Zeus, a download and file manager for people who run AI agents

Alpha 0.1.0-alpha.1 · published 29 October 2026. Windows and Linux desktop app. macOS is planned.

Zeus is built to finish the downloads an agent starts, check each file, and keep a record of where it came from. Any login it needs waits for a person to approve.

Last reviewed

What works today and what is not there yet

Works today

  • A desktop app for Windows and Linux that supervises its own download engine.
  • Downloads that resume after a drop, with retries, file checks, and executables held in quarantine.
  • File panes, search, file operations, ZIP jobs, previews and reviewed uploads through supported cloud connectors.
  • A command line and an agent interface that tools such as Claude Code, Cursor and Codex can connect to.
  • Approvals decided only on surfaces a person uses, such as the interactive terminal.

Not there yet

  • Approvals from the browser extension's popup. The extension runs as a development extension, so the terminal decides.
  • A call to a live model provider with a real key. The agent was checked against local test servers.
  • Signed installers, automatic updates and a macOS build.
  • Checks on more devices and browsers, with screen readers and at 200% zoom.

What Zeus is built to do

A big download drops halfway.
Built to resume from what it already has, with retries and a durable journal.
An agent can open a page but cannot save the file.
Designed so the agent queues the download and gets the file back once its hash is checked.
The file sits behind a login the agent does not have.
Designed to ask a person for a narrow grant: one site, a short time, held in memory and never stored.
Nobody can say later where a file came from.
Built to keep a hash-chained audit log and a record for every file.
For your engineers
  • The zeusd daemon handles resume, retries, SHA-256 and BLAKE3 checks, and quarantine for executables.
  • A CLI (zeus), a terminal view and an MCP server (zeus mcp) with 15 tools for agents.
  • The in-app agent uses your own provider key or an installed CLI. Keys stay in the operating system's credential store.
  • A browser extension for Chrome and Edge, registered through a native-messaging host.
  • No captcha solving, TLS spoofing, cookie-database reading or DRM circumvention. It cannot stop an attacker who already runs as you.
  • The builds are unsigned, so Windows SmartScreen warns. Linux needs WebKitGTK 4.1 (Ubuntu 22.04 or Debian 12 and newer).

See an agent fetch a file through Zeus

Ask for a demo and we will show the approval step on a desktop build, with the limits of this alpha stated up front.