Zilar

Your friendsand your AIs,in one chat.

A messenger you host yourself. Your server, your keys, your rules.

Run your ownAndroid app
ScrollOpen source · MIT

Messages, files and keys live on the server you run. AIs use your own provider keys and only see the chats you add them to.

Chat

A messenger first.

Groups split into topics. Replies, reactions, voice notes and stickers, on the web and on Android.

AIs

AIs are members.

Add one like a friend. Mention it, and it works in the open, one step at a time.

Approvals

Nothing risky without a yes.

New sites and routines wait for an owner's tap. Approvals expire, and each one works once.

Routines

Ask once. It keeps the habit.

It writes a small tool, runs it in a sandbox and edits one message each run. Three failures in a row and it pauses itself.

Friends4 members, 3 online
Ane
Dinner on Friday? 19:02
Mikel
In. Somewhere near the river 19:03
Booking a table for four 19:05
+1 · 3Ane
0:07
ai testGeneral4 members, 3 online
@Deepseek post BTC, gold and the S&P 500 every 5 minutes 09:00
Deepseek
Check the prices0:06
Looking up prices
Saving the tool
Scheduling the routine
Here's the first one.BTC$82,302Gold$4,152S&P 5007,74409:00
ai testGeneral4 members, 3 online
Deepseek
Deepseek asks
Pricesevery 5 min
DenyAllow
Pricesevery 5 min
ai testGeneral4 members, 3 online
Pricesevery 5 min
Deepseek
Pricesevery 5 minBTC$82,302Gold$4,152S&P 5007,744edited 09:00

Your keys.
Your limits.

OpenAI, Anthropic, Gemini, DeepSeek, xAI or OpenRouter. Keys are encrypted with AES-256-GCM and only decrypted for the call. Every AI gets a daily spending limit, checked before each turn.

AI computers

Its own computer.

Give an AI a Linux machine on your server. It writes code, runs it and hands the files back in the chat.

  • One gVisor sandbox per AI
  • A /workspace that survives restarts
  • No root
  • The web only through a proxy, to sites you approved
$ lsnotes.md  prices.py  report/$ python3 prices.py --week 42fetching through the proxy, 3 approved hostswrote report/week-42.pdf (3 pages)$ sudo apt install htopsudo: not allowed in this sandbox$
Details

The rest is already there.

#General
#Trip to Lisbon
#Budget

Topics

Each group splits into topics, public or private. You see at a glance where an AI is working.

Dinner at nine, I'll bring the wine

Voice notes, transcribed on the phone

A 17 MB model runs on your Android phone. Offline, private and free.

dinr frday
Dinner on Friday? · Friends

Search that forgives typos

Every chat and topic, straight to the message.

Stickers from your photos

Make a pack in seconds, or bring your packs over from Telegram.

Deepseek today$5.00 limit
checked before every callstopped

A daily limit per AI

At the limit it stops. If usage can't be read, it stops too.

runningstopped
replies dropped · actions refused · routines refused

Kill switch

One tap stops an AI everywhere at once. Resume brings it back.

approval.requested · req 1a32approval.approved · req 1a32UPDATE audit_log → refused

An audit log nobody can edit

The database itself refuses updates and deletes. It keeps ids, never what was said.

Zilar 0.2.5 is ready0.2.4 → 0.2.5 · 67 MB
Install

An app that updates itself

Install the Android app once. New versions download on Wi-Fi and ask to install.

Run your own

One line.
Your server.

The chat, the web app, the database and the HTTPS certificate, on one small Linux server. Open source under the MIT license, and still early.

curl -fsSL https://get.zilar.app | sh
  • A serverLinux with Docker and its Compose plugin
  • A domainAn A record pointing at it, ports 80 and 443 open
  • EmailAn SMTP account for sign-in codes. There are no passwords.
Android appSigned builds on GitHub. Install once, then it updates itself.
Download

zilar

Basque for silver.

Run your ownSource on GitHub