Stop secrets leaving in a prompt

Use any AI model without sending your secrets.

Every prompt can carry a key, a customer record or a contract to a model you do not run, and you cannot take it back. Bolt masks secrets on your device before any cloud model sees them, and applies your policy to people and agents alike. Free for individuals on Mac, Windows and Linux. Self-hosted for teams that need it inside their perimeter.

Bolt at a glance

Bolt at a glance. A governed AI workspace for real work. Left, your device and context: on top of any app, browser tabs, files and documents, clipboard history, notes, recall, calendar and meetings, email, screenshots and OCR, vision search on device, terminal and tmux, the built-in browser, passwords and passkeys, apps and menus. Centre: Bolt running on a laptop, governed by default with identity and access, data controls, masking and redaction, policies and approvals, and a tamper-evident audit trail. Right, your ecosystem: AI models, coding agents, the Agent Gateway, MCP tools and servers, ACP and A2A, SaaS apps, in-house systems, developer tools, custom connectors, SSO and SCIM, MDM and device policy, your DLP rules, the browser extension, and macOS, Windows and Linux.
Click to view full size, or open the PDF.
Bolt by Sparcle - Local-first AI workspace, free for individuals | Product Hunt Featured on Uneed
Open as PDF
Download Bolt free Talk to us about your team Technical Slides
  • You: get work done with AI and stop worrying what the prompt carried out
  • Your admins: set one policy for every person and every agent, instead of one per tool
  • Your organization: keeps the data, the policy and the record inside its own perimeter
Patent-pending architecture Deep details under NDA

Capabilities

Why Bolt

Core capabilities that drive measurable enterprise impact.

Where does your data go when AI works on it?

Nowhere you did not choose. Your data stays on your infrastructure.

  • Self-host on AWS, Azure, GCP, on-prem, or fully air-gapped
  • Identity: integrates with OIDC, JWT, and your existing IdP
  • Architecture designed for: HIPAA, GDPR, and DPDPA workflows

Stop paying a model for work that needs none

Spend tokens where they create value, on a predictable cost base.

  • No per-token markup: bring your own LLM keys: OpenAI, Anthropic, Bedrock, Vertex, Ollama, NVIDIA NIM, or your own fine-tuned model
  • Pay only for the work that actually needs a model: recognizing a format, decoding a token, a lookup, or calling a tool you authorized runs deterministically, with zero LLM tokens

Drowning in inboxes? See the one thing that matters

The One Thing™ patent-pending priority engine tells you the single most important thing to do right now.

  • Looks across: email, calendar, tasks, and messages
  • With a human-readable reason for the call

Every new agent is a new actor with access

Bolt connects agents and tools through the open Model Context Protocol, under the same policy.

  • In-house connectors: plus any MCP-compliant server you already run
  • Out of the box: Jira, Confluence, Salesforce, GitHub, Notion and Zendesk, with Slack, Drive, and M365 in the connector gallery once your admin completes setup
  • Durable agents: self-hosted in your own perimeter, from Docker Compose to air-gapped

Paste anything. Know what it is before it leaves.

Type or paste any value: a secret, a standard format, or your own proprietary record. Nothing is fetched or run until you choose it.

  • Recognizes the shape on-device: flags what's sensitive, and proposes the right move: decode, convert, validate, or pull the related details from your connected systems (only what your identity is entitled to)
  • Knows standard formats out of the box: JWT, base64/hex, timestamps, UUIDs, IBANs, file types, medical and geo codes
  • Teach it your own formats: once, with a simple manifest

Extend Bolt without giving up the keys

One manifest decides what Apps and agents may do.

  • One MCP-native YAML manifest: your integrations, the launcher's recognition, and what agents may call
  • Admins provision org-wide Apps: users build their own; admin Apps always win a conflict
  • Entitlements are enforced server-side, every call is audited, and Apps never run arbitrary code

Agentic Desktop Agent

Bolt doesn't just answer. It takes action.

Most AI assistants stop at "here's what I found." Bolt reads, writes, and executes across your entire stack: from email to your local file system.

Send & Reply to Emails

"Reply to John's proposal and CC the legal team."

  • Bolt reads the thread and drafts contextual replies
  • Sends via Gmail or Outlook, with your confirmation

Schedule Meetings

"Set up a 30-min sync with Sarah tomorrow at 2pm."

  • Bolt prepares the event, adds attendees, and generates a video link
  • Presents the invite for your approval

Manage Tasks

"Mark the auth PR task as done and create a follow-up for testing."

  • Bolt stages the updates across Jira, Linear, or Tasks
  • You confirm and it executes

Control Your Desktop

Bolt's native desktop agent gives AI direct access to your machine, sandboxed and permission-controlled.

  • Browse local files
  • Run terminal commands
  • Open applications

FAQ

Questions?

Can Bolt run inside our own perimeter?

Yes. Every Bolt tier (Authorize, Backbone, and Certify) is self-hosted: Docker Compose for staging, Kubernetes for production HA, inside your own perimeter. Sparcle never hosts your data. All three expose the same platform; you choose by capability (governance, orchestration, compliance), not by who operates it.

What does Bolt save my team?

Bolt puts email, calendar, tasks, docs, tickets, and code behind a single agent surface, so people switch between fewer tools. We do not publish a savings figure because it depends on your team and your tools. Talk to us and we will measure it on a pilot.

Does Bolt require data migration?

No. Bolt connects to your existing systems through open MCP integrations and direct connectors. Teams keep working in their existing tools; Bolt is the unifying agent layer above them, not a replacement.

How is our IP protected when we use external LLMs?

Bolt's security pipeline applies PII detection, policy guardrails, audit logging, and privacy-preserving context handling before any prompt leaves your perimeter. With BYOK and a covered LLM provider (DPA + zero-retention), you get the upside of frontier models without your IP entering training data. With BYO self-hosted LLM, nothing leaves at all.

What's the seat minimum?

Bolt Authorize: 10 seats. Bolt Backbone: 25 seats. Bolt Certify: 50 seats. Annual contracts. Below those minimums, Bolt is free to download for individuals, with no account and no time limit. It works out of the box on a free model, or point it at your own key or your own provider.

What's the Founding Customer Program?

First 50 customers get 25% off published pricing locked for 24 months, direct founder access, weekly office hours, and roadmap influence. Open through end of 2026 or until 50 customers are signed.

Can we see the architecture and security details?

Yes, under NDA. Detailed architecture briefs, security posture documentation, and patent claim summaries are shared during the pilot evaluation. Schedule an architecture review and we'll cover what's relevant to your environment.