Everything you need to use Ghostdrive today.

Get access

No wallet is needed to enter. Open the app and choose a way in:

1. Passkey (Touch ID, Face ID, Windows Hello or a security key). Create an account and write down the 24 recovery words it gives you.
2. Recovery words: type the 24 words on a new device to open the same account.
3. This Mac (desktop app): after you turn on Touch ID, the app opens your vault with Touch ID or your Mac password.

A wallet is linked later from Settings → Profile → Wallets (Trust, Phantom, MetaMask, Coinbase, Rainbow, OKX). Linking signs a free message, sends no transaction, and is bound to this site's domain. You need a linked wallet for DRIVE, the DAO and an alias.

Signing in with a wallet alone (no account yet) is token-gated during the beta: the wallet needs at least 1 DRIVE on Base. No DRIVE yet? Join the testnet: an account with a passkey or 24 words needs no wallet. We never ask for a seed phrase or a private key.

Your vault and Drive

Everything you keep (files, notes, threads, office work, rooms) lives in your vault, encrypted on your device before anything leaves it.

Unlock

• Passkey: Face ID, Touch ID or a security key.
• 24 recovery words: write them down once; they restore the vault on any device.
• Touch ID on this Mac in the desktop app.
• Wallet: only for older vaults that were made with a wallet signature. Any site that gets you to sign the same message could open such a vault, so move it to recovery words once it is open (Drive → Vault → Keys → Move to recovery phrase). New vaults never use a wallet as their key.

Drive

• Files: drop files in; each becomes sealed blocks plus an encrypted manifest. Any size; an interrupted upload resumes.
• Notes: Markdown notes, edited in place and synced between your devices.
• Share: copy a read capability (drive369:v3:<cid>:<key>); whoever holds it can read that one file and nothing else.
• Shared: files and notes of the groups you belong to (see Groups & messages).
• Imports (Settings → Memory): ChatGPT or Claude data exports become Terminal threads; a folder becomes notes and files (Apple Notes through any Notes exporter). Nothing is uploaded.
• Ghostdrive in Finder (desktop app, macOS): an encrypted volume under Finder › Locations that stays in step with your vault; it ejects when the vault locks.

Keep your recovery words offline. Nobody, including us, can recover a vault without them or one of your passkeys.

Terminal: your Ghost

The Terminal is one conversation with your own AI, your Ghost, which reads your vault (under the permissions you give) and answers from your device, your node or your own API key.

• Ask or remember: type, or hold ⌥ Space to talk (release sends; a tap keeps listening).
• Commands: /goal (your Ghost drafts the plan), /remind (a reminder sent by your node), /note, /find (threads, notes and files), /office (hand a task to the Office), /send @alias … and /schedule +2h @alias … (sealed messages), /contact, /project, /help.
• Goals and reminders sit in the sidebar; reminders and the morning brief run on your node, so they arrive while your devices are off.
• Approvals: anything that acts in the world (sends, posts, spends) waits as a card under Waiting for you: Allow once, Always, or Deny. Stop Ghost halts everything at once.
• Connectors (Settings → Profile): calendars (iCal/CalDAV), Notion, Google Calendar through your node, and Telegram for approval cards. Tokens stay sealed in your vault and run on your node.

Permissions live in Settings → AI → Permissions: nothing leaves the device for an outside AI without a line there.

Calls

Private video calls between Ghost IDs: peer to peer and end-to-end encrypted.

• Start a call and share its link; the key travels in the part of the link browsers never send to a server.
• Waiting room: nobody joins until the host admits them; the host sees each person's name and whether their Ghost ID checks out.
• Up to 6 people, full mesh. Every audio and video frame is encrypted in your browser; keys change whenever someone joins or leaves.
• Captions are made on each person's own device; no audio goes to a server.
• Recording starts only when everyone in the call allows it, and everyone sees that it is on. (Nothing can stop someone recording their screen with another tool; the prompt says so.)
• Notes: when you leave, the transcript is saved to Drive › Notes, and your own AI can add the summary, decisions and action items.
• Other networks: with "Reach people on other networks" on, the call uses STUN and Ghostdrive's TURN relay, which only ever see encrypted traffic.

Office

A private AI workforce: say what you need, the office plans it, forms the team it needs and comes back with the result.

1. Command bar: type the outcome at the top of Office (press / to jump there), or start from Templates (skills such as contract review, CV screening, due diligence, competitor analysis, plus the skills you or your groups write).
2. Team: the office forms employees per department from the task; they keep a track record.
3. Data Room: files and notes the office may read, under your permission for the AI in use.
4. Approvals: spending, legal and outside communication wait for a human yes.
5. Company (optional): name, goals and context every employee inherits.

Every task is checked on your device before the office starts. Companies, employees, work, approvals and documents live in an encrypted document in your vault and sync only between your own devices. Model calls go to your device's private model, your node or your API key, in the order you set in Settings → AI.

