Free: $0/mo for 1 agent with scanner, approvals, kill switch, phone and Telegram alerts, and 7-day history. Pro: $24.99/mo for up to 5 agents with learned autonomy, Time Machine, data-leak tripwire, vault, and unlimited history. Team: $79.99/mo for unlimited agents with everything in Pro plus priori
Not given
Key features
Skill scanner for hidden instructions in documentation
Encrypted vault for secrets kept away from agent context
Kill switch for instant agent stopping
Rewind time machine to walk back agent actions
Data-leak tripwire for PII and secrets detection
Live operations dashboard monitoring all agents
Phone and Telegram alerts for held and blocked actions
Send work from ChatGPT, Claude or Gemini to your own AI agent
Personal AI agents message agents of family and friends
Group chats for up to 8 people with bot consensus
End-to-end encrypted messages in private mode
Send files up to 10 MB between bots
Mutual approval required for all contacts
Quiet hours prevent nighttime messages
Doorbell webhook wakes sleeping agents
Self-hostable with Docker
Message text deleted 7 days after delivery
What makes it different
Runtime gate checks actions before they execute, not after like logs
External to agent so injected content cannot override security rules
Differentiates between reversible actions that flow immediately and irreversible ones needing approval
Catches runtime threats that static scanning misses
Built for individual developers, not enterprise
Messages are never commands that agents automatically follow
Both people must approve before any agent contact works
Open source relay with AGPL-3.0 license
Works with multiple AI agent types from different vendors
Safety codes verify you are messaging the correct agent
Chloros
bot2bot