Klass Personal OS | Corey Klass

Three things it fixes

Your AI can't see your stuff. Every conversation starts with pasting in the email, the calendar, the file. Personal OS gives Claude or Codex your mail, calendar, contacts, and the folders you pick, so it can look things up itself.

It only works while you're watching. A chat does nothing until you type. Personal OS runs jobs on a schedule, when mail arrives, or when a file lands in a folder, whether or not a chat is open.

Handing it your inbox feels like a lot. Each assistant gets a key that reaches only what you name. Writing to mail is off until you turn it on, and a send can wait for your OK.

Watch one run

An email arrives. An automation hands it to Claude with the tools it's allowed to use. The reply goes out. Nobody opened a chat.

The trigger rules, the file gate, and every action type are on the automations page.

What a day with it looks like

Most of these come from the setup I run my own business on. Each one is an automation you set up once in the app: a trigger, and a prompt for Claude or Codex to run on your Mac.

Every morning

A summary of today

Your assistant reads what came in overnight and what's on the calendar, then writes a one-page summary of the day into your notes before you sit down.

When a bill arrives

Amounts and due dates, filed

Bills, receipts, and shipping notices get the amount, due date, or tracking number pulled out and filed as a note or a reminder. Nothing to copy by hand.

From anywhere

Email your assistant an instruction

Send a message to an address you set aside for it, from your phone or anywhere else. A job picks it up, does the work on your Mac, and emails you the result.

When a client writes

A draft reply waiting for you

Your assistant reads the thread and your notes on that client, then saves a draft in your mail app. Or it sends, and the send waits for you to approve it from a notification.

When a file lands

Scans and exports, sorted

Drop a scan, a PDF, or a tablet export into a watched folder. The text is read on your Mac, and the file is renamed and put where it belongs.

Once a week

Your website, checked

A scan of your site and its certificate, compared with last week's. You hear about an expiring certificate or a new exposure before a customer does. (Pro)

Three steps to set up

1

Install it

A Developer ID signed, notarized Mac app. No account to create, and nothing else to install: no Node, no Python, no config files.
Download for macOS
2

Connect your accounts

Add your mail, calendar, and the folders it may use in a normal settings window. Simple Mode keeps it to one screen.
3

Point Claude or Codex at it

One click installs it into Claude Desktop. Codex, Claude Code, and other MCP clients get a config to paste.

Simple Mode

What's connected, what Claude can use, and what's running, on one screen. The full settings window is a click away.

Connect Claude Desktop

The Claude Desktop install is one button. Codex and everything else get a copy-paste config.

You decide what it can touch

You're giving an AI your mail and your files. That deserves specific answers rather than a trust badge, so here's the short version, with a longer page behind it.

What you control

Each assistant gets its own key, limited to the accounts, folders, and actions you name
Writing to mail, permanent deletes, and remote commands are each off until you turn them on
An outbound mail account can hold every send until you approve it
It only sees folders you add, and you can switch any tool off entirely
Synced mail and calendar stay on your Mac, and passwords stay in the macOS Keychain
The server only listens on your Mac unless you change that setting

What you should know

The App Sandbox is deliberately off. A sandboxed app can't launch the Claude or Codex CLI, and the scheduler's job is launching them
It asks for Calendar, Contacts, Reminders, and notification permission through the normal macOS prompts
No telemetry and no analytics. The only call it makes on its own is a once-daily update check you can turn off
The AI client you point at it is a separate product with its own terms

Including why the sandbox is off, what each permission is for, and what the controls look like.

Read the full security model

Built on a year of running my own business on it

Personal OS is the native rebuild of the agent setup I've run my business on since early 2025: 25 agents handling CRM email, bills and deadlines, a job pipeline, publishing, and my notes. I use it every day against my own mail, calendar, and files.

Production

AI-Driven Personal Operating System

25 autonomous agents running around the clock against an Obsidian vault: the workload this app is built to run for you.

Read the case study

Predecessor

Personal AI Agent Infrastructure

The self-hosted MCP server this app replaces: 59 tools across 12 domains, and where every design decision here was first proven.

Read the case study

Everything it connects

The same tools work in a live conversation and in an automation. One app in your Dock and menu bar runs all of them.

A real scheduler

Run a job on a schedule or in response to mail, messages, feeds, or changed files. Choose a command, Claude, Codex, a configured AI provider, or a task for Claude Desktop. Three automations are included on Free.

Email, read and write

Your assistant can read your inbox and, if you allow it, mark messages read, flag them, move them, or save a draft. Connects over IMAP, with OAuth for Gmail and consumer Outlook.com. Mail is synced locally so it can be searched and cross-referenced. Microsoft 365 work and school mail isn't supported yet.

Calendar, contacts, reminders

Events and contacts your assistant creates show up in the apps you already use. Connects over CalDAV and CardDAV, or directly to the Mac's own Calendar, Contacts, and Reminders.

