In development — not on the App Store yet
Agent IO gives your business a team of AI specialists that hold a meeting, read your connected accounts, and produce something you can actually use. It is an iOS app: your chats, your team and your keys live on the device, not in our database.
There is no web app to sign into. Everything below describes the iOS app.
100
business tools in the catalog
16
categories, from accounting to research
3
messaging channels, using your own bot
0
copies of your content on our servers, with both opt-ins off
Six things, described the way they behave — not the way a demo would.
A CEO-style orchestrator runs a meeting between the specialists you hired — finance, sales, support, engineering. Each one speaks in turn, and the meeting ends with a decision and a written deliverable rather than a wall of text.
Connect the services you already pay for and the agents read from them during the meeting. Every read is recorded as a source, and the app checks the model's citations against the calls that really happened.
Reading is automatic; changing the outside world is not. A write action stops and waits for your approval, times out after two minutes, and counts silence as a refusal. Policy can tighten that gate, never loosen it.
Point the app at your own MCP server or an OpenAPI schema and its endpoints become tools. Every tool starts closed: it does nothing until you grant it read or write access by name.
Reports, proposals and task lists land in a file browser with grid, list and preview modes — searchable, sortable, pinnable, archivable. They are files on your phone, so they are yours whatever happens to us.
The model catalog is rebuilt from the providers every two days, with live prices. The shared part of the prompt is cached: from the second call on, a repeated meeting costs up to 88% less, and 76% less measured across a ten-step meeting.
You connect them with your own account or API key, from inside the app. Nothing is connected until you connect it, and Agent IO never holds a shared key on your behalf.
Academic indexes, official statistics, maps, weather, legislation. The one category that needs no key at all.
Campaign, audience and traffic data, so the sales specialist argues from numbers instead of adjectives.
Orders, stock and returns from the storefronts and marketplaces you already sell on.
Boards, issues and documents — where a meeting's task list goes once you approve it.
Revenue, invoices and subscriptions for the finance specialist's cash-flow reading.
Repositories, issues and pull requests, summarised for people who do not read diffs.
Databases and hosting, plus your own MCP or OpenAPI server as a first-class tool source.
AI, media, crypto and finance, automation, sales & CRM, contact, support, storage, design.
Agent IO has no shared bot. You register your own bot or business number, the token stays on your phone, and the app tells you exactly which direction is working.
Telegram
Customers write to your bot and the orchestrator answers them. You, as the owner, get management commands in the same chat — finance, customers, memory — and a customer typing those commands gets an ordinary reply instead of your business data.
Incoming and outgoing both work.WhatsApp Business
The team writes to customers from your number: quotes, order updates, replies drawn from the tools you connected.
Outgoing works. For incoming, you paste the webhook address the app gives you into the Meta console — Meta has no API for that step.Viber
Announcements and replies for customers in Eastern Europe and Asia, sent from your own bot account.
Incoming and outgoing both work; the app registers the webhook with Viber for you.This is an ethical preference first. It also happens to be the cheapest legal position.
Meetings, deliverables and your team are stored in the app's own database on the phone. Credentials go to the iOS Keychain. iCloud sync of that database is switched off explicitly, not left to a default.
If you pair a second device, the copy that travels between them is end-to-end encrypted. Backups work the same way: the file is sealed before it leaves the phone.
Status code, duration, token count, tool name. No prompt, no reply, no file content — because a log kept for thirty days is a form of storage too.
Server-side execution, and messages arriving from WhatsApp or Viber while your phone is closed. Both are opt-in, both expire automatically. The Privacy Policy states the retention period.
The answer comes from a model provider, so your prompt reaches them. They are named in the data processing terms. We have not yet secured a zero-retention clause from every one of them, and we will not claim otherwise.
The app records a hash of the exact legal text you agreed to. If we change the wording, the hash stops matching and you are asked again. No silent migration of consent.
There is no monthly allowance and no monthly quota to lose. You get a welcome credit, and after that you top up when you want to. Token packs are consumable; amounts in your currency are set and shown by the App Store.
50,000 tokens
1M – 20M tokens
Monthly membership
Legal texts are drafts. The privacy policy, terms, data processing terms and AI transparency notice below are written but have not been through legal review yet. The app shows the same texts with a draft marker.