Let the agent try. Undo is one click.

Solo is free with every capability for one profile. Bring a provider key, a local model, or both; a provider's own bill stays yours.

Paid plans add profiles to an account. Bandicot does not resell model tokens.

Bandicot gives every agent a project, tools, a session that survives restarts, approvals, and a clear place to stop.

The native host owns execution facts. The model proposes work; it does not certify a write, spend, or success.

Keep files, context, plans, and decisions with the project instead of losing them in a disposable chat.

A session is anchored to a project boundary so a pivot starts from an intentional context, not accidental history.

Close the window, restart, or pick up from another of your Macs without turning the work into a brand-new conversation.

The host records session state and every window reattaches to it. When a long chat is summarized, the agent can still search and reread what was there.

When work can change files or systems, Bandicot makes the decision visible before the effect lands.

The approval boundary fails closed when an action is not allowed. The model cannot grant itself permission.

Every change an agent makes is a version: undo a whole run, restore one file, or drag a slider to put a folder back to any moment.

Works with or without git, on any disk you plug in. Restoring is itself recorded, so an undo can be undone.

Let an agent inspect, plan, and use tools inside the project you selected instead of an unbounded chat transcript.

The host controls tool calls, cancellation, permissions, and the final recorded result.

See the tokens, cache reads and cost of every turn, what each session cost and was worth, and how much each account has left.

Bandicot reports what the provider or local runtime exposes. A provider that hides usage shows a dash, never a guess.