nanoMuse: An Open-Source Cross-Device AI Agent

nanoMuse is an open-source personal AI agent designed to operate across a user's entire device ecosystem, including mobile and desktop platforms. Unlike traditional chatbots, nanoMuse focuses on action-oriented tasks—performing operations within applications rather than simply answering questions—and maintains a persistent state across devices via a central relay.

Cross-Platform Availability and Installation

nanoMuse provides a unified experience across multiple operating systems, allowing a single account to synchronize conversations and tasks.

  • Mobile: Available as an APK for Android (8.0+, arm64) and via TestFlight for iPhone and iPad.
  • Desktop: Native installers are provided for macOS (12+, Apple Silicon and Intel), Windows (10+), and Linux (AppImage, .deb, and tar.gz).
  • Web: A simulated phone demo is available at demo.nanomuse.dev.
  • Self-Hosting: Users can deploy their own relay using Docker or a provided self-hosting script to ensure data remains within their own infrastructure.

Core Capabilities and "Hands-On" Automation

nanoMuse is designed to interact with software that lacks official APIs by using the device screen as a primary interface.

Action-Oriented Execution

The agent can utilize a Linux shell, a browser, and MCP (Model Context Protocol) servers. For applications without APIs, it uses "Hands" to interact with the screen, taking screenshots and performing UI actions to complete tasks.

Cross-Device Coordination

Tasks can be delegated across hardware. For example, a user can initiate a command on a mobile device and specify @Mac to execute the task on a connected computer. Approvals for these actions are routed back to the device currently in the user's hand.

Persistence and Memory

nanoMuse supports background operations, allowing it to run routines or check goals on a schedule even when the app is closed. User memory—including what the agent knows about the user and its wake-up triggers—is stored in editable Markdown files.

Safety and Human-in-the-Loop

To prevent irreversible errors, the agent is programmed to ask for permission before performing destructive actions, such as deleting data, sending payments, or sending messages. Users must manually enter passwords and CAPTCHAs; once completed, the user signals "Done" to resume the agent's process.

Technical Architecture

Each device runs its own local agent instance. The Android app utilizes Alpine Linux under proot to provide a shell, browser, and MCP environment. The desktop application is built as a plugin for the DeepSeek Harness, utilizing a Python runtime for UI interaction.

Devices synchronize via a relay that handles authentication and carries conversation text. To maintain privacy, files and screenshots remain on the local device where they were created and are not transmitted through the relay.

Comparison with Meta Muse and OpenMinis

Feature Meta Muse OpenMinis nanoMuse
Execution Environment Cloud VM per user Local phone Local phone, computer, or private server
Non-API App Support None (VM cannot touch local devices) Android accessibility CLI Screen-based interaction (Phone/PC); not supported on iOS
Device Interoperability Clients of one VM Single device Cross-device requests via hub
Model Access Meta proprietary Bring your own Relay allowance or user-provided keys
License Closed GPL-3.0 GPL-3.0-or-later

Model Integration and Customization

nanoMuse supports a wide array of LLM providers, including OpenAI, Gemini, DeepSeek, and OpenRouter, as well as existing paid plans for ChatGPT and Claude. The agent's visual identity is customizable; users can describe a look, and the agent uses image and video models to generate its own avatar (defaulting to a small dragon).

Community Feedback and Security Considerations

While the project has been praised for providing an open-source alternative to proprietary agents, community discussions on Hacker News highlight several concerns regarding security and privacy:

"audit the installer: a similar tool, state dir redirected, still wrote eleven other assistants' config files and a port 4400 daemon."

Users have expressed skepticism about running high-privilege AI agents directly on primary mobile devices, citing the risks associated with granting an agent the ability to interact with the screens and system functions of a daily-use phone.

Sources

Related

  • Project
  • Project
  • Project
  • Project
  • Project