How it works
You text a phone number. Inkbox gives the agent that number, an email address and an agent-to-agent endpoint. A small gateway wakes your agent, which lives in its own microVM on Maritime with a Linux desktop. Inside, a Pi agent loop runs with your apps through Composio, a wallet through Stripe Link, and a policy guard in front of every tool. Default model: Claude Fable 5.1. Any Pi provider works.
It makes phone calls, too: say yes to "call the restaurant and book 7pm" and Inkbox Voice AI dials, speaks and hangs up, then you get one text with the outcome and any follow-ups from the transcript (see INKBOX.md).
It writes real files, too: ask for a brief "as a PDF" and it creates one in its workspace and sends it to you as an iMessage or email attachment. Any app Composio supports can be connected by name ("connect my Notion"), and the prompt it runs with is a file you can read and edit (instinct prompt, instinct persona; see CUSTOMIZE.md).
Who gets which key
Seven tiers, enforced in code before any tool runs. staff is for your own agents working as a team. Your partner's agent can read your calendar. A friend's can only ask when you are free. A stranger gets a polite no, and you get a one-line text saying who asked for what. Grants add exceptions in plain English: "Sam can book us dinner this week." Details in PERMISSIONS.md and PROTOCOL.md.
Payments
The agent never holds your card. For each purchase it asks your Stripe Link wallet for a single-use card for the exact total, you approve with one tap, and the card is dead after the payment. Limits live in a spend policy file: ask above an amount, daily cap, and things that always need a yes. Without a wallet it still gets you to checkout and hands you the screen. Paying needs a Link OAuth client from Stripe: a short application form, reviewed in about 3 to 5 days, so apply before you need it. Details: PAYMENTS.md.
Quick start
Node 22.19+ and pnpm 10. You bring your own keys; KEYS.md lists which ones and how to get them. No key is stored in this repository.
On your laptop, no phone number yet
git clone https://github.com/mariagorskikh/open-instinct && cd open-instinct
nvm use && corepack enable # if corepack needs permissions: npm install -g pnpm@10
pnpm install && pnpm build
export ANTHROPIC_API_KEY=sk-ant-...
pnpm instinct init --name "Maria" --phone +14155550100 --email [email protected] --handle maria-instinct
pnpm instinct dev # then, in another terminal:
pnpm instinct chat "remember that I like window seats"
With an iMessage line
export INKBOX_ADMIN_API_KEY=... # inkbox.ai console
pnpm instinct init --name "Maria" --phone +14155550100 --email [email protected] --handle maria-instinct
pnpm instinct dev --tunnel
pnpm instinct connect # prints the number and the text to send: connect @maria-instinct
The Instinct way: one agent per person on Maritime
export MARITIME_API_KEY=mk_... # maritime.sh, Settings, API keys
pnpm instinct deploy --image ghcr.io/mariagorskikh/open-instinct-agent:latest
For many people, run the gateway: a signup page that provisions an identity and an agent per person. Guide: DEPLOY-MARITIME.md.
| The signup page | The connect page |
|---|
| |
Repository
packages/core Pi agent loop, policy engine, memory, scheduler, approvals, audit
packages/inkbox iMessage, SMS, email, webhooks, agent-to-agent transport
packages/computer the desktop (Maritime desktopd in the VM, or hosted Computers MCP)
packages/apps Composio Tool Router
packages/network contacts, tiers, grants, invitations, agent-to-agent tools
packages/payments Stripe Link wallet: one-time cards the owner approves
packages/server the agent process (/health, /chat, /schedules)
packages/gateway multi-user relay and signup
packages/cli the instinct command
skills/ playbooks the agent follows
docs/ architecture, permissions, protocol, keys, deploy, research
Documentation
Architecture · Customize · Permissions · Protocol · Keys · Deploy on Maritime · Self-host · Inkbox · Composio · Context.dev · Keenable · Payments · Security · FAQ · Examples · Research: What Instinct is, Requirements,
Status
Version 0.1. Nine packages, 837 tests, a scripted end-to-end smoke test, and a cold-start test from a fresh clone. Live iMessage and Maritime deployment were exercised against real identities during development; treat them as beta. Logins, 2FA and payments go to you through a desktop takeover or a Link approval, never to the model alone.
Merit Systems publishes an unrelated project called OpenInstinct. This project is not affiliated with it or with Instinct.
Contributing · MIT license
