How to Run AI Agents 100% Locally on Your Mac Without a Single Subscription
Osaurus is an open-source Mac AI agent platform built in pure Swift that keeps your data offline while connecting to any LLM — local or cloud — with persistent memory, sandboxed execution, and 20+ native plugins.
Review by ToolRadar Editorial Team · Based on official documentation and verified user feedback
Most AI tools today operate on a simple but uncomfortable premise: you hand over your data, your conversations, and often your credit card, in exchange for access to models you do not control. Osaurus asks a different question. What if your AI lived on your machine, remembered your work, executed code in a locked sandbox, and never sent a byte to anyone unless you explicitly chose to?
Built entirely in Swift for Apple Silicon, Osaurus is an open-source AI harness that sits between you and any model — local or cloud — and provides the continuity that makes AI personal. It is the brainchild of Terence Pae, a former software engineer at Netflix, Tesla, and Zillow, who started the project in public after customers of his earlier app, Dinoki, asked why they should pay for tokens on top of the app itself. That question led to a broader realization: the models are becoming interchangeable, but the layer around them — your context, your memory, your tools, your identity — is what compounds in value. Osaurus keeps that layer on your Mac.
What Is Osaurus and Why It Matters Now
Osaurus is best understood as an AI harness rather than a chatbot. It does not replace models; it orchestrates them. You can run Gemma 4, Qwen 3.6, GPT-OSS, Llama, DeepSeek v4, and more locally through an optimized MLX runtime, or connect to OpenAI, Anthropic, Gemini, xAI/Grok, and others when a task demands more power. The same agent memory, tool set, and file context persist across every provider switch.
The project hit 6,000 GitHub stars in just 72 hours with zero paid promotion, driven entirely by developers sharing it on r/LocalLLaMA and Hacker News. It also received independent editorial coverage from TechCrunch. That growth pattern matters. No launch campaign, no paid placements — just builders finding it and passing it along. That is a signal worth more than any marketing copy.
brew install --cask osaurus. Requires macOS 15.5+ and Apple Silicon. No account needed.
Core Features That Set It Apart
Three-Layer Persistent Memory
Osaurus agents remember through identity, pinned facts, and session episodes. A background consolidator decays, merges, and evicts old data so memory stays sharp instead of bloating. Most turns inject ~800 tokens or less; many inject zero. This means your agent actually learns your preferences over weeks, not just within a single chat.
Sandboxed Code Execution
Agents execute code in an isolated Linux VM powered by Apple's Containerization framework. Each agent gets its own Linux user and home directory. Full dev environment — shell, Python, Node.js, compilers — with zero risk to your Mac. Requires macOS 26 (Tahoe) for the sandbox feature.
On-Device Privacy Filter
Before sending anything to a cloud model, an on-device classifier detects names, emails, phones, URLs, addresses, and secrets. Each detection is shown in a review sheet with a scrubbed preview. Approved entities are swapped for stable placeholders, and the system is fail-closed: if anything leaks post-scrub, the send is blocked.
Full MCP Server + 20+ Plugins
Osaurus functions as a complete MCP (Model Context Protocol) server with native plugins for Mail, Calendar, Git, Browser, Filesystem, Search, Vision, Music, and more. Tools are auto-selected via RAG search based on the task — no manual configuration needed. You can also aggregate tools from remote MCP providers like Linear, Notion, GitHub, and Stripe.
Pricing: The Subscription-Free Reality
| Cost Category | Osaurus | What You Actually Pay |
|---|---|---|
| Platform License | Free (MIT) | $0 — forever |
| Local Model Inference | Free | Runs on your Apple Silicon chip; no API costs |
| Cloud Model Access | Bring Your Own Key | Standard provider rates (OpenAI, Anthropic, etc.) |
| Hardware Requirement | Apple Silicon Mac | 64GB RAM baseline; 128GB for larger models |
ToolRadar may earn a commission if you sign up through partner links. This does not affect our editorial independence.
Pros and Cons
✓ What Works
- ✅ Completely free and MIT-licensed with no subscription tiers
- ✅ Native Swift on Apple Silicon — no Electron bloat, just a 5MB footprint
- ✅ Persistent three-layer memory that actually learns your workflow over time
- ✅ Hardware-isolated sandbox for safe code execution
- ✅ 20+ native plugins plus full MCP server/client support
- ✅ On-device privacy filter with fail-closed design for cloud sends
- ✅ Works fully offline with local models via optimized MLX runtime
- ✅ Cryptographic identity system with secp256k1 addresses and revocable access keys
✗ What Holds It Back
- ❌ macOS-only and Apple Silicon-only — excludes Windows, Linux, and Intel Mac users
- ❌ Sandbox feature requires macOS 26 (Tahoe), which is not yet widely available
- ❌ 64GB RAM baseline for local models is a steep entry barrier; 128GB recommended for DeepSeek v4
- ❌ Still rough edges and missing features acknowledged by early users
- ❌ No mobile or web companion app — strictly desktop Mac
💡 Community Feedback
Osaurus vs Ollama vs LM Studio
| Feature | Osaurus | Ollama | LM Studio |
|---|---|---|---|
| Interface | Native Swift GUI | CLI-first | Cross-platform GUI |
| Agent Memory | Three-layer persistent | None built-in | Session-only |
| Code Execution | Sandboxed Linux VM | None | None |
| Plugins / Tools | 20+ native + MCP | Modelfile custom | Limited |
| Privacy Filter | On-device, fail-closed | N/A (local only) | N/A (local only) |
| Cloud Model Support | OpenAI, Anthropic, Gemini, Grok + more | Ollama Cloud (Pro/Max tiers) | None |
| Platform | macOS only | macOS, Linux, Windows | macOS, Windows, Linux |
| Pricing | Free forever | Free + Pro/Max cloud tiers | Free forever |
The comparison reveals a clear pattern. Ollama is the engine — lightweight, scriptable, and cross-platform, but bare-bones. LM Studio is the friendly garage for hobbyists who want a GUI without complexity. Osaurus is the complete vehicle: a native Mac app with a dashboard, safety features, autopilot, and a locked trunk. If you are a developer who lives in the terminal, Ollama remains the pragmatic choice. If you want a polished Mac-native experience with agent memory, sandboxed execution, and plugin extensibility, Osaurus is in a different league.
