00Enterprise multi-agent orchestration

Orchestrate a fleet of AI agents across your enterprise.

KyberAgent is a workspace for running and coordinating a team of AI agents. One headless daemon owns the entire runtime — brains, sessions, the message bus, and orchestration — and every window, local or remote, is a lens onto it.

ORCHESTRATORATHENAAVAREMOTEHERMESREMOTEARCANADAEMONFIG. 1.0 / KYBERAGENT / AGENT FLEET / REV. 2026.07ONE DAEMON · MANY LENSES
_
PLATFORM
macOS · Windows
MODELS
Claude · Codex
DEPLOY
Local · Remote · Self-hosted
01THE ARCHITECTURE

One daemon owns your agents. Every window is a lens onto it.

KyberAgent is a deployable kernel daemon that owns the entire runtime for a fleet of local and remote AI agents — their brains, sessions, message bus, orchestration, plugins, and skills. The desktop app attaches to it as one host among many.

The daemon is headless by design. It runs as its own process, so it survives app reloads and can run as a remote service that other machines attach to. Desktop and remote clients are clients, never owners — the daemon is the single source of truth.

02MULTI-AGENT ORCHESTRATION

Agents that route, delegate, and answer as one

An Orchestrator sits in front of the fleet — routing each request to the right specialist, delegating work, and synthesizing across agents into a single answer.

THE ORCHESTRATOR

Route and synthesize across the team

The one agent that ships built in. It reads intent, routes to the right specialist, and — when a question spans several agents — queries their brains and returns one unified answer. An inline trace shows exactly how it routed: Orchestrator → Arcana → reply.

query_agent_brainask_agentrouting trace
AGENT BUS

Agents talk to each other

A message bus carries query, notify, delegate, and response between agents — with broadcast, reply correlation, and loop detection built in.

CHAT GRAMMAR

Address agents directly

Type @Athena to route a query to that agent and inline its reply — the chat box is a typed shell over the whole fleet.

DISPATCH

Delegate work and get artifacts back

One command turns a chat message into tracked work. Dispatch moves each issue through a phase machine on worker heartbeats, then lands the result in your inbox — diffs, summaries, and all.

/delegate Arcana "rewrite the onboarding doc"
→ issue assigned · worker heartbeat runs it
→ status: done · inbox: completed
artifacts: file diff, summary
03REMOTE AGENTS

Agents that live anywhere you deploy them

A remote agent runs on its own daemon — a VPS or an always-on host — and you reach it over your private network, brain and all. Not a remote API call: a real agent, somewhere else.

FIG. 3.0 / REMOTE AGENTREMOTE
AvaREMOTE · VPS

A VPS-hosted agent provisions its own Dockerized GitHub environment, clones the repo, isolates on a work branch, and proxies its brain back to you — all on its own daemon.

desktop-locallocal-serviceremote-servicebridge-client
ADD REMOTE → MANUAL PEER
peer agentava
peer urlava-host (tailscale)
port8765
authbearer token

Reached over a private tailnet — no public exposure.

04SHARED AGENTS

Share an agent, not a copy of it

The daemon serves many people at once, so the same agent is shared — not cloned. Everyone talks to the same agent: one identity, one brain, one memory.

SHARED WITH ME

One click to add

Agents your team deploys show up in a shared pane. Add one and you're talking to the same live agent everyone else is — no setup, no copy to drift out of sync.

SHARED SESSIONS

Together or on your own

Flip shared sessions on and everyone continues the same threads as one workspace. Flip it off and each person keeps their own thread list — same agent, same brain underneath.

TEAM GRANTS

Access with your own identity

Grant an agent to a whole team. Each member reaches it with their own org identity — no shared master token to pass around or rotate.

05ENTERPRISE-GRADE SECURITY

Central control. Zero access to your data.

A control plane is the single source of truth for who exists, who owns what, and what each user can do — and it never sees a brain, a connection token, or a single model call.

