Klass Personal OS
Public BetaAI, working live against your real accounts - or on a schedule while your Mac is locked.
A Mac app that gives your AI assistant real tools against your real email, calendar, files, and cloud storage: ask it something right now and it acts immediately, or set a job up once and it runs on its own schedule without you sitting there prompting it. Built for technical and non-technical people alike: everything is set up in a settings window, not a file you hand-edit, and you decide exactly what each task is allowed to touch. It runs on your Mac, your passwords stay in the Mac's own Keychain, and none of it goes to someone else's cloud. I built it to replace a system I've run my own business on for the past year.
Public beta - version 1.0.0, expect rough edges. Free tier, no account required. macOS 14 Sonoma or later. Developer ID signed and notarized.
One app, two ways to run it
Simple Mode is a single screen: what's connected, what Claude can use, and the automations running against it. Nothing about the advanced side is required to use it - flip to the full settings window whenever you actually want that level of control.
Simple Mode
One screen: what's connected, what Claude can use, and what's running - no sidebar, no separate screens.
Advanced
The full sidebar and every service's status, one click away.
What "on a schedule" means
Set a job up once, in the app's own settings window, and it runs itself every morning without me typing a prompt. Most tools that connect AI to your accounts only work while you're actively chatting with them; I went looking for one that also ran unattended, on a timer, and couldn't find one.
Three real jobs, in the Automations screen where they're set up.
Setting one up: pick what triggers it - an email, a text, a feed update, a file landing in a folder, or a plain schedule - then what it runs.
One of those jobs end to end: the trigger configured, an email sent to Claude, the automation picking it up and running, and the reply landing back in the inbox.
What it does, and what it connects
Every tool below works instantly in a live conversation with your AI assistant - the scheduler and scoped keys are what let the same tools also run unattended. One app in your Dock and menu bar, hosting everything an agent needs to do real work on your behalf, with no Node or Python to manage.
A real scheduler
Set a job to run on a timer, at an interval, or when a specific email arrives, and it runs without you there. Under the hood: cron and interval triggers, shell commands or Claude prompts, full run history, retries, and a dead-letter queue for failures. Nothing else in this ecosystem runs agent work unattended.
Scoped keys per agent
Give each AI assistant its own key that only reaches what you allow it to reach: one mail folder, one storage bucket, whatever you name. Technically, each key is scoped to a domain, a set of operations, and specific resources, so a big tool catalogue never turns into a bloated context, and revoking one key never touches the others.
Email, read and write
Your assistant can read your inbox and, if you allow it, mark messages read, flag them, move them, or save a draft; write access is off until you turn it on per account. Connects over IMAP, or OAuth for Gmail, and mail is synced locally so your assistant can search and cross-reference it. Microsoft 365 and Outlook.com mail aren't supported yet.
Calendar, contacts, reminders
Events and contacts your assistant creates show up in the calendar and contacts apps you already use. Connects over CalDAV and CardDAV, or directly to the Mac's own Calendar, Contacts, and Reminders.
Files, notes, and documents
Your assistant can read, search, and edit files in folders you specifically allow; nothing else on disk is visible to it. That includes Markdown and Obsidian structure aware editing, Spotlight search, on-device text extraction from PDFs and images, image and video handling, and zip and tar inspection.
Cloud storage and servers
Connect your cloud storage or a remote server the same way you connect a local folder. That covers S3, Cloudflare R2, Backblaze B2, FTP, SFTP, and WebDAV behind one set of tools, plus optional SSH command execution against a server you've explicitly opted in.
Also included: RSS, Atom and JSON feed subscriptions, an HTTP client with connection profiles for your own APIs, image generation, outbound mail, native notifications, and a Shortcuts runner. 134 tools in total, and any of them can be switched off app-wide.
Why this instead of a folder full of MCP servers
MCP (Model Context Protocol) is the standard that lets an AI assistant like Claude connect to real accounts and files. Most tools that speak it are one small program per service - one for email, one for calendar, one for storage - each installed and kept running separately.
It has a settings window. Accounts, folders, keys, and scheduled jobs are set up by clicking through a normal Mac window, not by hand-editing a JSON config file. It's also one signed install instead of fifteen: no Node, no Python, no separate background process per service.
It runs on your Mac. Your mail, calendar, and files never leave your computer. Passwords and tokens are stored in the Mac's own Keychain, the app only talks to your own machine and never to your network, and there's no account to create.
I run it daily. This isn't a side experiment. It's the rebuild of a system my own agents have run on for a year, I use it every day against my real mail, calendar, and notes, and I'm moving that whole setup onto it.
Every account type gets its own screen, from email and calendar down to feeds and remote servers.
