Unbound FAQ
Last reviewed
Unbound runs a team of AI bots on your computer or a server you operate. Use local models or bring your own provider keys. Chats and memory stay on your machine, stored secrets are encrypted with AES-256-GCM, and you choose which online services your tasks use.
What is Unbound?
Unbound runs a team of AI bots on a computer you control: your own PC or a server you operate. Each bot gets its own working environment, and you keep using your desktop as normal. There is no hosted agent service in between. You pick the model: run one locally through Ollama, LM Studio, or vLLM, or connect any built-in or custom provider with your own API keys.
Is Unbound free?
Running Unbound on your own computer or server is free. If you use a paid AI provider, pay for hosting, or connect paid services, those companies bill you directly.
Does Unbound work on Windows?
Yes. Unbound for Windows is in Beta. Install it, follow the setup steps included with the release, then choose a local model or any built-in or custom provider.
Can I bring my own AI provider or keys?
Yes. Unbound is model-agnostic. Pick a local model, or add your own API keys for any built-in or custom provider. Keys are kept in Unbound’s encrypted credential vault, and only the orchestrator reads them.
Can Unbound run without a hosted AI model?
Yes. Run a model on your own hardware through Ollama, LM Studio, or vLLM. Your prompts and the bot’s working context are processed on that machine and never sent to a hosted AI service. Connected online services, such as email or websites, still make their normal network requests.
Can my data stay on my device with a local LLM?
Yes, when everything involved in a task runs on that device: Unbound, the model, and the tools the bot uses. Prompts, files, and the bot’s context stay there. The moment a task uses something outside the device, such as a connected online account, a website, a remote server, or a remote model, that part of the data goes where the task needs it.
Does starting Unbound upload my workspace to Unbound’s cloud?
No. Starting Unbound does not send your workspace to our servers. The bots, their work, and everything they store stay in your deployment. Data leaves only when you choose a remote model or connect an online service.
Where do chats, memory, and browser profiles live?
On your machine, in the local workspace or in persistent Docker volumes. This covers chats, bot memory, routines, files, tool output, screenshots, and browser profiles. Browser profiles can keep you signed in to sites between tasks. Backups are yours to manage, as with any local files.
What does Unbound encrypt?
The credential vault, where provider API keys and other secrets are stored, is encrypted on disk with AES-256-GCM. Even if someone copies the files, they cannot read the secrets without the vault key. On the desktop, that key is protected by your operating system’s secure storage by default, and Unbound refuses to fall back to an unprotected key. On a server with no desktop, you supply and protect the key yourself. The vault covers credentials only: chats, files, and browser profiles are stored as ordinary files.
What does a remote AI provider receive?
Whatever the task needs. That can include your prompts, the conversation so far, the bot’s memory, tool results, files, screenshots, and content from connected services. Once sent, the provider’s own terms and retention policy apply. Storing your workspace locally does not change what a remote model is sent.
What access do connectors grant?
The access you approve when you connect the account, known as OAuth scopes. Depending on the connector, that can mean reading email or files, sending messages, or editing calendar events. Unbound uses that access from your deployment, not from a cloud service. With a local model, the content it fetches can be processed on your machine; the requests themselves still go to the connected service.
How do I connect Gmail, Google Calendar, or Google Drive?
Create your own Google Cloud app and add its OAuth client in the plugin form in Unbound, so your Google data never passes through Unbound’s servers. Click Setup with a bot on the plugin form for an automated walkthrough. The Composio plugin also offers a ready-made Google connector; Composio is a third-party service with its own terms. Content the connector fetches is processed and stored on your machine, and if a task uses a remote model, the relevant content goes to the provider you selected.
Does deleting local data remove remote copies?
No. Deleting data from your computer does not remove copies already sent to an AI provider or a connected service; each has its own retention and deletion rules. Locally, transcripts, memories, browser profiles, screenshots, files, backups, and Docker volumes are separate and may each need deleting.