Run Claude, Codex, Cursor, and Gemini in a sandbox on your machine. Access them from any device over an encrypted, passkey-protected relay that can't read your data.
Daemon that runs on your machine. wt login, wt start, and it encrypts the connection to the relay so your eggs are reachable.
The relay. Wings connect outbound to it, so you don't need to open ports or have a static IP. Use ours or host your own.
Wraps each agent in a sandbox with a PTY and internal domain-filtered proxy. Survives disconnects. Claude Code, Codex, Cursor, Gemini.
curl install, SQLite, nothing else to install. MIT licensed. Runs on macOS and Linux, x64 and arm64.
Define what agents can reach in egg.yaml, then let them run unattended. Seatbelt on macOS, namespaces on Linux.
X25519 key exchange, AES-GCM. The roost is a dumb pipe, it never sees your wing's private data.
wt serve runs the roost on your machine. No account needed, no dependency on us.
wt egg claude, wt egg ollama, wt egg gemini. Switch the agent, keep your sandbox config.
WebAuthn passkeys. 1Password, iCloud Keychain, Touch ID, Windows Hello. The roost never sees your credential.