'%20fill='%23EDEDED'%3e%3cg%20id='symbol'%3e%3crect%20x='0'%20y='0'%20width='10.5'%20height='42'%20rx='3.5'/%3e%3crect%20x='16'%20y='0'%20width='10'%20height='28'%20rx='3.5'/%3e%3crect%20x='31'%20y='14'%20width='10.5'%20height='28'%20rx='3.5'/%3e%3c/g%3e%3cg%20transform='translate(-19.88%20-0.33)%20scale(1.08)'%3e%3cg%20id='wordmark'%3e%3cpath%20d='M76%203H82V9H76Z%20M76%2011H82V36H76Z'/%3e%3cpath%20d='M86%2011H91.5V15.4C93.1%2012.3%2095.5%2010.8%2098.6%2010.8H100V16.5H97.9C93.7%2016.5%2092%2019%2092%2023.5V36H86Z'/%3e%3cpath%20fill-rule='evenodd'%20d='M110.8%2010.8C118.1%2010.8%20122.5%2015.8%20122.5%2023.5C122.5%2031.3%20118.1%2036.5%20110.8%2036.5C103.5%2036.5%2099.1%2031.3%2099.1%2023.5C99.1%2015.8%20103.5%2010.8%20110.8%2010.8Z%20M110.8%2015.5C107%2015.5%20105%2018.3%20105%2023.5C105%2028.8%20107%2031.8%20110.8%2031.8C114.6%2031.8%20116.6%2028.8%20116.6%2023.5C116.6%2018.3%20114.6%2015.5%20110.8%2015.5Z'/%3e%3c/g%3e%3cg%20fill='%23767676'%3e%3cpath%20id='period'%20d='M124%2030H130V36H124Z'/%3e%3c/g%3e%3c/g%3e%3c/g%3e%3c/svg%3e)
A desktop hub for apps that respect you.
Apps provide capabilities through services. Iro owns credentials, permissions and routing — so a stranger's app is safe to install.
One way in for every app
Every app — ours included — installs from a catalog through Iro's consent sheet. Signed packages, pinned publisher keys, no silent installs.
Credentials never leave Iro
Tokens and API keys stay in the kernel vault. Services get proxied HTTP to their own origins only, with known secrets scrubbed from responses.
Revoke anything, keep your data
Per-capability grants, per-app storage, Activity for every call. Revoking breaks only that feature; uninstalling clears the code, not your files.
Your models, your choice
API keys, local Ollama, or your own subscription. Per-app budgets, tiers and pins — switching models never changes the app.
Onboarding installs the Store and opens it. Each app is one consent sheet.
Accounts live on the app's page. Sign in or pick a folder in Iro's trusted window.
One app, four presentations: in-app, separate window, compact widget, or its own desktop app.
Starter apps
Iro ships with no apps. Everything comes from the official catalog, independently of Iro releases. Start with the Store, then GitHub, Markdown Notes, Daily Briefing, the Assistant, and the model apps.
Pre-release: Iro builds run locally and are ad-hoc signed. Download, signing and auto-update arrive with the release phase. For now, build from source.