moltis-org/moltis

一个二元对立——沙盒式、安全、属于你的。

安装 • 比较 • 架构 • 安全性 • 功能 • 工作原理 • 贡献

---

Moltis 最近登上了 Hacker News 的头版。请开启一期以避免任何摩擦。我专注于让 Moltis 变得出色。

设计上安全——你的密钥永远不会离开你的机器。每个命令都运行在沙箱容器中，绝不会在主机上运行。

你的硬件——运行在Mac Mini、树莓派或你拥有的任何服务器上。一个Rust二进制文件，没有Node.js，没有NPM，也没有运行时。

全功能——语音、内存、跨会话调用、自动编辑检查点、调度、Telegram、Signal、Discord、浏览器自动化、MCP服务器、SSH或节点支持的远程执行、带主机钉钉的部署密钥（网页UI）、实时设置→工具库存、兼容光标的项目上下文和上下文文件威胁扫描——全部内置。没有插件市场，供应链攻击也无从被突破。

Auditable — 代理运行者和模型接口可容纳 ~7.5K 线，提供者可多用 ~1.9 万线。Rust 工作区有 ~270K 线，分布在 59 个可独立审计的模块化箱子上，包含 470+ 个包含测试的 Rust 文件。

---

Moltis recently hit the front page of Hacker News. Please open an issue for any friction at all. I’m focused on making Moltis excellent.

Secure by design — Your keys never leave your machine. Every command runs in a sandboxed container, never on your host.

Your hardware — Runs on a Mac Mini, a Raspberry Pi, or any server you own. One Rust binary, no Node.js, no npm, no runtime.

Full-featured — Voice, memory, cross-session recall, automatic edit checkpoints, scheduling, Telegram, Signal, Discord, browser automation, MCP servers, SSH or node-backed remote exec, managed deploy keys with host pinning in the web UI, a live Settings → Tools inventory, Cursor-compatible project context, and context-file threat scanning — all built-in. No plugin marketplace to get supply-chain attacked through.

Auditable — The agent runner and model interface fit in ~7.5K lines, with providers in ~19K more. The Rust workspace is ~270K lines across 59 modular crates you can audit independently, with 470+ Rust files containing tests. Unsafe code is isolated to FFI and precompiled runtime boundaries, not the core agent loop.

Installation

# One-liner install script (macOS / Linux)
curl -fsSL https://www.moltis.org/install.sh | sh

# macOS / Linux via Homebrew
brew install moltis-org/tap/moltis

# Docker (multi-arch: amd64/arm64)
docker pull ghcr.io/moltis-org/moltis:latest

# Or build from source
cargo install moltis --git https://github.com/moltis-org/moltis

Comparison