Fifty tool calls, written as one script.

Solo is free with every capability for one profile. Bring a provider key, a local model, or both; a provider's own bill stays yours.

Paid plans add profiles to an account. Bandicot does not resell model tokens.

Bandicot gives every agent a project, tools, a session that survives restarts, approvals, and a clear place to stop.

The native host owns execution facts. The model proposes work; it does not certify a write, spend, or success.

Keep files, context, plans, and decisions with the project instead of losing them in a disposable chat.

A session is anchored to a project boundary so a pivot starts from an intentional context, not accidental history.

Close the window, restart, or pick up from another of your Macs without turning the work into a brand-new conversation.

The host records session state and every window reattaches to it. When a long chat is summarized, the agent can still search and reread what was there.

When work can change files or systems, Bandicot makes the decision visible before the effect lands.

The approval boundary fails closed when an action is not allowed. The model cannot grant itself permission.

For a loop over many files or results, the agent writes one short script that calls its tools and returns only the answer.

The script runs in a sandbox with no files, network or processes of its own. Every tool it calls goes through the same approvals.

Let an agent inspect, plan, and use tools inside the project you selected instead of an unbounded chat transcript.

The host controls tool calls, cancellation, permissions, and the final recorded result.

Turn a vague request into an inspectable sequence of steps before tools begin changing the project.

The harness tracks dependencies and blocked steps. A conversation alone does not silently advance execution.

See the tokens, cache reads and cost of every turn, what each session cost and was worth, and how much each account has left.

Bandicot reports what the provider or local runtime exposes. A provider that hides usage shows a dash, never a guess.