Local-first, security-first, modular AI tooling — composable parts for people who want to look beneath the surface.
# Install and chat in under a minute
$ brew install darklake-ai/fathom/fathom
$ fathom init --global
$ fathom
# or via curl
$ curl -fsSL https://fathom.darklake.ai/install.sh | sh
agent claude-opus-4 (7 tools + persona)
workspace /Users/you/fathom-data
commands /quit /help
› summarize the prs i was tagged in this week
Open source. Self-hosted. No accounts required. Each piece stands alone — wire them together as you like.
The agent runtime.
One Go binary, multi-LLM. Encrypted local vault, sandboxed skills, hash-chained audit log, scheduled tasks, native Mac menu-bar app.
Memory for agents.
Auto-ingests sessions from Claude Code, Codex, Cursor into one local SQLite store. Recall via MCP + hooks. 98.9% R@5 on LongMemEval, no API key.
Identity for agents.
Short-lived credentials, cross-agent delegation, attestation, real-time revocation. Built on OAuth 2.1, WIMSE/SPIFFE, and RFC 8693.
A short list of things we won't compromise on.
Your data, your machine. Nothing leaves the device unless you explicitly opt in. Even our cloud features (when we add them) will be optional, not the default.
Hash-chained audit log, encrypted credential vault, egress proxy, sandboxed skills. Not features — load-bearing structure. If it's not auditable, we don't ship it.
Most agent platforms ship a control plane. We ship a single static binary. If you can run `curl | sh`, you can run our stack.
Claude, OpenAI, Ollama — your choice per session. The agent loop is provider-agnostic. Switch in one line. Bring your own keys.
Every piece — Fathom, Chasm, Charon, Beacon, Dream, Sigil — is a standalone binary with a wire-protocol API. Use one. Use all. Swap any of them for someone else's. Standard formats (OTLP, OAuth, OIDC) so nothing's a dead end.
Permissive licenses, every commit public, no closed-source core. We'd rather ship a smaller thing that you can fork than a bigger thing you can't see. Issues and PRs are how we ship the roadmap.
Standalone services that bolt onto Fathom — or any agent that speaks the same protocols.
Sandbox for agent skills.
Egress proxy for agents.
Observability for agents.
Approval gateway for agents.
Human-in-the-loop sign-off, multi-reviewer policies, gatekeeper on dangerous ops.
Red-team + pre-prod eval.
Adversarial probing, prompt-injection harness, trial-by-fire before production.
Open source. Local-first. Modular. No accounts. Fathom is the entry point — pick up the rest as you need them.