Orcel
Menu
View releases
Local-first computer access for AI agents

Your computer.
Your terms.

Orcel gives MCP-compatible agents a governed path to your own computer. Work stays bounded by local trust, approvals, policy, and audit.

View on GitHub Read the security model

Open source · Apache-2.0 · No mandatory Orcel cloud

Orcel
Local boundary active
01 · AGENT

Request

An MCP client proposes a bounded action.

ChatGPTClaudeCodexMCP
02 · ORCEL

Decide locally

Trust, policy, approval, leases, and target identity stay authoritative.

Trust checked Policy bounded Approval local
03 · COMPUTER

Act, then record

Qualified local providers perform only the permitted operation.

FilesGitBrowserDesktop
LOCAL-FIRSTSTANDARD MCPEXPLICIT APPROVALSBOUNDED AUTHORITYAUDITABLE ACTIONS
01 / PRODUCT

One boundary.
Every agent.

Use the AI client you prefer without handing it an unrestricted shell, filesystem, or desktop.

01

Standard MCP interface

Connect through the Model Context Protocol instead of a private agent runtime.

CLIENT MCP ORCEL LOCAL PROVIDER
02

Local-first authority

Local policy remains decisive even when optional remote transport is in use.

03

Fail closed

Missing trust, stale identity, expired authority, or unsupported capability returns a bounded failure.

02 / SECURITY FIRST

Permission lives here.

The computer stays authoritative. The agent can request; it cannot silently promote itself.

Approvals stay local

Approval flows are decided on the computer that owns the authority.

No silent elevation

Agent input cannot mint trust, approval, leases, or privileged authority.

Bounded capabilities

Files, Git, browser, desktop, and registered tools stay behind explicit contracts.

Auditable actions

Security decisions and qualified execution paths produce inspectable evidence.

03 / COMPUTER USE

Powerful capabilities.
Clear boundaries.

Computer use is not a shortcut around policy. Observation, proposals, approvals, execution, and postconditions remain separate steps.

Explore the threat model
  1. 01
    Observe

    Read only through qualified, bounded surfaces.

  2. 02
    Propose

    Agent output is untrusted proposal data, not authority.

  3. 03
    Validate

    Targets, policy, trust, freshness, and risk are checked locally.

  4. 04
    Approve & act

    Mutations run only through the governed local path.

  5. 05
    Record

    Outcomes are reported without inventing success or rollback.

04 / FOR DEVELOPERS

Integrate once.
Keep the boundary.

Orcel exposes the qualified local surface through MCP, so clients can change without changing who owns authority.

Read the docs Browse the repository
mcp.jsonlocal
{
  "mcpServers": {
    "orcel": {
      "command": "orcel",
      "args": ["mcp", "stdio"]
    }
  }
}
Identity note

orcel is the current CLI identifier. Prior installations and trusted state are not silently migrated.

ORCEL

A more capable agent.
On your computer.

Open source, local-first, and built around explicit authority.

View verified releases Browse the source

Published artifacts stay on the canonical GitHub Releases surface. Verify checksums and provenance before install.