Files, notes, and documents

Read, search, and edit files in folders you allow; nothing else on disk is visible. Includes Obsidian-aware edits, Spotlight and in-file search, on-device text extraction, image and video handling, archives, and PDFs.

A key per assistant

Each key is scoped to specific accounts, folders, and actions, so one mail folder or one storage bucket is a real limit. Revoking one key never touches the others.

Cloud storage and servers

S3, Cloudflare R2, Backblaze B2, FTP, SFTP, and WebDAV behind one set of tools, plus optional SSH commands against a server you've explicitly opted in.

Other MCP servers and REST

Connect third-party MCP servers behind the same key controls, or call the built-in tools through a local REST API with an exportable OpenAPI spec.

Checks and approval

Check DNS, domains, certificates, and endpoints; scan a website and compare scans. Hold outbound mail until you approve or deny it.

Also included: feeds, HTTP connection profiles, image generation, notifications, and Shortcuts. See the detailed capabilities or every account screen.

Why this instead of the alternatives

Instead of a chat on its own. In a chat, the assistant acts when you ask it to. Personal OS gives the same assistant work that starts by itself: a time of day, an email arriving, a file landing in a folder.

Instead of a hosted automation service. Hosted services run your workflows on their servers and usually bill monthly. Personal OS runs on your Mac against your own accounts, keeps synced data and passwords there, and is one payment.

Instead of a folder full of MCP servers. The usual way to connect an AI to your accounts is one small program per service, each set up in a JSON file. Personal OS is one signed app with a settings window, and it can bring in other MCP servers when you need them.

Free to start, one payment for more

The free tier works against your real accounts, runs three automations, and never expires. Pro is for when your routine outgrows that.

Free

Everything you need to start

A complete setup for one person. No account to create, no expiry, no nagging.

Core tools, including file and email writes and three automations
One mail account, one calendar, one address book, one reminders list
One folder root, one storage account, one sending address
Three HTTP connection profiles, five feed subscriptions
Two API keys and up to three connected MCP servers

Some tools require Pro, including SSH commands, asking Codex from an agent, website scans, and advanced endpoint checks. The capabilities page explains where the limits apply.

Download the free tier Send me the download link

$69

Pro: put your whole routine on it

One payment, not a monthly bill. Launch price for a limited time, then $99. A future major version will be a paid upgrade you can skip, not a renewal.

More than three automations, on any trigger
Unlimited accounts in every service
Unlimited scoped API keys and connected MCP servers
SSH commands, website scans, and advanced endpoint checks
Every future 1.x release included

Buy a Pro license

Already bought one? Find your license key. Upgrading is a key you paste in; nothing reinstalls and nothing is lost if a license lapses. See the license terms and refund policy.

Get release notes

I'll email you when a new version ships and what changed. Nothing else, and you can unsubscribe any time. Past releases are on the release notes page.

Want something like this built into your business instead? Book a call.

Questions I get asked

Do I need to buy it to try it?

No. Free works against real accounts with no time limit and includes three automations, two API keys, and the core tools. Pro raises the limits and adds selected tools such as SSH commands and website scans.

What do I connect it to?

Claude Desktop, Claude Code, Codex, or any client that speaks the Model Context Protocol (MCP), the standard that lets an AI assistant use outside tools. There's a one-click installer in the app for Claude Desktop, and a copy-paste config for Codex and everything else. Automations run the Claude Code or Codex CLI already installed on your Mac, with its own sign-in.

What does "beta" mean here?

I run this app daily against my own mail, calendar, and files, and it's stable enough for that. "Beta" means I'm still finding rough edges as more people use it against setups I haven't seen, not that core features are half-built. If something breaks, email me and I'll fix it.

Does Gmail work?

Yes, through Google OAuth. Consumer Outlook.com mail also works through Microsoft OAuth for IMAP receive. Fastmail, iCloud, and many independent providers connect over IMAP. Microsoft 365 work and school mail isn't supported yet; its calendar and contacts can come in through the Mac's Internet Accounts.

Does my Mac have to be on?

Yes. Automations run on your Mac, so they run while it's awake. A missed run is recorded rather than silently skipped, and on Pro a job can keep the Mac awake until it finishes.

Why is the App Sandbox off?

Because a sandboxed process can't launch the Claude or Codex CLI, git, or your own shell commands, and running those on a schedule is the point of the app. Full Disk Access doesn't change that; it waives a different restriction. The security page covers what's in place instead.

Is it a subscription?

No. One payment, and every 1.x release is included. A future major version would be a paid upgrade you can choose to skip. If a license ever lapses, nothing is deleted: the extra accounts just go inactive until it's back.

Windows or iPhone?

Mac only right now. A Windows version exists in development and is paused; I'm not going to promise a date for it. The engine is deliberately Mac-native, so an iPhone app would be a companion rather than the same thing.

Something's broken. Who do I ask?

Me, directly: info@coreyklass.com. It's a one-person product and I answer my own support mail.

Put Claude or Codex to work on your email, calendar, and files. It keeps going after you close the chat.