Redde

An iPhone, iPad and CarPlay client for Hermes, the open-source AI agent you run on your own machine, or for any OpenAI-compatible model server. Talk or type, watch the agent think and use its tools, approve what it wants to run, and manage its sessions, projects, skills, cron jobs and Kanban board from your phone.

App Store · Website

No account and no analytics: your conversations go only to the server you set up, speech is recognized on the device, and credentials stay in the iOS Keychain. The one service Goosehouse runs is an optional relay for notifications when the app is closed, which carries them encrypted and can't read them (docs/push.md).

Features

• Voice first. On-device speech recognition, replies spoken by the built-in voice or your own Kokoro server, hands-free mode, barge-in, AirPods and CarPlay. Switch the camera on in voice mode and what you point the phone at goes with your question.
• Your language. Listen in any language on-device transcription supports, hear each reply in a voice for the language it's written in, ask the agent to always answer in one language, and end a hands-free conversation with stop phrases of your own.
• Spoken prefixes. Start a spoken message with a word of your choice and Redde adds a text prefix, switches the conversation to a model you pick, or both. Voice and Siri only.
• Watch it work. Streaming reasoning, tool calls, subagents, and cards for approvals, clarifying questions, sudo prompts and secrets, also answerable from a notification, and approvals and questions by voice, or with a nod of the head on AirPods, if you turn that on. A paired Hermes sends those notifications when the app is closed too, encrypted end to end.
• Phone tools. Turn them on and your agent can use the iPhone's calendar, reminders, contacts, photos and a folder of files, through Redde: look things up, add a reminder or an event, save a file, set an alarm or a timer, write a few lines on a widget of its own that it can keep up to date while Redde is closed, start a call, and write a message for you to send. Changes are put to you first; nothing reaches into other apps.
• Rich replies. Markdown, highlighted code, tables, task lists, Mermaid diagrams and math, rendered offline with no third-party Swift dependencies, at a text size of the conversation's own, with a ring that shows how full the model's context is.
• Write it your way. A draft for each conversation, pictures pasted or dropped in, files and video, dictation into the message field, a page of its own for a long message, and a Return key that sends if you want it to.
• The whole agent. The shared session ledger, projects, several servers and Hermes profiles, skills and toolsets, memory and context files, cron jobs and the Kanban board.
• Each conversation its own way. On the Dashboard: fast mode and "run commands without asking" for one conversation, in the model menu, and Move to Project in the chat list.
• The agent's plan. When Hermes keeps a task list for a long job, the reply shows it as a checklist: what is done, what it is on, what is left.
• The server too. What the gateway is connected to, its MCP servers with a switch and a test for each, its logs, and restarting or updating Hermes, from Settings → Gateway. And its folders, from Settings → Files: look at a file, edit a text one, upload, make folders, delete.
• Set up by code. Scan a QR code or open a setup link and the connection fills itself in. A device that is set up can show the code for the next one.
• Everywhere on iOS. Siri and Shortcuts (also by Hermes profile: "Ask Work in Redde"), the Action Button, Control Center, a Live Activity, quick notes for your agent to file ("Take a note in Redde": nothing is said back, and a note taken offline goes when it can), the share sheet, the camera, and Siri AI messaging on iOS 27 (opt-in). Widgets for the last reply, for what the agent is waiting on you for, for how full the context is, and one the agent writes on itself.
• On the wrist. An Apple Watch app that asks by dictation and reads the answer aloud, carries on a conversation picked from the server's list, answers approvals, and puts Ask Redde on a watch face as a complication.
• Private. An offline message queue, the conversations you have opened still readable with no connection, Face ID lock, and no account, analytics or tracking.

Requirements

• iOS 26 or later (Siri AI features need iOS 27).
• A backend, reached by one of three connections:

Profiles need Hermes 0.21 or later. Over the Hermes API a named profile also needs gateway.multiplex_profiles and that profile's own API_SERVER_KEY.

A Dashboard that signs you in with Google or another identity provider has no password to type: tap Sign in with a browser (Hermes 0.21 or later). A server behind a reverse proxy that asks for a header of its own takes it under Settings → Connection details → Custom headers, next to the Cloudflare Access service token.

Setup codes

Instead of typing an address and a key on the phone, hand Redde a setup code: a link, or a QR code of it.

scripts/setup-code.py --name Home --dashboard http://hermes.home.example:9119 --user redde

The script asks for the password without showing it and prints the link, plus its QR code when qrencode is installed. In Redde's setup screen choose Scan a setup code or Paste a setup link; the iPhone Camera opens the code too, and so does tapping the link in Messages or Mail. Redde shows what the code sets and where it points, and saves nothing until you agree. It never overwrites a server that is already set up: the code is added beside it.

Once one device is set up, Settings › Connection › Set up another device shows its code. Passwords and keys are left out until you ask for them, which takes Face ID or the passcode.

The link is https://redde.goosehouse.org/connect# followed by any of these, percent-encoded:

It is a web address so that iOS opens it in Redde wherever it is tapped (a universal link, which no other app can claim), and so that a device without the app gets a page saying what to do. The connection comes after the #, the part of an address a browser never sends, so the site doesn't see it; the page is a static file (companion/website) whose script only hands the link to the app. To involve no website at all, use the app's own form, with the same parameters after redde://connect? (scripts/setup-code.py --app-link).

A code with a password in it is as good as the password. Show it to your own devices, not in a screenshot or a chat.

Building

Requires Xcode 27 and XcodeGen (brew install xcodegen). The Xcode project is generated and not committed.

xcodegen generate
open Echo.xcodeproj

The code name is Echo: targets, folders, the bundle ID (com.goosehouse.echo) and the app's own echo:// links keep it; everything a user sees says Redde, setup links (redde://connect) included.

To prefill your own servers in development builds, add a git-ignored Echo/Resources/LocalDefaults.json with any of transport, gatewayURL, serveURL, serveUsername, fastLaneURL, fastLaneModel, kokoroURL, kokoroVoice, contextWindow. It is applied once on first launch and never ships.

Tests

xcodebuild -project Echo.xcodeproj -scheme Echo -destination 'platform=iOS Simulator,name=iPhone 17 Pro' test

Unit tests cover streaming and parsing, the transports, markdown, voice, profiles and automation. Live tests run against the servers in LocalDefaults.json when they're reachable and skip otherwise. The UI tests have a scheme of their own, -scheme EchoUITests; they drive the app in the simulator on built-in demo conversations and need no server. Debug builds accept launch flags for demos and screenshots, all listed in Echo/App/DevHooks.swift.

Repository