The platform

One platform.
Two tiers.

Personal Participant — free, sovereign, running on your own hardware. Enterprise — paid, multi-seat, with organizational controls layered on top of the same substrate. Same engine underneath. Different surface for different shapes of use.

Personal Participant

For one person. Free, sovereign, yours.

Everything described across the rest of this site — memory that doesn't degrade, federation without surveillance, substrate-native inference, the agent-only marketplace, cross-device continuity between Mac and iOS — all of it, free, for individual participants.

Status
BETA launching soon
  • Free, structurally. No per-token charges, no subscription, no tier-locked features. The platform is free as a property of how the architecture works.
  • Sovereign by architecture. Your memory lives on your devices. Your conversations stay there. Federation contributes anonymized signal — never your content.
  • Cross-device continuity. Mac, iPhone, iPad. Same agents, same memory, same context. State syncs device-to-device directly, end-to-end encrypted, with no relay through our cloud.
  • BYOK inference today. Bring your own provider key, run local models, or use OpenRouter. Substrate-native inference (Alpenglow Intelligence) lands as the next major release.
  • Marketplace artifacts. Tools, integrations, skills, dashboard modules, personas, bundles — agent-discovered, federation-ranked, signed.
  • Account-wipe + recovery phrase. 24-word phrase restores your participant identity onto a new device. Account wipe is one click, instant.
Request BETA access Curated cohort. Onboarding weekly.

A tour of the platform

Every surface, in the order you'll meet it.

The macOS app is organized as a horizontal tab strip. Here's what each tab does, in tab order, with a real screenshot of the actual product. Mobile mirrors the same structure with the same agents, same memory, same data.

01

Dashboard

The home base.

Dashboard tab — agent chat on the left, system overview on the right

Your agent chat lives permanently on the left rail. Pick any agent you've sprouted and start a conversation, or open a Conference to coordinate multiple agents on the same workflow at once. The right side shows your agent roster, cost tracking across whatever providers you're using, models currently loaded, and a live overview of your system's state.

It's the screen you'll spend the most time on, and it's built so you don't have to leave it for routine work.

02

Code

Hands-on agent-paired engineering.

Code tab — projects, files, agent-paired editing

Built for developers who want hands-on oversight of agent-initiated coding work. The Code bench is where your agent edits, runs, and tests code with you watching every move. It works today.

Honest framing: we aren't claiming superiority over dedicated coding agents on this surface yet. It's a focus area on our roadmap, and like everything else on the platform, federation means we learn from real participant use what to prioritize first. If something's missing or rough, the fastest way to fix it is to use Code, hit the rough edge, and Report it. The signal flows back into the build queue.

03

Crickets

Scheduled prompts that fire on a cadence.

Crickets tab — scheduled prompts list

Schedule prompts to fire at your agents on a cadence. Daily summaries at 8am. Weekly competitive scans. A 4-hourly health check on a long-running build. Anything you'd otherwise have to remember to ask for.

Crickets are quiet, persistent, and accumulate value the longer they run. Every fire and result is captured in your agent's memory, so the system gets sharper at the recurring work over time. Routine prompts route to a cheaper model class by default — your premium model for the hard stuff, cheap models for the chirping.

04

Dynamic MCP

Your third-party platforms, under your agent's control.

Dynamic MCP tab — connected third-party platforms

Dynamic MCP surfaces every third-party platform you've connected and gives your agent supervised access to those accounts — Slack, Linear, GitHub, Notion, your CRM, anything that speaks the Model Context Protocol. Your agent walks you through each integration; you approve scopes; the connection lights up.

Honest framing on data: the third-party services on the other side of these integrations see exactly what you send to them — same as if you were using their app directly. We don't control that, and we won't pretend we do. What we do control is what your agent learns about your work in those services, and that part stays sovereign on your devices. The net result is more control over your data than the default way of using any of these tools, not less.

05

Marketplace

Where your agent finds the right tool for the job.

Marketplace tab — agent-surfaced tools and integrations

Marketplace is where your agent surfaces tools, integrations, skills, and bundles based on what you've actually asked it to help with. Ask your agent what's available; it goes and finds candidates ranked by federation telemetry from real participant use, then surfaces the top matches for your approval. No purchase, no install, no permission grant happens without your explicit consent.

One deliberate constraint: unlike siloed systems, you can't just grab arbitrary code off GitHub and bolt it onto your agent. This isn't a design flaw — it's intentional. Everything that runs through the marketplace is signed, audited, federation-ranked, and sandbox-tested. Anything else is a security incident waiting to happen.

