Questions people ask before they download.

A free, open-source desktop app. You talk to an AI Chief of Staff, which builds a team of specialist bots for each job and runs it. New bots check with you before they act.

Ferrox Labs, a small team in Austin, Texas. Murage is open source under AGPL-3.0, so you can read the code behind every claim here. There’s no SOC 2 or outside security audit yet; the security page lists what does exist.

It runs only while your computer is on with Murage open. There are no per-bot spend caps, no shared always-on workspaces and no native phone app yet. Murage Cloud, for running with your computer off, isn’t open yet.

No. You talk to your Chief of Staff in plain words. The one technical moment is installing an engine like Claude Code: Murage opens a one-line command for you to paste, and you sign in once. Developers can go further with custom engines and MCP servers.

Mac (Apple silicon and Intel), Windows and Ubuntu. A few features vary: the built-in browser (experimental) is Mac and Linux only, and a bot can use your desktop on macOS or on Ubuntu with Xorg. The download page has the full list.

No account is needed to start. You need an AI engine: a sign-in you already have, like Claude Code, Codex or Hermes, a local model, or an API key.

Yes. Each person runs their own free copy on their own computer. Build a team once, export it, and everyone imports the same bots, skills and routines; logins never travel. Bots can post drafts to your team’s Slack channels through connected apps, with your approval, and each app takes up to five labeled accounts. Shared always-on workspaces come with Murage Cloud, which isn’t open yet.

Yes. The app is free and open source under AGPL-3.0, with no paid tier. You pay your AI provider for model usage, as you would anywhere.

Your AI provider’s usage. Flux Router is Ferrox Labs’ optional credit-billed service for AI models, connected apps, voice, images and web search. You pay only for what you use, and your own provider keys or connected-apps key work instead.

Not per bot, yet. A task can make at most 16 hand-offs per turn and 32 in total, but those are coordination limits, not spending caps. If you use Flux Router, you can set a monthly spending limit on your Flux account. On your own Claude or ChatGPT plan, your plan’s allowance is the limit.

Murage Cloud will run your Murage on a server we look after, so it keeps working when your computer is off. It isn’t open yet. The desktop app stays free.

Not unless you give it room. New bots start on Ask. On Full access, a bot stops before messaging anyone new, posting publicly, paying, or deleting outside its folder, unless you have allowed it for that task. On Hermes and other ACP engines, Ask and the stop line cover only what the engine asks Murage about: shell commands and file edits. Replies in an existing conversation go ahead on Auto and Full access. No limits turns the stop line off, and only you can switch it on.

Yes. Pair your phone over Wi-Fi or Tailscale and approve in the Murage web app in its browser, or get approvals in Telegram with Approve once and Allow for this task buttons. On a voice call you can approve out loud. Your computer needs to be on with Murage open.

Deny the request, lower its permission level, or write it into House Rules, which every bot reads first.

Skill Guard scans every skill for risky instructions before a bot can use it. Risky ones need your OK and dangerous ones are blocked. The scan doesn’t test the advice itself, so read a skill before you enable it.

No. There’s no SOC 2, HIPAA or outside security audit yet. What exists: the full source under AGPL-3.0, signed installers with published checksums, and a one-page overview for security reviews.

Memory, files and conversations are stored on your computer. What a bot sends to your AI, and to any app or service you connect, goes to them, so choose ones you trust. The security page lists every destination.

Yes. Open the memory, see where each item came from, pin it, edit it or make it forget.

Yes. Open any bot to see everything it reads, in order, and the last turn exactly as it read it.

Claude Code, Codex, Hermes, Grok Build, Cursor, Google Antigravity, Kimi, Qwen, Droid, OpenCode, Pi, Fuigo (built in), local models (Ollama, LM Studio), and any OpenAI-compatible API (chat only). OpenClaw is coming. Each bot can use a different one. To run teams and use tools, pick a tool-capable engine: Claude Code, Codex, Hermes, or Fuigo with a supported model. A plain OpenAI-compatible endpoint works for chat and drafting only.

No. Murage sits above Claude Code, Codex, Hermes, local models and more, and runs them as engines. Mix them on one team, and change a bot’s engine any time without losing its memory or its job.

1,500+ apps, including Gmail, Calendar, Slack and HubSpot, through Flux Router or your own connected-apps key, plus any MCP server.

Yes. Call any bot and just talk. It answers straight away, looks things up while you speak, and hands work to its team. Calls use Flux Router credits or your own voice keys.

Not yet. Bots and routines run while Murage is open. A routine that runs late, within 12 hours, still runs. When Murage Cloud opens, it will keep your team working with your computer off. It isn’t open yet.

There is no date yet. Join the waitlist on the Cloud page and we’ll email you once, when it opens.