Free Bandicot core
Available nowSolo is free with every capability for one profile. Bring a provider key, a local model, or both; a provider's own bill stays yours.
Paid plans add profiles to an account. Bandicot does not resell model tokens.
When the work should stay on your machine
Run small local models on your Mac for private work, choose a hosted provider per project when you mean to, and keep every agent action behind approval.
Solo is free for one profile · providers bill you directly
Free core first
The open Bandicot layer is useful before a model catalog or team layer is complete.
Local route is explicit
A local endpoint can keep prompts near the machine. A remote provider receives the prompts sent to it.
Effects meet the gate
Projects, sessions, plans, and approvals make the boundary legible before a write lands.
The problem
A privacy label is not a routing policy. If a tool cannot show where a prompt goes, nobody can sign off on it.
The promise
Local models stay on the Mac. Remote providers are named per project. Nothing is called private that is not.
The picture
The plan
Every card names its status. Available now means you can use it today; in development and direction mean it is not shipped yet.
Solo is free with every capability for one profile. Bring a provider key, a local model, or both; a provider's own bill stays yours.
Paid plans add profiles to an account. Bandicot does not resell model tokens.
Bandicot gives every agent a project, tools, a session that survives restarts, approvals, and a clear place to stop.
The native host owns execution facts. The model proposes work; it does not certify a write, spend, or success.
Keep files, context, plans, and decisions with the project instead of losing them in a disposable chat.
A session is anchored to a project boundary so a pivot starts from an intentional context, not accidental history.
Close a client or reconnect after a pause without turning the work into a brand-new conversation.
The host records session state and clients reattach to it. A browser view does not become the source of truth.
When work can change files or systems, Bandicot makes the decision visible before the effect lands.
The approval boundary fails closed when an action is not allowed. The model cannot grant itself permission.
Choose local hardware when the work should stay home, or a remote provider when you intentionally accept that route.
Local endpoints keep prompts on the configured machine. Remote providers receive the prompts sent to them; routing is never described as magically private.
Once a local model is downloaded, chatting with it needs no connection.
Small local models run through llama.cpp on your Mac. Hosted providers still need the network.
Use a local endpoint, a private runtime, or a remote provider without rebuilding the project around one model lab.
Provider adapters keep model choice separate from project state. Remote providers receive the prompts sent to them.
Before a local model downloads, Bandicot checks it against your Mac's GPU memory budget and free disk.
The fit check reads the Metal working-set budget, not physical RAM, and counts weights, context cache and a stated reserve.
Pick a small local model from a pinned catalog and install it in one click, checksum verified.
Eight chat models from about 1.25 to 4 GB of memory, on Apple Silicon. Small models suit private, light work; they are not frontier models.
Keep a legible trail of the turn and its effects so a pivot can be reviewed instead of guessed at.
The host treats state changes as recorded events. Reverting is itself part of the history.
For you if
Teams who must say where a prompt went.
Not for you if
Teams fine with cloud-only AI.
The offer
Business · $49.99 a month · up to 25 profiles
No contract. Cancel any time from your account and keep the plan until the end of the period you paid for.
Solo is free for one profile · providers bill you directly
Left off this page
Bandicot does these too, but they are not why this page exists. Anything marked in development or direction is not shipped yet.
Questions
Only to the providers you connect. A local model keeps prompts on your Mac; a remote provider receives the prompts sent to it.
A pinned catalog of 8 small chat models, from Gemma 3 270M to SmolLM3 3B, each checked against your Mac's GPU memory before download. They suit private, light work, not frontier tasks.
No external certification is claimed. Read the privacy and security docs for the actual boundaries.
Boundary Review
Solo is free for one profile · providers bill you directly
Explore another angle
Solo is free for one profile · providers bill you directly
Start free