Ears and voice on your computer
Silero VAD and faster-whisper recognise speech on your graphics card or processor. Replies use natural Kokoro voices by default, or your system's voice, Piper or Chatterbox. No microphone? Type instead.
Free and open source · Windows and Mac
The voice assistant that actually does things on your computer. Safely.
Click the orb or press Ctrl+Shift+J and say what you want. Jarvis opens apps, finds files, plays music, remembers things and works in your projects, and asks you first before anything important.
Version 0.1.0-alpha.2 · Windows 11 (Windows 10 may work), 64-bit · Apple silicon (M1 or later), macOS 13 or later
- No account with us
- No telemetry
- Read the 5-minute guide
Ready
Ctrl+Shift+JYou
Listening
Tool
open_app("notepad")
Jarvis
How it works
Your voice in, a finished job out.
Speech is recognised and spoken on your computer. Only the text of your request goes to the AI you chose, and nothing runs without passing the safety checks.
- 01Push to talk
You ask
Click the orb, hold Space or press Ctrl+Shift+J (⌃⇧J on a Mac). Or just type.
- 02On your computer
It hears
Silero VAD notices when you've finished; Whisper turns your words into text.
- 03Your choice
Your AI decides
Claude through your own account, or any model you connect, picks the tools.
- 04Policy-checked
Tools act
Every tool call passes the same checks: allow, ask you first, or deny.
- 05On your computer
It answers
The reply is spoken with a natural Kokoro voice or your system's own.
What it does
An assistant that can actually help.
Your choice of AI
Claude through your own Claude account by default, or an API key for Anthropic, OpenAI, OpenRouter, Groq or Gemini, or a model running on your PC.
Real tools
Open apps, media keys, web search and reading, memory, project folders, terminals, desktop control, Chrome profiles, email and coding agents.
Tasks with several steps
Bigger goals become tracked tasks with a plan and checks Jarvis verifies itself, with pause, resume and retry.
One safety layer for every model
Each tool call is validated, then allowed, asked about or denied, with spoken and on-screen approvals, protected folders, timeouts and an activity log. Risky groups stay off until you turn them on.
Costs you can see
Tokens and an estimated cost for each day in Activity, and an optional daily spending limit.
A proper desktop app
A floating orb, a tray or menu bar icon, the Ctrl+Shift+J shortcut (⌃⇧J on a Mac), and no console windows. A setup wizard walks you through everything.
Private by design
No ads, no tracking, no telemetry. Your history and memories stay on your computer; only the requests you make go to the AI you chose.
Connect your AI
Use the AI you already have.
Switch any time in Settings › AI. Keys are kept in Windows Credential Manager or the macOS Keychain, and masked in logs and history.
Default
Sign in with Claude
Use the Claude Pro or Max plan you already have. Jarvis uses Claude Code's sign-in and never sees or stores your password.
- Claude
Bring an API key
Pay per use with a key from a provider. Free tiers from Groq, OpenRouter and Gemini work too.
- Anthropic API
- OpenAI
- OpenRouter
- Groq
- Google Gemini
Run a model on your PC
Keep even the requests at home with a local model. No key needed.
- Ollama
- LM Studio
- Any OpenAI-compatible server
Safe on your computer
It asks before it does anything important.
Risky abilities start switched off
Changing files, Command Prompts, controlling other apps, email and hidden coding-agent runs wait until you turn them on.
One checkpoint for every AI
Whichever model you use, each action is allowed, asked about first, or denied by the same rules.
Some things always need your hand
Deleting a file, emailing someone new, shutting down or restarting: a spoken “yes” isn't enough, you click Allow or press Y.
Hidden instructions don't get a say
After Jarvis reads a web page, a screen or a file, actions that change something ask you first.
ActivityPolicy engine
- allowopen_app("notepad")Basics
- allowread_webpage("recipe site")now reading outside content
- asksend_email("…")after reading a web page
- asksystem_command("restart")click or Y only
- denyread_file("my-project/.env")secret files are never opened
Get Jarvis
Ready when you are.
Download it, answer a few questions, and talk to it in about five minutes. Free, and yours to read, change and share under the Apache License 2.0.
Version 0.1.0-alpha.2 · Windows 11 (Windows 10 may work), 64-bit · Apple silicon (M1 or later), macOS 13 or later