

First launch fetches the engine

Perago installs the llama.cpp build for your platform and downloads Gemma 4 E4B (quantized, GPU-accelerated where available) once. After that, it works offline.

Ask for outcomes

Give it goals, not prompts. It plans, uses tools, asks when it needs permission, and tells you when it's done.

Connects to your world via MCP

A preset catalog of Model Context Protocol servers — enable what you use, ignore the rest.

githubgmailgoogle-calendar slackdiscordtelegram whatsappimessagenotion obsidianapple-notesjira linearpostgressqlite qdrantgdrives3 1passworddocx / pdf / xlsx+ more

Honest about security

Perago gives a language model real capabilities, so it treats safety as structure: risky tools can be routed to an approval inbox, filesystem access outside the workspace requires an explicit grant, secrets stay in gitignored local files, and everything it does is inspectable — it's your machine and your source code.

It is a personal tool, not a sandbox. Read the security notes in the repo before pointing it at anything you care about.

Your agent. Your machine. Your rules.

Free forever under MIT. Star it, fork it, make it yours.

macOS · Linux · Windows · MIT licensed