Open-source, multi-platform harness for AI agents — a native, multi-threaded operator's console (JVM, not Electron) to run Claude Code, Codex, Gemini or OpenCode with a real browser, terminal, editor, secrets & 100+ MCP tools. Built for enterprises, science & research.
# Add to your Claude Code skills
git clone https://github.com/risa-labs-inc/BossConsoleLast scanned: 7/25/2026
{
"issues": [
{
"file": "README.md",
"line": 93,
"type": "remote-install",
"message": "Install command (remote install script piped to a shell — review the source before running): \"curl -fsSL https://raw.githubusercontent.com/risa-labs-inc/BossConsole-Releases/\"",
"severity": "low"
}
],
"status": "PASSED",
"scannedAt": "2026-07-25T06:18:07.418Z",
"npmAuditRan": true,
"pipAuditRan": true,
"promptInjectionRan": true
}BossConsole is an open-source ai agents skill for AI coding assistants such as Claude Code, Codex CLI, and ChatGPT, built by risa-labs-inc. Open-source, multi-platform harness for AI agents — a native, multi-threaded operator's console (JVM, not Electron) to run Claude Code, Codex, Gemini or OpenCode with a real browser, terminal, editor, secrets & 100+ MCP tools. Built for enterprises, science & research. It has 221 GitHub stars.
Yes. BossConsole passed SkillsLLM's automated security scan — a dependency vulnerability audit plus prompt-injection heuristics — with no high-severity issues. You can read the full report in the Security Report section on this page.
Clone the repository with "git clone https://github.com/risa-labs-inc/BossConsole" and add it to your Claude Code skills directory (see the Installation section above).
BossConsole is primarily written in Kotlin. It is open-source under risa-labs-inc on GitHub, so you can review or fork the full source.
Yes. SkillsLLM lists many other AI Agents skills you can browse and compare side by side. Open the AI Agents category from the badge at the top of this page, or use the Related Skills and comparison links further down to weigh BossConsole against similar tools.
No comments yet. Be the first to share your thoughts!
The first open-source, multi-platform harness for AI agents - an evolvable toolbox for agents and the humans they work with.
🧪 Built for enterprises, science, and research.
⚡ Natively multi-threaded - built on the JVM, not Electron - with live hot-reload and laptop-to-supercomputer scale.
Bring your own agent - Claude Code, Codex, Gemini, or OpenCode - and give it a real browser, terminal, editor, secrets, and automation. Then decide exactly what each one is allowed to touch. Run it on your own machine, hand a live terminal to your phone with a QR code, and reshape any tool - by hand or by the agent itself - while the app keeps running.
⬇ Download · 📊 Compare · ⚡ Browser benchmark · 🤖 Run an agent · 🔐 Governance · 🧰 Toolbox · 🖥️ BossTerm
Just want to download BOSS? Head to BossConsole-Releases for pre-built installers.
Built with Kotlin Multiplatform and Compose Multiplatform, BOSS unifies an embedded browser, a blazing-fast shareable terminal, a code editor, an extensible Toolbox of plugins, and a governed MCP tool layer into one desktop workspace for complex, AI-assisted work.
Every other AI-agent desktop app and agentic IDE - Claude Desktop, OpenAI Codex, Google Antigravity, Cursor, and Windsurf/Devin - is closed source, and most lock you to a single vendor's model. BOSS is the first open-source, multi-platform harness in the category: Apache-2.0, cross-platform, and built to run any agent.
The deeper difference: BOSS is both the agent's home and an agent-operable app. The same MCP layer your agent uses to do work also exposes BOSS itself - its tabs, terminals, browser, editor, git, secrets, and automation - as 100+ mcp__boss__* tools. Read-only tools (list tabs, read a pane's output, tail the console, snapshot performance, inspect git) give an agent live situational awareness of the workspace; action tools let it act on what it finds. So the agent doesn't just chat about your code - it perceives the running app and drives it, carrying out multi-step tasks autonomously.
And unlike most of the field, BOSS bundles a real embedded browser - Fluck - the agent can navigate, script, and automate (browser_navigate, browser_run_js, plus record-and-replay RPA), with logins filled from the Secret Manager and never handed to the model.