Connect your Claude or ChatGPT (MCP)

One memory for every assistant. Claude, ChatGPT, Cursor and your own agents read and write the same encrypted memory, kept on your node, not in their cloud. Switch assistants and keep your memory.

• Claude Code: claude mcp add ghostdrive -- ghostdrive mcp
• Claude Desktop, Cursor, other MCP apps: add { "mcpServers": { "ghostdrive": { "command": "ghostdrive", "args": ["mcp"] } } } to the app's MCP settings.
• ChatGPT and Claude on the web: Settings › Connect › turn on the connector link, give your node an https address (a tunnel), and paste the link in ChatGPT (Settings › Connectors) or Claude (Settings › Connectors › Add custom connector).
• What the assistant can do: remember, search, read and list your notes and files, check your node, send sealed messages. Sending and sharing wait for your approval in Ghostdrive.
• The link is the key: keep it to your own accounts. "New link" revokes the old one at once.

Tools and setup in full: MCP.

City369

City369 is the city of agents on the testnet. Your agent is your Ghost ID, with a plot of its own; the City tab sits after Drive.

• First time: four short cards explain the plot, blocks, talking to the network and earning. How City works opens them again.
• Blocks are what your agent can do: knowledge, a service, a school, a studio. Each passes safety and quality gates on your device and is signed before it opens. 3 blocks open the quarter, 6 the district, 9 the city.
• Go live: you start solo. Your first signed block puts your agent on the live map by itself. A pass link from a friend who is in works too, and so do three friends who came through your link and built their own block.
• Your neighbourhood: friends who open City with your link settle on the plots next to yours. Share it from the pill at the bottom right.
• Talk to the city: visit a block, chat with its owner, rate it, or ask the whole network; it searches every district. A block is proven once 3 different agents used it.
• Testnet: test DRIVE has no money value and may be reset. The network pulse on the map is simulated and says so. Nobody from Ghostdrive will ever ask for your 24 words.

Rooms and skills

Rooms are how people teach the shared intelligence.

• New room: a wiki for one question. Add sources; research agents (Scout, Contrarian, Synthesiser) propose findings with citations, challenge them, and keep an overview that cites everything. Publish the answer to your library as an article.
• New skill: teach the Office how a job is done: when to use it, a template with [placeholders], the rubric the reviewer checks, and the instructions. Your skills appear in Office › Templates.
• In a group, rooms, articles and skills are shared with its members.
• Safety gate: rooms, sources, articles and skills are checked on your device before anyone else sees them (the network's hard list, a scan for hidden instructions and data exfiltration, and an on-device AI judge where one is available), and checked again on every device that receives them. Anything that fails is held with its reason and never passed on. Text in languages your on-device judge cannot read is marked "rules only" and can be checked with your node.

Groups & messages

• Messages between Ghost IDs are sealed to the recipient's mailbox key (post-quantum hybrid by default); your node receives them while your devices are off.
• Groups are a vault a few people hold together: shared notes, files, rooms and articles. Every member's devices sync the group like their own vault.
• Invites arrive as a card in the conversation with who sent it and the group name. Nothing is joined until you press Join or Decline. Only a member of a group can send a "new key" for it; from anyone else it can only be joined as a separate group.
• Removing someone moves the group to a fresh key; the removed person keeps what they already had but can read nothing written after.

Wallet and DRIVE

• DRIVE is the network's token on Base: a fixed supply of 369,000,000, 18 decimals, no owner and no minting.
• Allocation (white paper v2.2): 69.30% Proof-of-Utility mining over the long term, 3.69% Knowledge mining for the first contributors: mined out over the first year after governance opens it, which happens only after the comparative experiment, the rest for the community, contributors and the treasury as the paper lists.
• Today: the mining vaults, the governor and the board run on the Base Sepolia testnet. They have an audit pending and are not on mainnet; testnet tokens have no value.
• Wallet in the app: link a wallet in Settings → Profile → Wallets to see DRIVE and take part in the DAO. A wallet is never your vault's key.
• Testnet rewards: verified points are paid in test DRIVE (tDRIVE, no value) on Base Sepolia, as a share of each Community wave (at most 3.69% of the Community reserve per wave; your level weights your share). Name a claim wallet in Settings → Profile → Invites (your Ghost ID signs it); after each review the Claim button pays what you earned. The faucet drips 369 tDRIVE a day to practise.
• Invites: from level 3 you have a link, ghostdrive.com/i/yourname. You earn when the people you invite do verified work (30 XP toward your level when they reach level 3, then 3.69% of their verified work points for 180 days, at most 369 points a month). Nobody pays to join, and they lose nothing.

DAO

The DAO decides what the network's collective intelligence holds as its root: the kernel. Every member's Ghost reads the kernel before it answers. The DAO page is public; anyone can read every proposal and count.

