gebruder/wirken

curl -fsSL install.sh | sh (supply-chain verified via signed checksums)
wirken setup then wirken run

Usage

• •Walk through six setup steps: provider, channels, credentials, service, sandbox, audit
• •Route messages from Telegram, Slack, Teams and friends to agents; agents read files, call APIs and run tools

Key features

• ✓Provider-agnostic models: OpenAI, Anthropic, Gemini, Ollama, Bedrock, NVIDIA NIM, TEEs
• ✓Untrusted-agent model with least-privilege three-tier permissions
• ✓Credentials never reach the model - encrypted vault kept at the edge
• ✓Signed hash-chained audit log with SIEM streaming and full attribution
• ✓Sandboxed shell execution in ephemeral containers with gVisor option
• ✓MCP proxy isolates connector credentials in a separate process
• ✓Per-channel process isolation and capability-attenuated sub-agents
• ✓WebChat UI, service and cron scheduling modes

Best for

Enterprises wiring messaging channels to agents under strict security, audit and compliance controls

Caveats

• ⚠Single binary supports Linux, macOS and Windows 11
• ⚠Sandboxed exec requires Docker
• ⚠Some features (service installer, cron presets) are Linux/macOS only