Any LLM, any combination
Anthropic, OpenAI, Google, Mistral, or self-hosted. Reasoning models supported. Pick the right model per task; switch without migrating prompts or skills.
Client-side encryption
AES-256-GCM in the browser before anything touches the server. Envelope encryption with unique IV per message. Your keys, not ours.
Open standard (MCP)
Any MCP server works. Build your own for internal systems. The agent discovers new capabilities as you add them — no platform release needed.
Enterprise SSO
OIDC to Microsoft Entra ID, Google, Okta, or any compliant IdP. Per-user isolation. Groups drive access to skills, servers, and quotas.
Cost routing & quotas
Per-user, per-team, per-model budgets. Cache-aware pricing across input, output, reasoning, and cache reads/writes. Route light tasks to small models, reserve frontier for what needs it.
Model fallback chain
Primary model unavailable or over quota? Automatic failover to your configured chain. Exponential backoff on network errors, rate limits, and prompt-too-long.
Skills as versioned assets
Codify best practice once. Fork, share with OIDC groups, enforce versions across teams. A skill library that behaves like code, not copy-pasted prompts.
Full audit trail
Every tool call, approval, and outcome recorded. Per-tool, per-conversation permissions persisted. Destructive actions always pause for explicit sanction.
Concurrent delegations
Run many tasks in parallel across conversations. Browser notifications pull you back in only when an agent needs a decision.