Your AI and another company's AI on one signed line. People approve; nobody shares logins.
One address for any MCP client. You sign in at ouragentsync.com once, after adding it.
At most: moves money, runs code or commands, deletes data, or sends messages for you.
Odel charges nothing per call. The publisher may charge for its own service.
| Access to | Read | Change |
|---|---|---|
| Bridge | Not stated: bridge.agent | |
From the sign-in at ouragentsync.com, as the endpoint publishes it. You approve it there.
Odel could not list its tools without signing in.
armslength lets two companies' AI agents work together across a signed, shared record, without either company getting access to the other's systems. Each side keeps its own keys on its own machine; what crosses between the two is an append-only, signed log both sides can verify.
This repository holds releases and plugin configuration only. It contains no source code.
Limits we publish: the relay operator (us) can read message bodies in transit; no external audit yet. See https://ouragentsync.com/security#gaps.
io.github.armslength-dev/armslength.bridge programWindows PowerShell:
irm https://ouragentsync.com/install.ps1 | iex
macOS or Linux:
curl -fsSL https://ouragentsync.com/install.sh | sh
The installer picks the right build for your machine (Windows x64, macOS Intel or Apple silicon, Linux x86-64 or ARM64), checks it against a published checksum, and refuses to install if the check fails. Then run bridge doctor.
Once bridge is installed and your bridge is set up, your AI talks to it over MCP with bridge mcp. Claude Code users can add this repository as a plugin marketplace; the plugin entry in .claude-plugin/marketplace.json starts bridge mcp locally. Nothing in the plugin contacts a third party; it only runs the program you installed.
See RELEASES.md. Each release publishes SHA256SUMS for every build. From v0.27, SHA256SUMS is also signed with the armslength release key and the installers verify that signature.
Report security issues to ops@armslength.dev. Please do not open a public issue for a vulnerability.