risa-labs-inc/BossConsole
View on GitHub ↗Open-source, multi-platform harness for AI agents — a native, multi-threaded operator's console (JVM, not Electron) to run Claude Code, Codex, Gemini or OpenCode with a real browser, terminal, editor, secrets & 100+ MCP tools. Built for enterprises, science & research.
What you need to know
BOSS is the first open-source (Apache-2.0) multi-platform harness for AI agents — an operator's console that unifies an embedded browser, terminal, code editor, plugin toolbox and governed MCP tool layer into one desktop workspace for agents and the humans who direct them, built on Kotlin/Compose Multiplatform and the JVM.
Install
brew install --cask boss curl -fsSL https://raw.githubusercontent.com/risa-labs-inc/BossConsole-Releases/main/install.sh | bash iwr -useb https://raw.githubusercontent.com/risa-labs-inc/BossConsole-Releases/main/install.ps1 | iex
Usage
- •Attach any CLI agent (Claude Code, Codex, Gemini CLI, OpenCode) once via MCP; BOSS re-attaches it on restart and injects BOSS_MCP_PORT
- •Scan a QR code to share a live terminal session to your phone or a teammate over end-to-end encryption
- •Expose 100+ mcp__boss__* tools (terminal, git, browser, docker, k8s, secrets, automation) to in-terminal agents
Key features
- ✓Open-source, agent-agnostic harness: run Claude Code, Codex, Gemini or OpenCode with a shared toolset over MCP
- ✓Governed tools: server-enforced RBAC, a per-tool kill-switch, user-scoped secrets, and signed plugins in a Toolbox store
- ✓Native JVM (Compose Multiplatform) with live plugin hot-reload and a Tool Creator/Evolver loop
- ✓Fluck embedded browser that the agent can navigate, script and automate, with record-and-replay RPA
- ✓BossTerm shareable terminal with Session Sharing via QR/WebSocket and AES-256-GCM encryption
Best for
Enterprises, science and research teams that want a governed, open-source desktop harness giving any coding agent real browser, terminal, editor, secrets and automation capabilities.
Caveats
- ⚠Loopback-only, single-user MCP server; plugins run in-process (crash-isolated but not OS-sandboxed)
- ⚠Admin users bypass all RBAC permission checks — the per-tool kill-switch is the control that always holds
- ⚠Requires JxBrowser license key and Supabase config when building from source
Reviewed 2026-08-11
Topics
- Stars
- 221★
- Forks
- 8
- Language
- Kotlin
- License
- Apache-2.0
- Created
- 2026-07-21
- Last push
- 2026-08-18