If there's a tool or skill that already exists somewhere else and you want it inside Alpenglow, the right move is to reach out to the developer and tell them to publish it here. They'll thank you — for the first time, they can monetize the work directly. (See the marketplace economics for how that works.)

Hard rule for publishers: do not submit copies of code you didn't write. The audit pipeline checks every submission for authorship. Attempting to monetize someone else's work will get you locked out of marketplace submission. Permanently.

06

Vault

Substrate-native storage.* The most secure on-device file system available anywhere.

Vault tab — encrypted on-device storage

The Vault holds everything the platform itself needs to run — your agents, your memory, your conversations, your skills, your cricket history — encoded with substrate- native compression and encryption that's proprietary to us and not available anywhere else.

It's also yours to use directly. Drag and drop any file anywhere on your machine into the Vault and it gets compressed, encrypted, and stowed under the same architecture. Free up space on your devices by storing things in the most secure on-device file system that exists. Courtesy of Alpenglow — no charge for the storage, no upload to our servers, no third-party cloud.

07

Devices

One trusted set, paired end-to-end.*

Devices tab — pairing flow between Mac and iPhone

Pair every device you run Alpenglow on — Mac, iPhone, iPad — into one trusted set. Surfaces talk to each other directly, device-to-device, end-to-end encrypted, with no relay through our cloud, no central key escrow, no man in the middle. State syncs in real time across whatever's online; the rest catches up when it comes back.

Lose a device, revoke it from any other one in the set; the remaining devices keep running. Add a new one, walk through the pairing flow, and your agents and memory are there in minutes. Your trusted set is yours; we don't hold the keys.

08

Memory

What your agent has learned, made visible.*

Memory tab — agent recall surface

Your agent's memory surface — the working state and accumulated history that makes it sharper at your specific work over time. Browse what it has learned, search across years of conversations, see how procedures and preferences are organized, prune anything you'd rather it forget.

The deeper architectural argument lives on its own page (how memory works); this is where you actually look at what's there. No vector database, no embedding similarity search, no probabilistic recall. Exact memories, exactly retrieved.

09

Voice

The community wishlist. The active leads list for developers.

Voice tab — community wishlist

Community Voice is the active wishlist — the things participants are openly asking us, or asking developers, to build. Skills that don't exist yet. Integrations that should. Dashboard modules someone will pay for once they ship. Workflows worth automating. Anyone can contribute, anyone can upvote, the federation surfaces the requests with the most weight.

Developers, this is your free leads list. Every entry is a participant openly saying "I'd pay for this if it existed." We can't make everything everyone wants — but the active list is the community asking you to monetize the gap. Build it. Submit it. The marketplace audit pipeline takes it from there. Federation ranks it. Participants install it. You get paid.

10

Settings

Your controls, your defaults, your machine room.

Settings tab — provider keys, defaults, controls

Provider keys, cost defaults, model preferences, recovery phrase, account wipe, federation participation toggle, data-export — all the controls one tab away. Defaults are sane, so you usually don't need to touch much. When you do, everything's where you'd expect it.

+

Alpenglow on iOS

Same agents. Same memory. On the move.

Alpenglow on iOS — welcome screen

The mobile app pairs into your trusted device set and mirrors the same agent stack — the same memory, the same crickets, the same skills, the same conversations. Sync is direct device-to-device over the same end-to-end encrypted channel; nothing routes through us in the middle. Open a chat on Mac, pick it up on iOS, finish it from your laptop in the evening. Continuity is the default.

Enterprise

For organizations. Sorry — this one's not free.

Personal Participant is free because individual sovereignty is part of what we're building. Enterprise isn't, because team-scale infrastructure — admin dashboards, role-based access, audit trails, SSO, dedicated support, the engineering work that makes any of it dependable at scale — costs real money to build and maintain. Honest pricing, honestly named.

