1 — API keys and third-party providers
Unmild Agent is Bring Your Own Key. We do not host a model, proxy your requests, or issue keys. You paste one or more base URLs and API keys under Settings → Configuration and click Test Connection.
%LOCALAPPDATA%\UnmildAgent\. Candidate probe is [base, base + "/v1"] via GET {base}/models.POST {base}/chat/completions with Authorization: Bearer <key>. Covers OpenAI, OpenRouter, AgentRouter and any compatible gateway.POST {base}/messages with x-api-key and anthropic-version: 2023-06-01.- You have a direct relationship with each provider. Their terms, pricing, rate limits and privacy policies apply to every request you send.
- UNMILD cannot see, revoke, rotate or refund provider usage. Effort maps to
max_tokens— Low 1024 / Medium 2048 / High 4096 / Ultra 8192 / Max 16384. You control cost. - Do not paste keys into screenshots, issue reports or shared transcripts. If a key leaks, rotate it with the provider immediately.
ureq + rustls. We do not log prompts, keys or file content.2 — Agent autonomy and task execution
The agent is autonomous within the folder you chose. It does not run in a cloud container — it runs as a background thread per project on your Windows device, calling tools as JSON and executing them locally until the model stops.
- Tools, sandboxed:
list_dir,read_file,write_file,delete_file,remember,run_command(PowerShell in the project dir),open_urlandscreenshot. Filesystem tools reject..and absolute paths outside the working folder. - Turn lifecycle: Model is called via blocking
ureq; tool results are fed back and the loop continues.AppState::tickdrains progress once per frame. Retries capped atMAX_SEND_RETRIES 12. Stop halts at the next boundary; the thread then idles. - Permissions — your gate: Ask first blocks the agent thread on an
Approverchannel until you allow/deny. Auto-edit permits writes without prompts. Full access permits writes and command execution. Choose per turn. - Parallelism & persistence: Multiple projects can run in parallel. The window is tray-persistent via
Shell_NotifyIcon; closing the window does not kill threads unless you quit. - Memory:
remembernotes (Smriti) are per-project, injected into the system prompt every turn and survive restarts. Images attached to a prompt are base64-encoded into the chat payload (capMAX_IMAGE 5 MiB).
You direct the goal; the agent chooses the steps. Review diffs, terminal output and status lines before the next Send — especially on Full access.
3 — User responsibility and permissions
You are responsible for what the agent does with your permission, in your folder, with your keys.
- Have the right to act. Use only folders, repos, APIs and data you own or are authorized to modify. Do not point the agent at system folders, other users’ profiles, or production without a backup.
- Keep backups. The agent can read, write and delete files and run PowerShell. Make commits, snapshots or copies before large refactors. UNMILD does not version your files.
- Approve with care. In Ask first, read the diff and command preview before allowing. In Auto-edit and Full access, you pre-authorize edits and execution — use them only in folders you can restore.
- Lawful and ethical use only. Do not use the agent to violate law, infringe IP, bypass access controls, generate harassment, or process sensitive personal data without a lawful basis. You are solely responsible for prompts, attached files and resulting code.
- Credentials hygiene. Scope keys per project, prefer short-lived keys where the provider supports them, and never commit keys to Git. The app offers no cloud vault.
git push it without reading, do not auto-approve it. Pause, inspect the transcript at work-{project}-{run}.jsonl, then continue.4 — Privacy and credential security
Privacy is local by design. See Privacy policy for the full flow; this section states your obligations.
projects.json, history-{id}.sqlite (FTS5 + WAL), work-{project}-{run}.jsonl and Smriti notes under %LOCALAPPDATA%\UnmildAgent\. No sync to UNMILD.fonts.googleapis.com otherwise system fonts.- Protect the device: enable Windows Update, BitLocker or device encryption, and an auto-lock. Anyone with your Windows profile can read
%LOCALAPPDATA%\UnmildAgent\. - Minimize context: attach only what the task needs. Redact secrets before attaching. Smriti should hold preferences, not passwords.
- Deletion is manual: remove the project in-app or delete
%LOCALAPPDATA%\UnmildAgent\for a full wipe. Uninstall alone may not purge that folder. - Third-party handling after send is governed by the provider. UNMILD cannot delete data once it reaches them.
5 — Limitations and legal protection
Unmild Agent is a paid native Windows app (MSIX via Microsoft Store, Store ID 9P3RXL6LD5F1) shipped as-is. We build it in Rust 2021 with egui — ~2,800 lines, careful sandboxing, rustls transport — but software that edits files and runs commands has inherent risk.
.. or absolute paths outside it. Non-streaming chat completions at present.- No warranty. To the fullest extent permitted by law, the app and site are provided “as is” and “as available” without warranties of any kind — express, implied or statutory — including merchantability, fitness for a particular purpose and non-infringement.
- Limitation of liability. UNMILD, its owners and contributors are not liable for indirect, incidental, special, consequential or punitive damages, or for loss of profits, data, goodwill or business, arising from use or inability to use the app/site — even if advised of the possibility. Aggregate liability is limited to the amount you paid for the app in the 12 months before the claim, or €50 if you paid nothing for the site.
- Indemnity. You agree to indemnify and hold harmless UNMILD from claims, damages and expenses arising from your content, credentials, provider use, or violation of law or these terms.
- Enforcement & changes. If any provision is held unenforceable, the remainder stays in effect. We may modify these terms by updating the Effective date; material changes will be noted on unmild.store and the Store listing. If you do not agree, stop using the app/site and, if eligible, request a Store refund per Microsoft Store policy.
[Privacy] or [Terms] via unmild.store or the support link on the Microsoft Store page. No cookies are set by this site; blocking fonts.googleapis.com falls back to system fonts.