HN Showcase
Back to browse
Free Desktop OrcaBot for macOS

Free Desktop OrcaBot for macOS

by robbomacrae·Jul 22, 2026·2 points·0 comments
Visit ProjectView on HN

AI Analysis

●●SolidNiche GemShip It

Local VM sandbox for AI agents with VirtioFS isolation on macOS.

Strengths
  • •Uses Apple Virtualization.framework for genuine VM isolation, not just containers.
  • •VirtioFS mount with symlink escape prevention is a concrete security feature.
  • •PKCE OAuth flow means no client secrets stored in the distributed app binary.
Weaknesses
  • •No inbound messaging support (Slack/Discord) forces reliance on cloud dashboard.
  • •macOS-only limits adoption; Linux/Windows support is promised but not shipped.
Category
Security
Target Audience

Developers running local AI agents who need credential isolation

Similar To

Firecracker · gVisor · Docker Desktop

Post Description

OrcaBot is a virtualized sandbox for securely orchestrating your AI tools.

Its secrets broker keeps credentials hidden from agents. Network egress controls help prevent data exfiltration. The tools and agents themselves run inside an isolated virtual machine.

Until now, OrcaBot has run exclusively in the cloud using Fly.io virtual machines. Those machines cost money to operate, which is why the cloud version of OrcaBot requires a subscription.

Now OrcaBot Desktop is available for free on macOS

Similar Projects

Security●●Solid

Drydock – VM Sandboxes for macOS Autonomous Coding Agents

Host-side API key gateway keeps credentials out of agent sandboxes entirely.

Big BrainNiche Gem
sricola
101mo ago