risa-labs-inc/BossConsole

View on GitHub ↗

Open-source, multi-platform harness for AI agents — a native, multi-threaded operator's console (JVM, not Electron) to run Claude Code, Codex, Gemini or OpenCode with a real browser, terminal, editor, secrets & 100+ MCP tools. Built for enterprises, science & research.

221 ★8 forksKotlinUpdated 18d ago

What you need to know

BOSS is the first open-source (Apache-2.0) multi-platform harness for AI agents — an operator's console that unifies an embedded browser, terminal, code editor, plugin toolbox and governed MCP tool layer into one desktop workspace for agents and the humans who direct them, built on Kotlin/Compose Multiplatform and the JVM.

Install

brew install --cask boss
curl -fsSL https://raw.githubusercontent.com/risa-labs-inc/BossConsole-Releases/main/install.sh | bash
iwr -useb https://raw.githubusercontent.com/risa-labs-inc/BossConsole-Releases/main/install.ps1 | iex

Usage

  • Attach any CLI agent (Claude Code, Codex, Gemini CLI, OpenCode) once via MCP; BOSS re-attaches it on restart and injects BOSS_MCP_PORT
  • Scan a QR code to share a live terminal session to your phone or a teammate over end-to-end encryption
  • Expose 100+ mcp__boss__* tools (terminal, git, browser, docker, k8s, secrets, automation) to in-terminal agents

Key features

  • Open-source, agent-agnostic harness: run Claude Code, Codex, Gemini or OpenCode with a shared toolset over MCP
  • Governed tools: server-enforced RBAC, a per-tool kill-switch, user-scoped secrets, and signed plugins in a Toolbox store
  • Native JVM (Compose Multiplatform) with live plugin hot-reload and a Tool Creator/Evolver loop
  • Fluck embedded browser that the agent can navigate, script and automate, with record-and-replay RPA
  • BossTerm shareable terminal with Session Sharing via QR/WebSocket and AES-256-GCM encryption

Best for

Enterprises, science and research teams that want a governed, open-source desktop harness giving any coding agent real browser, terminal, editor, secrets and automation capabilities.

Caveats

  • Loopback-only, single-user MCP server; plugins run in-process (crash-isolated but not OS-sandboxed)
  • Admin users bypass all RBAC permission checks — the per-tool kill-switch is the control that always holds
  • Requires JxBrowser license key and Supabase config when building from source
Platforms: macOS · Windows · LinuxClients: Claude Code · Codex · Gemini CLI · OpenCode · MCP clients

Reviewed 2026-08-11

Topics

agent-harnessai-agentsbrowserclaude-codecodexcompose-multiplatformdesktop-appgeminihot-reloadjvmkotlin-multiplatformllmmcpmodel-context-protocolmultithreadingopen-sourceopencoderbacterminal
Stars
221★
Forks
8
Language
Kotlin
License
Apache-2.0
Created
2026-07-21
Last push
2026-08-18