CoWork-OSMCP Server40/100 via “security-first agent sandboxing with capability-based access control”
Operating System for your personal AI Agents with Security-first approach. Multi-channel (WhatsApp, Telegram, Discord, Slack, iMessage), multi-provider (Claude, GPT, Gemini, Ollama), fully self-hosted.
Unique: Implements capability-based security model where agents declare permissions upfront and runtime enforces them through policy engine with prompt injection detection and comprehensive audit logging, rather than relying on implicit trust or post-hoc monitoring
vs others: More granular than basic API key isolation and more practical than full sandboxing (containers/VMs) for local agent deployments, with explicit audit trail vs. implicit logging in most agent frameworks