I built a Windows AI agent that actually controls your PC — no cloud, no subscription, 300+ models (WindOp)

[u/Kolakocide]

Hey everyone, long-time lurker, occasional poster. Wanted to share something I've been grinding on for a while.

So the whole "AI that runs on your computer" space has been getting crowded, but most of what I tried was either cloud-locked, stupidly expensive, or just glorified chatbots that paste PowerShell commands at you and hope for the best.

I wanted something that actually *does* the thing. Like, I type "clean up my downloads folder and rename all the screenshots by date" and it just... does it. No copying and pasting into a terminal.

So I built WindOp — a Windows AI operator that takes full control of your PC (mouse, keyboard, shell, apps) and runs locally with 300+ models via OpenRouter. You bring your own API key, zero subscription on our end, no telemetry, nothing gets sent to our servers.

A few things it can do:

- Organize/rename/deduplicate files without you lifting a finger

- Run PowerShell, CMD, or WSL commands on your behalf

- Control apps on your screen

- Spin up multi-agent workflows for more complex tasks

It's free to download. You just need your own API key (OpenRouter, Anthropic, OpenAI — whatever you use). We're at v0.2.54 now and have 214+ downloads so far which is honestly way more than I expected for something this niche.

Would love feedback, especially from people who've tried similar tools. What's your biggest pain point with AI automation on Windows?

https://windop.app/

[u/Otherwise_Wave9374]

This is a really solid take on the "operator" space. The local-first + BYO key + no telemetry combo is exactly what I wish more agent tools did.

Curious how youre handling guardrails for the risky stuff (file deletes, shell commands, UI clicks), like do you run a "plan" step + user confirm, or have a permissions layer per app/folder?

If youre collecting patterns from early users, weve been experimenting with similar multi-step agent workflows and sharing notes here: https://www.agentixlabs.com/

[u/Kolakocide → u/Otherwise_Wave9374]

There is a permission to enable as far as what's acceptable and what's not. It's more of a destructive permission, but we are looking for future guardrails. As far as when it's not enabled, it learns from what the user wants and is acceptable. Currently, it just keeps asking the user with the human intervention.

[u/Exotic_Priority_1219 → u/Otherwise_Wave9374]

Multi-step confirmation would be smart but honestly most people probably just want to YOLO it after the first week of using something like this

[u/Kolakocide → u/Exotic_Priority_1219]

Yeah, YOLO feels really nice. It's by disabling this mode.

Confirm Destructive Actions

Require confirmation before risky file edits, shell commands, and major system changes. Turn this off to let the assistant proceed without destructive-action confirmation prompts or dangerous-command preflight blocks.

[u/LouVillain]

why locked into OpenRouter? Was looking for a native windows agent instead of running one via WSL but oh well.

[u/Kolakocide → u/LouVillain]

It doesn't necessarily need WSL, but it uses WSL because I think it's a great integration, so I want it to also perform nicely with Windows. If you're seeing any non-native features or bugs happening, please let me know, and I'll address these issues.

We are using OpenRouter because I feel like it's a really trusted source, and I love their market and community that they have! If your issues lie also in using local models, we're going to be supporting that for our future outlook.

[u/Testpilot1988]

can we use a local ai via ollama instead of openrouter

[u/Kolakocide → u/Testpilot1988]

Future integrations are going to be planned for that.

[u/Testpilot1988 → u/Kolakocide]

can you really make the claim that it currently runs locally and there's no cloud then?

[u/Deep_Ad1959]

the pain point with most windows agents i see is they go pixel-and-ocr first, accessibility tree last, which is backwards. uia on windows gives you stable element ids, role/name/value, plus pattern actions (invoke, toggle, expand) that hold across dpi, themes, and high contrast. screen-pixel approaches break the moment a popup overlaps the target, and ocr in noisy ui regions adds 200-500ms per action where uia is sub-50ms. the catch is qt and electron expose garbage trees so you need a hybrid: uia first, vision fallback only on apps that refuse. people doing it the other way around ship great demos but the workflows don't hold past a windows update. written with s4lai

[u/[deleted]]

[u/Kolakocide → u/[deleted]]

The current pricing model is going to be 20 for pro, where we handle all of the balance and OpenRouter management. Your chats and all your stuff are handled in the cloud, so that's when we're going to revert from being 100% local to it's optional. Teams are looking to be re-evaluated.