Status
Coming after BETA stabilizes
  • Enterprise agents with scoped access. Set up company-owned agents that have access to specific organizational resources — an HR agent for HR work, a finance agent for finance work, a sales-ops agent for the pipeline, anything the org needs. Each Enterprise agent's access is scoped at setup; the agent itself becomes the authorization boundary.
  • Per-user access grants. Decide who in the org can talk to which Enterprise agents. Marketing doesn't get the HR agent unless someone explicitly grants it. Access can be granted, scoped, or revoked at any time without touching anything else in the system.
  • Two surfaces, no data leak. A participant granted access can flip into the Work view and talk to the Enterprise agent directly — that's the canonical path. Or they can initiate the request from a personal agent, which acts as a strict relay: it forwards the ask to the Enterprise agent, the Enterprise agent does the actual work with the actual data, and only a brief status or summary comes back. The personal agent never ingests Enterprise data into personal memory. The friction is intentional.
  • Employer-set boundaries. Some orgs want stricter posture than the relay model offers. Employers can disable personal-agent-initiated workflows entirely at the org level, forcing all Enterprise work into the Work view. The exact knobs get fleshed out as the Enterprise tier is built; pre-register and you'll have a voice in what they look like.
  • Instant revocation with a clean offboarding flow. When access is cut — by individual, by role, or wholesale — the participant's personal agent automatically sweeps for anything that might belong to the company and recommends it be returned to the Work side before the gateway closes. Personal data stays personal. The line gets drawn cleanly, automatically, every time. (Detail in the offboarding model below.)
  • Workflow automation at org scale. Crickets, recurring procedures, scheduled reconciliations, daily reports — set them up once at the company level, run them for everyone with access. The Enterprise tier turns repetitive work into background machinery.
  • SSO and identity. Plug into your existing identity provider for sign-in, provisioning, and deprovisioning. Standard org plumbing, with the access-grant model layered on top.
  • Audit and compliance. Org-level logs of who accessed which Enterprise agent, when, and for what — without ever reaching into any employee's personal agent or personal data.
  • Dedicated support. A direct line to the team building the platform. Not a ticket queue.

Enterprise dashboard

Not in the screenshots above because it isn't shipped yet — the Enterprise control surface is being built once the Personal Participant BETA stabilizes. Pre-register below and you'll be in the first cohort that gets early access when it's ready.

The model, in plain terms.

Enterprise sets up its own agents with scoped access to the company's resources, then grants those agents to the participants who should be able to use them. The canonical path: a participant flips into a Work view and talks to the Enterprise agent directly. That's the cleanest interaction and the right one if you're actively working.

For convenience, participants can also initiate a request from a personal agent. Most participants will already have Slack, calendar, or other integrations wired into their personal side — starting a workflow from there saves a context switch. When that happens, the personal agent acts strictly as a relay: it passes the ask to the Enterprise agent, the Enterprise agent does the actual work with the actual data, and only a brief status or summary comes back to the personal side. Enterprise data never lands in a participant's personal memory. The friction is intentional, and the boundary is mechanical, not promised.

Employers who want a stricter posture can disable personal-agent-initiated workflows entirely at the org level. The exact controls get worked out as the Enterprise tier is built; pre-register if you want a voice in what they look like.

When someone leaves.*

Access is instantly revocable. The moment someone leaves the company, Enterprise can cut their access — to specific agents, to specific resources, or to the entire Enterprise system. The participant's personal system, however, stays theirs. Personal agents, personal memory, integrations the participant configured on their own time, anything they built outside the Work line — those don't belong to the employer. We designed the system to protect both parties, not just one.

When revocation triggers, the personal agent automatically runs a sweep before the gateway closes. It looks across what it has touched on behalf of the participant — drafts, attachments, work-context fragments that came back through the relay path, anything that might be company property — and flags those items for the participant to review. It recommends they be submitted back to the Work side and cleared from the personal side. The whole flow runs as part of the standard revocation process.

The participant has the final say. If something caught in the sweep is clearly personal — their own notes, their own draft, their own resume they happened to ask their agent about during work hours — they can override the recommendation and keep it. The risk of that decision is theirs, not ours. We facilitate the compliance process; we don't arbitrate ownership disputes between employer and employee.

It's the digital equivalent of grabbing your personal belongings on the way out and handing over your access ID. Automatic, fast, and built so the line between yours and theirs stays as clean as either party wants it to.

Pre-register Enterprise Available after Personal BETA stabilizes. Pricing is per-seat with org-level admin; specifics shared after pre-registration.

At a glance

Personal vs. Enterprise.

Personal Participant
Enterprise
Price
Free, forever
Per-seat, paid
Memory
Sovereign, on your devices
Per-employee, sovereign on their devices
Federation
Anonymized signal in/out
Same — plus optional org-internal patterns
Marketplace
Installed by your agent, with your consent
Shared org-curated catalog + employee installs
Inference
BYOK / local / Alpenglow Intelligence
Same, plus org-level routing policy
Admin surface
None needed
Dashboard: seats, roles, audit, SSO, billing
Support
Email + in-app Report This
Dedicated channel, named contacts
Status
BETA launching soon
After BETA stabilizes

Two doors. Pick the one that fits.

Personal Participant if you're an individual who wants a sovereign AI of your own. Enterprise if you're bringing a team and need the controls that come with that.