Same deck, every screen you reach for.
Desktop console for inspection and orchestration. Same session, same memory, on your phone — chat anywhere, including with yourself across devices.
$7 flat for the deck.
Heavy lifting, on demand.
The deck handles chat, coding, scripting, web search, and automation natively — included at $7/mo. When a job needs its own isolated environment, spawn a worker container. It runs, delivers, and shuts down. LLM tokens billed at your provider's rates, no markup.
- Dedicated sandboxed container, 24/7
- Persistent hybrid memory (vector + FTS)
- Shell execution, coding, scripting, cron jobs
- Web search (unlimited, no API key)
- Telegram · WhatsApp · Discord · Slack
- Matrix · Nostr · Teams · web
- MCP tools, self-extending skills
- Voice in / voice out
- Encrypted credential vault
- BYOK — 20+ LLM providers
Questions?
Who is this for?
Developers, freelancers, and small teams who want an always-on AI workspace with persistent memory — plus coding agents when they need them — without running their own infrastructure.
Do I need a compute tier?
Not necessarily. The $7 deck handles chat, coding, scripting, web search, cron jobs, webhooks, MCP tools, and voice natively. Compute tiers add isolated worker containers for autonomous multi-file engineering (via OpenHands) and browser automation (isolated Chromium). Many users never need one.
What does "bring your own key" mean?
Your deck calls LLM providers directly — Anthropic, OpenAI, Gemini, DeepSeek, OpenRouter, and 20+ others. The key sits in your encrypted vault. Token charges hit your provider's invoice, not ours. We never touch your tokens and never mark them up.
Are worker containers autonomous?
No. You spawn them explicitly — a slash command or button in chat. The deck never decides on its own to spin up a billed container. If a worker gets stuck, it asks you on whatever platform you're on and waits for your answer.
Why not just self-host?
You can — both Moltis and OpenHands are open source. We're for people who'd rather not deal with Docker, TLS, networking, security updates, and the orchestration glue between the workspace and the coding agent layer.
Is my data safe?
Dedicated sandboxed container per customer — deck and workers both. Keys encrypted at rest, zeroed on drop, redacted from every log. Commands run inside the sandbox with restricted syscalls. We never read your conversations or access your provider keys.