How Bokyaa keeps your Mac safe while it acts for you

An assistant that can open apps, read files and run your Shortcuts is only useful if you can trust it not to do something you did not ask for. Bokyaa is built around one rule: the cloud plans and records; the Mac executes. The server never gets direct access to your machine, and neither a compromised server nor a manipulated model can make your Mac do something you did not allow.

Here is how that works in practice.

Pairing a Mac takes your explicit approval

The desktop app asks the Bokyaa API to start pairing and gets back an 8-character code. You enter that code in the web dashboard while signed in, pick a workspace and approve. Only then does the Mac receive its device token, exactly once.

• The server stores only a SHA-256 hash of the device token. The Mac keeps the token in the macOS Keychain.
• Pairing requests expire after 10 minutes, and each code works once.
• The Mac connects outbound only, so it works behind a home or office router without opening any ports.

Anything that changes something waits for you

Every tool has a risk level. Reading is easy; tools that write or delete wait for an explicit approval from the device owner or a workspace admin before they run. You see the request in the Mac app, on the web or on your iPhone, and you decide. A request nobody approves expires after 15 minutes.

Your Mac checks every action again

Approval on the server is not the last word. Before running anything, the agent on your Mac re-validates the call on its own:

• the tool must be one the Mac app actually implements;
• the arguments are parsed again from scratch;
• file paths are resolved to their real location and must sit inside folders you allowed on that Mac;
• web addresses must be http or https.

There is no raw shell tool. When the agent starts a process it passes a list of arguments, never a shell string.

Everything is written down

Every pairing, approval decision, dispatched action and result goes into the workspace's activity log, so you can see afterwards exactly what the assistant did and who allowed it.

A kill switch that always works

The Mac app has a kill switch. Turning it on stops the assistant's work on that Mac immediately, whatever it was in the middle of.

Private by default

On the Free plan everything runs on your Mac: an open-source model through Ollama, with speech recognition and speech synthesis on the device, so your audio and prompts do not have to leave your machine. Paid plans add cloud models when you choose to use them.

Ready to try it? Download Bokyaa for Mac.