Kiro Crew is now open source. It is a personal AI agent that runs on your own machine, driving kiro-cli over the Agent Client Protocol. Install it, sign in once, and it is yours: no server to rent, no account to create, and your conversations, memory, and files stay on your disk.

One Agent, Ten Ways In

Chat with the same agent from a web dashboard, a native desktop app, a terminal CLI (kirocrew chat), or bots for Slack, Discord, Telegram, Microsoft Teams, Webex, WeCom, and WeChat. Every channel shares the same memory and tools, so you can start something at your desk and follow up from your phone. A dashboard session can even hand off to a Slack thread and stay in sync both ways. Learn more ->

Work That Continues While You Are Away

Hand the agent a spec with kirocrew run TASK.md and it decomposes, executes, tests, and retries, designed for 10+ hour runs with disk checkpoints so a crash resumes where it stopped. Schedule recurring jobs with cron, split work across parallel sub-agents with kirocrew spawn run, or let a webhook wake the agent when CI or an alert fires. Learn more ->

Memory That Survives Restarts

Preferences, project context, and conversation history persist across sessions and are searched by keyword and by meaning, with embeddings running locally so nothing leaves your machine. Correct the agent once and the lesson sticks in every future session. A Knowledge Library lets you ingest your own documents and code into a searchable personal knowledge graph. Learn more ->

Apps, Skills, and MCP

Extend the agent through an in-dashboard App Store with TypeScript and Python SDKs, six apps in the box (including Auto Research, Code Review Sage, and Issue Radar), and Skills: plain markdown files that teach the agent a workflow with no code and no rebuild. Any MCP server can be discovered, probed, and enabled from the dashboard. Learn more ->

Computer Use for Native Apps

The agent can read a native application through the accessibility layer and operate it: press buttons, fill fields, scroll, and drag, reaching work that has no web UI. Actions are delivered to the target app so your mouse pointer never moves by accident, password fields are never read, and every call is written to the audit log. Off by default and macOS-only in this release; enable it in Settings > Computer Use. Learn more ->

Security You Can Reason About

An opt-in operating-system sandbox confines kiro-cli subprocesses on Linux and macOS. Layered controls include 137 built-in denied-command patterns that hold even when auto-approval is on, credential redaction, and a two-level governance ceiling enforced at Kiro Crew's own tool gate, stored where the agent can neither read nor write it, so the agent cannot widen its own limits. Learn more ->

Introducing Kiro Crew