Skip to content

Computer use and safety

Let bots click through your apps when there's no API for the job. Set allow, ask or never per app, and take over with one click.

Your computer, your rules. With computer use, a bot clicks and types through your apps when there's no API for the job. No GPU needed. You see when it's driving, and you can grab the wheel any time.

Computer use works on Mac and Windows. Linux is in release testing. In the Linux build, computer use works in a desktop session: X11, or Wayland after you approve the system's screen-sharing prompt. With no desktop session, bots can't control apps but still browse, write, research and run routines.

Turn it on

Open Settings › Computer and follow the setup for your system. Grant the OS permissions it asks for (on Mac, typically Accessibility and Screen Recording). If you revoke a permission later, Fluf tells you what to fix before the next session.

Set the rules per app

For every app, choose Allow, Ask or Never. Rules flow down the org chart: set them on a business or department and every bot below inherits them, then tighten them per bot.

Bots run sandboxed by default, in their own workspace. Full access is a per-bot grant only you can give.

Start small: "Open the approved spreadsheet and summarise it. Don't edit the original or send anything."

Watch, take over, stop

A pill shows when a bot is driving, with each step as it happens.

  • Take over: your mouse and keyboard, instantly.
  • Hand back: the bot picks up where you left off.
  • Stop: the session ends. Nothing else runs until you say so.

It asks before it acts

Sending, spending, deleting, publishing: the bot stops and asks. Check the app, account, recipient and effect, then choose Allow or Deny. Instructions on a website never count as your permission.

Logins stay yours

Passwords, MFA, Touch ID and other "is that really you" checks are yours to complete. Bots never get around them. A locked screen pauses the session until you're back.

What leaves your computer

To do the job, the model you chose receives what the task needs, such as a screenshot, selected text or a file. Apps and websites receive what the bot submits to them. Everything else stays on your computer. Read the privacy policy.

Next: Connect your AI · Inbox · Troubleshooting

Updated October 21, 2026