Embody

An agent with a body you can check.

Pip lives sealed inside an attested Intel TDX enclave. Your keys, memories and messages are encrypted to it and never leave, so not even whoever runs the server can peek.

Checking Pip’s seal…

Uses the passkey on this device or in your keychain. No passwords, nothing to phish.

Embody

Hi, I’m Pip.

Your agent, snug in its sealed little enclave. Ask me anything. Risky things wait for your tap; money and email wait for your passkey.

Approvals

Things Pip is holding until you say so.

Connections

Accounts Pip can help with. Every credential stays sealed inside the enclave.

More

Trust

Your data

Account

Embody · Pip is sealed by Intel TDX · inference end-to-end encrypted

Policy

Allow runs silently, tap asks you first, deny blocks. Money and outbound email also need your passkey on approval.

Allowed hosts

Where web_fetch may reach. Subdomains included; * means anywhere.

Advanced: raw policy JSON
Unsaved changes

Log

    Attestation

    Embody