Key features
- Chat and voice with agents, on the app and on external channels
- Parallel background agents and official coding CLIs
- Bring-your-own keys, or sign in with an existing AI subscription through the provider's official CLI
- Local models that run on your own hardware, through Ollama or vLLM
- Secure Mode: sensitive sessions restricted to local models and a local-only tool allowlist
- Projects, kanban, files with OCR, reports and a knowledge graph
- Scheduled jobs and workflows
- Plugin marketplace
- Federation across a user's own devices
- Guided first-run setup in 8 steps
- Optional multi-user workspaces with per-workspace access
Delivery
We started the repository in January 2026 and imported the open-source Moltbot (formerly Clawdbot) source tree in February 2026. That code is MIT licensed, and the upstream notice and credits are kept in the repository. From that base we built the product now called InfiniBot, over 2,923 commits to date. Releases use date-based version numbers, and the public download page lists desktop release 2026.10.32, dated 2026-10-29.
Development ran on branches and worktrees alongside a live deployment, with targeted tests per area. The repository tracks 1,922 test files.
Security & infrastructure
- Tenant isolation. Each hosted workspace gets its own app, volume and Machine. Orchestrator tests assert that tenants receive separate apps and Machines, and that a missing or invalid sign-in token causes no provisioning.
- Authentication. Hosted sign-in uses Clerk. Multi-user workspaces support authenticator-app codes, and non-owner requests are denied unless a rule allows them.
- Secrets. Each customer's secrets are locked with keys tied to that customer and purpose, so a key copied to another customer will not open.
- Secure Mode. Model and tool checks are allowlists that fail closed. A model counts as local by where it is actually served from, not by its provider name.
- Execution. Tool policy, exec approvals and Docker sandboxing control what agents can run.
- Private networking. Remote access can run over Tailscale.
- Audit. Security audit tooling and an access audit log are built in.
- Hosting. Fly.io for tenant Machines, Netlify for public sites, Docker for packaging, Neon Postgres for the fleet registry.
Limits
- The desktop app runs on Windows and Linux. macOS is listed as coming soon.
- Windows builds are not code-signed yet, so Windows shows a warning on first install.
- The upstream code is MIT licensed. InfiniBot's own code is under FSL-1.1-ALv2, and the hosted fleet control plane is proprietary.









