Plow Latch

Latch is a macOS app that turns the Mac you already use into a tool server for the AI agent you already use. You install it, copy the MCP link it generates for your machine, and paste that link into Claude.ai, Codex, OpenClaw, Hermes, or any other MCP-compatible client. From then on the agent can browse the web in your logged-in browser, run shell commands, open files and use your saved accounts — so it can finish a task instead of handing you a numbered list of steps to do yourself.

Why the local part matters. Latch does not upload your working set to a vendor cloud. The browser sessions, CLI tools, files and credentials it exposes are the ones already on your Mac, and The Plow Collective states there is no Plow cloud database holding your data. Passwords are a specific case: Latch can fill a login for the agent without revealing the credential to the agent itself.

The permission model. Anything you have not already allowed stops for a decision. That decision is either yours or the built-in AI Reviewer's, which judges the request against the objective you originally set. The reviewer is designed around prompt-injection defence: it treats whatever the agent wrote as data rather than as instruction, and denies when it cannot reach a confident verdict. A hijacked page, a poisoned email or a booby-trapped file therefore has to get past a check that is explicitly not reading it as a command.

What people use it for. The jobs Latch targets are the fifteen-minute errands an agent could previously only explain — booking a campsite and putting the confirmation on your calendar, reserving a restaurant, paying a utility bill, searching an inbox to match receipts against card charges overnight. It is also a way to give a self-hosted agent such as OpenClaw real access to Gmail, Slack, the browser and the command line.

Who makes it. The Plow Collective PBC, a public benefit corporation in Menlo Park, California, founded by engineers previously at Dropbox, Apple, Zynga and Facebook. Latch launched publicly on 21 August 2026. It is a free download and no paid tier is published as of late August 2026; there is a live demo that runs against a founder's own Mac, and an active Discord where members share agent builds.

Requirements. macOS, plus an agent that speaks MCP.