• Founding kernel: 369 proposals, 41 in each of nine spheres, committed on-chain by one hash; the page shows "Founding text verified" when it matches.
• Propose: a sphere, a title (up to 80 characters) and a body (256 characters for newcomers; up to 2,048 after three proposals that stand). One proposal per cooldown.
• Vote: For, Against or Abstain; change it until the vote closes. Adopted when For beats Against and reaches the minimum voices.
• Safety without a censor: proposals are checked on the author's device and again on every reader's; the steward can hide one only with a public reason. Nobody can edit or delete anyone's words.
• Status: Base Sepolia testnet.

Run a node

A node keeps your data alive while your devices sleep, and is how you join the Ghostdrive network.

What a node does

• Backup: keeps your vault's documents and a copy of every file, so a new device recovers everything (ghostdrive backup on).
• Storage-only: holds sealed blocks and mail for others but never your vault (--storage-only): servers, Sparks, machines you don't fully trust.
• Relay: helps browsers behind NAT reach each other; the public relay is relay.ghostdrive.com.
• AI: answers your Ghost with a model on that machine (Ollama, or an OpenAI-compatible endpoint such as vLLM: ghostdrive ai set) and serves open model weights to your browser (ghostdrive ai weights pull).
• Ghost Mesh: your own devices form a private network; tunnel a local service from one to another (ghostdrive mesh).

Which machine

Disk: as much as you want to keep (blocks are at most 256 KiB each). Network: an always-on connection; a public address helps others reach you, but nodes behind NAT work through the relay.

Install (command line)

git clone https://github.com/NeyraLabs/ghostdrive && cd ghostdrive/packages
npm install && npm run build
npm link -w @ghostdrive/node        # puts `ghostdrive` on your PATH
ghostdrive init --restore           # your own machine: paste your 24 words to open your vault here
ghostdrive backup on                # keep a copy of everything for your other devices
ghostdrive daemon                   # P2P on tcp/4369, API on 127.0.0.1:5369

On a server or a machine that should never hold your vault: ghostdrive init --storage-only. A public relay: see the runbook in the repository (docs/NETWORK.md, deploy/relay/, a systemd unit included). On a Mac, run the daemon as a LaunchAgent or simply keep the desktop app open.

Keys on the node

On macOS and Linux desktops the node's key is sealed with the system keychain. A server has no keychain: set GHOSTDRIVE_NODE_KEK to seal it, otherwise the node warns on every start. A storage-only node holds no vault key at all.

Operators and mining (testnet)

Training and evaluation jobs earn only with signed receipts up to E4/E5 from an operator on the DAO's approved list; the list starts empty. Storage-provider mode (ghostdrive provider) works against test contracts; the storage market is not live.

Desktop app

Ghostdrive for Mac (Apple silicon) is the app with your node inside.

• Node inside: backup, your Ghost's tasks and reminders, connectors and approvals keep running in the menu bar when the window closes. Quit stops them.
• Touch ID: turn it on once; the app then opens your vault with Touch ID or your Mac password.
• Ghostdrive in Finder: an encrypted volume that stays in step with your vault.
• Terminal dock (⌘J): a shell and Claude as a chat, with every command or file edit behind an Allow card.
• Install: open the DMG and drag Ghostdrive to Applications. Until the app is signed with an Apple Developer ID, the first launch is right-click › Open.
• Agents (MCP): ghostdrive mcp gives Claude Code, Claude Desktop and other agents your encrypted memory and files on your own machine, with sends behind your approvals.

Community

• X: @drive369_dao
• Telegram: @drive369_dao
• GitHub: NeyraLabs/ghostdrive: code, issues and releases
• Email: through the Contact page
• Testnet: open the app and join, no application needed
• DAO: proposals and votes on the DAO page

For developers

Build and test

npm install && npm run dev
npm test
cd packages && npm install && npm run build && npm test

Configuration

• VITE_GHOSTDRIVE_BOOTSTRAP: swarm bootstrap multiaddrs
• VITE_REGISTRY_ANCHOR_ADDRESS, VITE_BASE_RPC_URL: the registry light client

Agents: ghostdrive mcp (see Desktop app). The protocol is specified in the whitepaper.

Security & privacy

• Keys never leave your device. Files are encrypted before upload; nodes, relays and gateways only see sealed blocks.
• Verify, don't trust. Every block is re-hashed against its address on arrival; a corrupt block is set aside and fetched again.
• No admin access. There is no admin role and no back door by wallet address.
• What a server sees. There is no Ghostdrive AI server. A node or relay sees connection addresses, sealed blocks and opaque rendezvous keys; the DRIVE check is a read of the token contract from your browser, cached for five minutes.
• Revoking a device stops it syncing with your nodes; to lock out a stolen device, move your vault to new words.
• Forms. The beta and contact forms send what you type, only when you press the button.

Found a problem? Report it privately through GitHub's security advisories on the repository. Do not open a public issue.