It's also native, not Electron. BOSS runs on the JVM with true multithreading and hot-reloads plugins at runtime - so an agent can evolve a tool and see it live, without restarting the app - while Claude Desktop and the VS Code-fork IDEs (Antigravity, Cursor, Windsurf/Devin) run on a single-threaded JavaScript event loop.
| BOSS | Claude Desktop | Codex | Google Antigravity | Cursor | Windsurf / Devin | |
|---|---|---|---|---|---|---|
| Open source | ✅ Apache-2.0 | ❌ | △ CLI only¹ | ❌ | ❌ | ❌ |
| Bring any agent / model | ✅ BYO agent | ❌ Claude only | ❌ OpenAI only | ✅ multi | ✅ multi + BYOK | ✅ multi + BYOK |
| MCP tools | ✅ 100+ built-in | ✅ | ✅ | ✅ | ✅ | ✅ |
| Embedded browser (agent-driven) | ✅ Fluck | △ Computer Use² | ❌ | ✅ + DevTools | ❌ | ❌ |
| Integrated terminal | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ |
| Share terminal session (QR / multi-user / E2E) | ✅ | ❌ | ❌ | ❌ | ❌ | ❌ |
| Per-tool governance (RBAC + kill-switch) | ✅ | △³ | △³ | △³ | △ Teams | △ Enterprise |
| Plugin ecosystem | ✅ Toolbox store | △ MCP extensions | △ IDE ext. | ✅ VS Code ext. | ✅ VS Code ext. | ✅ VS Code ext. |
| Hot-reload / evolvable at runtime | ✅ live plugins + Tool Evolver | ❌ | ❌ | △⁵ | △⁵ | △⁵ |
| Runtime | JVM, multi-threaded | Electron / JS⁶ | Rust (CLI) | Electron / JS⁶ | Electron / JS⁶ | Electron / JS⁶ |
| Platforms | mac · Win · Linux (x64+ARM64) | mac · Win · Linux (beta) | mac · Win · Linux⁴ | mac · Win · Linux | mac · Win · Linux | mac · Win · Linux |
✅ yes · △ partial/limited · ❌ no. ¹ Only OpenAI's Codex CLI is open source (Apache-2.0); the Codex desktop app is proprietary. ² Claude Desktop's "Computer Use" controls the whole screen rather than bundling a scriptable in-app browser. ³ Enterprise-plan admin controls exist, but fine-grained per-tool RBAC isn't documented. ⁴ Codex CLI is cross-platform; the desktop app is macOS/Windows. ⁵ VS Code-fork IDEs reload extensions via a full window reload; none offers BOSS-style live plugin hot-reload + agent-driven tool evolution. ⁶ Claude Desktop and the VS Code-fork IDEs run on Electron (Chromium + Node.js) - a single-threaded JavaScript event loop with worker/child-process offloading; BOSS runs natively on the JVM with true multithreading. Compiled from public sources, July 2026 - these products move fast, so corrections are welcome via issue or PR.
We ran Speedometer 3.1 on the BOSS Fluck browser and five desktop browsers on the same M3 Max Mac. Each reported median below comes from three 10-iteration runs; higher is better.
| Browser | Observed median |
|---|---|
| BOSS Fluck browser | 47.9 |
| Comet | 46.2 |
| Google Chrome | 35.5 |
| ChatGPT Atlas | 34.6 |
| Safari | 29.9¹ |
| Firefox | 22.5² |
Treat Fluck and Comet as tied within measurement precision. A follow-up experiment alternated them back-to-back three times: Fluck led each pair, but its 3.4% median margin was within the browsers' own run-to-run spread and was not statistically significant (p = 0.125). The durable signal is that Fluck and Comet both scored roughly 30% above Chrome and Atlas in these conditions.
Absolute scores were depressed by heavy co-tenancy - 800–1300% ambient CPU, including roughly four cores from a running Docker Desktop VM - so compare browsers within this experiment, not against published scores from quiet machines. Read the full benchmark report for the paired test, per-suite analysis, discarded runs, and caveats; the reproducible harness, per-run JSON, and screenshot evidence are committed alongside it.
¹ Safari used a live profile with existing tabs and extensions, so it is not comparable to the fresh-profile runs. ² Firefox varied by 40% across its three runs; its median is the least stable result.
| Platform | Architecture | Download |
|---|---|---|
| macOS | Universal (Apple Silicon + Intel) | Homebrew | DMG |
| Windows | x64 | MSI |
| Windows | ARM64 | MSI |
| Linux | AMD64 | DEB | RPM | JAR |
| Linux | ARM64 | DEB | RPM | JAR |
Download links always fetch the newest release directly, via the latest-release edge function - no API key needed, and not subject to GitHub's 60-request/hour limit for unauthenticated callers. Release metadata as JSON - version, assets, sha256 checksums - is at ?app=boss. Prereleases are excluded by default; add &prerelease=true to consider them, or &channel=beta (alpha, rc) to track one channel. To browse or pin a specific version, see BossConsole-Releases.
A browser resolves the redirect and saves the versioned filename. Command-line tools do not: there is no Content-Disposition header, so `cu