FIG. 5.0 / CONTROL PLANE ↔ DATA PLANESEPARATION
CONTROL PLANE
Identity & policy metadata only

Orgs, users, teams, roles, agent ownership, access grants, and adapter allowlists. Never a brain, a token, or model traffic.

DATA PLANE
Your daemons, your machines

Brains, connection tokens, model traffic, and sessions live on your hosts — and that's where policy is enforced. Verification is offline: no call home on the request path.

IDENTITY & SSO

Org → User → Device

Federate to Okta, Entra, Google, or Auth0. Daemons verify signed tokens offline against cached keys — enforcement never waits on a network round-trip.

RBAC & GRANTS

Grant exactly what's needed

Roles from Owner to Member, plus per-agent ownership. Grant agents at use or manage level, to a user or a team. Per-agent tiers: public, org, restricted, private.

OFF-BOARDING

Cut access in one screen

Suspend a user and their access falls away within one short-lived policy window. Fail-closed by design: daemons keep enforcing last-known policy even offline — they never revert to open.

MODEL & CONNECTOR GOVERNANCE

Decide what agents may reach

Allowlist providers and models across the org — a session requesting a disallowed provider is rejected. Do the same for connectors and MCP servers.

SECRETS & RESIDENCY

Self-host, keys in the keychain

OAuth tokens live in the OS keychain, never in plaintext. Run the whole control plane in Docker against your own Postgres, behind your own domain — hosted or self-hosted is a config flip, and with SSO federation no user record leaves your infrastructure.

06MEMORY

Every agent remembers. Arcana is the brain.

Each agent carries a persistent brain — timeline, entities, relationships, facts, and vector recall — that it maintains itself, local-first, with an optional cloud workspace.

THE BRAIN

Remember, recall, and reason over what it knows

Per-agent long-term memory in local SQLite: a timeline of events, an entity graph, facts with source confidence, and semantic recall. A background sleep pass consolidates the timeline into facts, entities, and routing heuristics — with an audit trail of every merge.

rememberrecallentity graphwatched folders
ARCANA CLOUD

Local or cloud, non-destructive

Swap any agent's brain from local to a shared cloud workspace and back — instantly, without losing a thing. Bring it home anytime.

07THE WORKSPACE

One workspace. Every surface your agents need.

Chat is just the front door. Each agent brings a working directory, a terminal, and git; the daemon projects shared surfaces alongside them.

FIG. 7.0 / KYBERAGENT// KYBERAGENT
AGENTS
Orchestrator
Arcana
Athena
AvaREMOTE
HermesREMOTE
SYSTEM
Dispatch
SURFACES
Bookmarks
Design
Live Artifacts
Visual
terminalgit statusvisualremote…/agents/ava
DispatchDelegated work + inbox, tracked through its phase machine.
VisualExplore an agent’s brain — timeline, entity graph, merges.
DesignA design-system runtime you can operate through an agent.
Live ArtifactsRun live, interactive artifacts in their own sidecar runtime.
CoderWorking directory, terminal, and git per chat — remote agents spin up Dockerized GitHub environments.

KyberAgent ships with the Orchestrator. You assemble the rest — a docs & memory agent, a frontend agent, a remote sales agent, whatever your work needs — or add ones your team already deployed.

08PLATFORM

Built for how enterprises actually run agents

Local-first and solo on day one; org, team, and remote capabilities light up the moment you sign in. Nothing to rip out as you scale.

DESKTOP
Electron · macOS + Windows
RUNTIME
Headless daemon, single-owner
MODELS
Claude · Codex adapters
DEPLOY
Local · Remote · Self-hosted
09GET STARTED

Bring your agents under one roof

KyberAgent is in active development with enterprise design partners. Book a demo to see orchestration, remote and shared agents, and the control plane running on real hardware.

Enterprise multi-agent orchestration · Local-first · Self-host available