Learning Curve
Getting started with Osaurus is surprisingly gentle for a tool this capable. The Homebrew install is one line. The chat interface is immediately familiar. Connecting a local model is a one-click process through the built-in model browser. Where the curve steepens is in the advanced features: configuring the sandbox VM, writing custom plugins, setting up MCP providers with OAuth, and tuning the memory consolidation parameters. Most users will have a functional local AI assistant running within 15 minutes. Power users who want to build custom agents with scheduled tasks, folder watchers, and subagent delegation should budget a few hours to read the documentation and experiment. Compared to Ollama, which assumes terminal fluency, Osaurus is more approachable. Compared to LM Studio, which is intentionally simple, Osaurus has more depth to explore.
Who Should Use It
Ideal for: Mac power users, privacy-conscious professionals, developers who want a local AI harness with persistent memory, legal and healthcare teams exploring on-prem LLMs, and anyone tired of subscription fatigue. If you own an Apple Silicon Mac with 64GB+ RAM and want an AI assistant that remembers your projects, executes code safely, and never phones home without permission, Osaurus is built for you.
Look elsewhere if: You are on Windows or Linux, you have an Intel Mac, your machine has less than 32GB RAM, you need a mobile app, or you want the simplest possible local LLM runner without agent features. In those cases, Ollama or LM Studio are more practical fits.
Expert Editorial Opinion
Osaurus arrives at a moment when the AI tooling market is splintering between cloud-dependent subscriptions and underpowered local experiments. What Terence Pae and his team have built is neither. It is a serious attempt to own the layer between the user and the model — the memory, the tools, the identity, the execution environment — and to do so with the polish of a native Mac app rather than the jank of an Electron wrapper.
The technical architecture is genuinely impressive. The three-layer memory system with salience scoring and background consolidation solves a real problem that plagues every chatbot: context window bloat. The sandboxed VM for code execution, powered by Apple's own containerization framework, is a security posture that most AI tools simply do not attempt. And the on-device privacy filter with fail-closed design is the kind of feature that should be standard everywhere but rarely is.
The organic growth story is equally telling. Six thousand GitHub stars in 72 hours with zero marketing spend is not hype; it is validation from a community that has seen too many overpromising AI tools. When developers stake their own reputations on sharing a project, that carries weight. The TechCrunch coverage and Alliance accelerator backing add further credibility without diminishing the open-source ethos.
The pricing gap here is stark and intentional. Osaurus is free forever under MIT license. There is no freemium trap, no usage cap, no "Pro" tier waiting behind a paywall. The only cost is your hardware — and with Apple Silicon efficiency, that hardware cost is increasingly reasonable. For teams currently paying $20-50 per user per month for cloud AI tools, the TCO argument is compelling, especially when data sovereignty is a requirement.
Does it deserve attention without a free tier? It does not need one — the entire product is the free tier. The real question is whether the Mac-only, Apple Silicon-only restriction is too narrow for mainstream adoption. Our view is that it is a calculated trade-off. By targeting the platform where local inference is most efficient, Osaurus delivers a genuinely differentiated experience rather than a compromised cross-platform one. For the right user, that focus is a feature, not a bug.
Final Verdict
Osaurus is one of the most thoughtfully architected local AI platforms we have reviewed. It combines the power of an agent framework with the polish of a native Mac app, and it does so without charging a cent. The persistent memory, sandboxed execution, and privacy filter are not gimmicks — they are genuine engineering solutions to real problems. The Mac-only restriction and steep RAM requirements keep it from universal appeal, but for Apple Silicon owners with the hardware to match, it offers a level of control and continuity that cloud tools simply cannot replicate. This is not the tool for everyone. It is the tool for people who are serious about owning their AI.
Technical Quality: 9.2/10 · Price-to-Value: 9.5/10 · Maturity & Documentation: 7.5/10
🔗 Related ToolRadar Reviews
More tools from AI Agent Platform
- I Built an AI Agent Army Without Writing a Single Line of Code
- I Gave an AI Agent Full Control of My Workflow
- I Replaced My Fragile Cron Jobs With an AI Agent
- I Built a Real Mac App From a Chat Prompt
- I Turned My iPhone Keyboard Into an AI Powerhouse
- I Let an AI Agent Send 10,000 Cold Emails
- The AI Teammate That Speaks, Listens, and Thinks
- I Let an AI Agent Make My Phone Calls For Me
❓ Frequently Asked Questions
What would you build if your AI actually remembered everything?
Osaurus gives you the harness. The model is interchangeable. The memory, the tools, the identity — those are yours to keep. The only question left is what you will build with an agent that never forgets.
Comments
Post a Comment