An AI agent for your computers and servers, allowed nothing until you grant it
Install FS Machina on a Windows, Linux or Mac machine with one command. Your agents can then check its status, read files in folders you choose and, only where you allow it, manage services, processes and packages. The machine connects out, so no port is opened.

What an AI agent on your own machine is for
Plenty of useful questions live on a machine nobody wants to expose to the internet: is the backup service running, why is the disk full, what does last night's log say, where is the signed contract in the shared folder. FS Machina gives your FlowSentric agents a careful way to ask them on machines you own, from chat, an agent, a workflow or a scheduled run, without building an integration or opening a firewall port.
Every machine starts able to read its system status and nothing else. You grant each further capability separately: reading files, writing files, deleting files, ending processes, controlling services, installing packages, restarting the machine, running a program. None implies another, so writing files does not include deleting them. File access works only inside the folders you name, credential files such as SSH keys and .env files are refused whatever the folders are, and paths are resolved on the machine itself, so a link pointing out of an allowed folder is refused too.
FS Machina runs under the account you install it with and reports that privilege; FlowSentric never asks for or stores an operating-system password. On Windows it runs as the signed-in user, and administrator rights come only from Windows' own consent prompt, answered by a person at the machine. Updates, too, are started only by someone at the machine, never pushed from the server.
Every action is written to the machine's activity history: what was done, to which target (a path, service, package or process) and when, never the raw arguments. When a machine goes offline or comes back, its owner is notified, and a machine can be released, revoked or deleted at any time.
What it does for you
Default-deny, per machine
Ten capabilities, from reading system status to running a program, each granted on its own. A grant change reaches a running machine within seconds, in both directions.
Files your agents can use
Read text and office documents in allowed folders, show an image to a vision model as a picture, or send a file into your knowledge base, all inside the folders you named.
Operations without a terminal
Check services, processes, logs, network and installed packages. With the grant, restart a service or update a package; the wait matches how long that operation takes.
How it works
What is included
On the machine
- One small program, no runtime to install
- A status window, and a tray icon on Windows and Linux
- A self-test that shows what this machine can do
- Uninstall from the tray, the window or one command
Security
- Outbound, encrypted connection; plain connections to a remote server refused
- Each machine proves itself with its own key
- Credential files denied regardless of folders
- Programs run as a list of arguments, never through a shell
In FlowSentric
- Available in chat, agents, workflows and scheduled runs
- Approvals before risky actions, if you want them
- Offline and back-online notifications
- Per-machine read limits that protect your hardware
Built for
Real-world scenariosFS Machina is part of the Business and Custom packages. Start on the free plan (€0, no card) to build and test the agents that will use your machines. macOS has no tray icon; its status window offers the same controls.