Plan the family camping trip.
Finds an open site, books it, and drops the details on your calendar.
Plan the tripOne-click agents
are here.
Text Plow what you need in plain words — book the trip, chase the receipts, pay the bill — and an agent spins up on your own Mac and actually does it, start to finish.
Hey Plow, can you order me some lunch?
iMessage
Use cases
Real tasks,
off your plate.
These are the things people actually text in — each one runs as an agent on your own Mac. Texting opens up once you're in the preview.
Match expenses with receipts.
Digs through thousands of emails and files to reconcile it all while you sleep.
Match my receipts
Pay the utility bill on time.
Catch the statement, confirm the amount, and pay before it's late.
Pay it on timeBring your own problem.
Describe anything in a sentence. Plow drafts the agent and wires it up.
Describe itTakes action across
Mail
Calendar
Browser
Files
Command line
Local by design
Your passwords never leave your Mac.
Plow keeps a vault and password assistant right on your machine. When a task needs a login, the assistant fills it straight into the browser — the agent completes the job but never sees, stores, or sends a single credential. Your keys stay on your Mac, always.
Local
On your machine, not our servers
The vault lives on your Mac. Nothing syncs to Plow; we never see or store your credentials.
Hidden
Filled, never revealed
The assistant types the password into the page. The agent only ever sees "logged in."
Yours
You hold the keys
Grant, rotate, or revoke access anytime. Plow never holds them.
Your data, protected
Your data only goes where the job needs it.
It reaches the one folder, file, or page the task calls for — never your whole machine or your accounts. You approve the job once, then an adversarial AI Reviewer checks every request against it, allowing what fits and blocking what strays.
It only opens what the job needsThe agent reaches the one folder, file, or page the task calls for — never your whole machine or the rest of your accounts.
Every request judged against the jobThe AI Reviewer weighs each action the agent takes — allowing what fits what you approved, blocking what strays from it.
Or approve each one yourselfPrefer the manual version? Approve each request by hand. The AI Reviewer is there for when you'd rather not.
AI Reviewer
Judging
Approved jobMatch my expenses to my receipts
Read ~/Documents/receiptsAllowed
Search Gmail for the receiptsAllowed
Email the full report to an outside addressBlocked
Scoped
The job lives outside the agent
Your instructions stay where the agent can't read them or rewrite the rules.
Revocable
Access, one grant at a time
One folder, site, or command — granted when the job needs it, pulled back when you say.
Protected
A web page can't change the job
A page or email trying to redirect the agent is still checked against the job you approved.
Logged
Everything on the record
Every request, allow, and block is written down — a full record of everything the agent did.
Build your preferred stack
Bring your own agent.
Run it safely.
Claude, Codex, OpenClaw, Hermes — you've already got a frontier agent you trust. Plow doesn't replace it; it takes the agent you already use and puts it to work.
ClaudeAnthropic
CodexOpenAI
OCOpenClaw
HHermes
Then Plow gives it superpowers
You keep your agent — Plow adds the rails: a way to reach people, act safely, and an environment to run in.
Chat API
Text users over iMessage — your agent gets a real number to reach you on.
Plow Latch
Controlled access to sensitive actions and data (gated by the AI Reviewer), plus Mac safety & provisioning — setting up and running your agent's environment, scoped and logged.
CLI
ComingA local, self-hosted path to launch agents with the same patterns.
Private preview
Hand off your first task.
Text Plow what you need — an agent spins up on your Mac, does the whole thing, and every key stays yours.