Embody

An agent with a body you can check.

Pip lives sealed inside an attested Intel TDX enclave. Your keys, memories and messages are encrypted to it and never leave, so not even whoever runs the server can peek.

Checking Pip’s seal…

Uses the passkey on this device or in your keychain. No passwords, nothing to phish.

Embody

Hi, I’m Pip.

Your agent, snug in its sealed little enclave. Ask me anything. Risky things wait for your tap; money and email wait for your passkey.

Approvals

Things Pip is holding until you say so.

Connections

Accounts Pip can help with. Every credential stays sealed inside the enclave.

More

Plan

Pip knows

Trust

This device

Friends

Your data

Account

Embody · Pip is sealed by Intel TDX · inference end-to-end encrypted

Policy

Allow runs silently, tap asks you first, deny blocks. Money and outbound email also need your passkey on approval.

Allowed hosts

Where web_fetch may reach. Subdomains included; * means anywhere.

Wallet

Limits on wallet_send. They are checked again right before the enclave key signs, so a change here also applies to sends already waiting.

Advanced: raw policy JSON
Unsaved changes

Memory

Tasks

Things Pip does later or on repeat, under your usual policy. Ask in chat, or add one here.

Log

    Usage

    Plan

    Attestation

    Embody