See every account screenFree tier, and one license
Nearly every tool works on the free tier, against your real accounts, with no time limit. The free tier isn't a trial and doesn't expire. Pro removes the per-service limits and turns on the automation.
Everything, at one of each
A complete setup for one person, working against your real accounts. No account to create, no expiry, no nagging.
- 129 of the 134 tools, including file and email writes
- One mail account, one calendar, one address book, one reminders list
- One folder root, one storage account, one sending address
- Three HTTP connection profiles, five feed subscriptions
- Your own API key for connecting a client
The five left out: SSH command execution, and the two tools that let an AI conversation create automations on its own. Both are Pro only.
Pro license
One-time purchase, no subscription. Launch sale price for a limited time, then $99. A future major version will be a paid upgrade, not a renewal.
- The scheduler: cron, interval, and mail-triggered agent jobs
- Unlimited accounts in every service
- Unlimited scoped API keys, so each agent gets its own
- SSH command execution against servers you opt in
- Every future 1.x release included
Already bought one? Find your license key. Upgrading is a key you paste in; nothing reinstalls and nothing is lost if a license lapses. See the license terms and refund policy.
What it can and can't touch
This app is given access to your mail, your files, and optionally a shell on another machine. That deserves a straight answer rather than a trust badge, so here's the short version and a longer page behind it.
How it's contained
- Signed with a Developer ID and notarized by Apple, with the Hardened Runtime on
- The server only talks to your own computer (127.0.0.1) and never listens on your network
- Credentials live in the macOS Keychain, never in a config file
- Every key is scoped to specific domains, operations, and resources
- Mail write access, permanent delete, and SSH execution are each separately off by default
- File access is limited to folders you name, and any tool can be switched off app-wide
What you should know
- The App Sandbox is deliberately off. A sandboxed app can't launch the Claude CLI, and the scheduler's whole job is launching it
- It asks for Calendar, Contacts, Reminders, and notification permission through the normal macOS prompts
- There's no telemetry and no analytics. The only call it makes on its own is a once-daily update check you can turn off
- The AI client you point at it is a separate product with its own terms
Including why the sandbox is off, what each permission is for, and what the controls above actually look like.
Read the full security modelWhere this came from
Klass Personal OS is a native rebuild of agent infrastructure I designed, built, and ran in production for months before it was a product.
Personal AI Agent Infrastructure
The self-hosted MCP server this app is the rebuild of: 59 tools across 12 functional domains, and where every design decision here was first proven.
Read the case studyAI-Driven Personal Operating System
25 autonomous agents running around the clock against a Johnny Decimal Obsidian vault: the workload this app is built to run for you.
Read the case studyGet release notes
I'll email you when a new version ships and what changed. Nothing else, and you can unsubscribe any time. Past releases are on the release notes page.
Want something like this built into your business instead? Book a call.
Questions I get asked
What does "beta" mean here?
I run this app daily against my own mail, calendar, and files, and it's stable enough for that. "Beta" means I'm still finding rough edges as more people use it against setups I haven't seen, not that core features are half-built. If something breaks, email me and I'll fix it.
Do I need to buy it to try it?
No. Download it and everything but the SSH execution tools works against your real accounts, one account per service, with no time limit and no account to create. Pro is for when you want the scheduler or more than one of something.
What do I connect it to?
Claude Code, Claude Desktop, or any client that speaks the Model Context Protocol. There's a one-click installer in the app for Claude Desktop, and a copy-paste config for everything else.
Does Gmail work?
Yes, over OAuth, no app password or IMAP toggle required. Fastmail, iCloud, and most self-hosted and independent providers connect over IMAP. Microsoft 365 and Outlook.com mail aren't supported yet - Microsoft withdrew IMAP app passwords, and OAuth for Microsoft isn't built. Microsoft 365 calendar and contacts work today through the Mac's own Internet Accounts.
Why is the App Sandbox off?
Because a sandboxed process can't launch the Claude CLI, git, or your own shell commands, and running those on a schedule is the point of the app. Full Disk Access doesn't change that; it waives a different restriction. The security page covers what's in place instead.
Is it a subscription?
No. One payment, and every 1.x release is included. A future major version would be a paid upgrade you can choose to skip. If a license ever lapses, nothing is deleted: the extra accounts just go inactive until it's back.
Windows or iPhone?
Mac only right now. A Windows version exists in development and is paused; I'm not going to promise a date for it. The engine is deliberately Mac-native, so an iPhone app would be a companion rather than the same thing.
Something's broken. Who do I ask?
Me, directly: info@coreyklass.com. It's a one-person product and I answer my own support mail.