ANVELLA Admin

Paste the access token from anvella serve.

ANVELLA

We emailed a 6-digit code to . Enter it to finish signing in.

ANVELLA

Enter your PIN to unlock this session.

ANVELLA

Choose a 4-digit PIN. You will enter your access code once, and this PIN every time you sign back in on this or any device — a quick unlock, not a replacement for the code itself.

ANVELLA ENGINE
/ —
—
Work
Customers
Growth
System
This engine
—
— · $0.00
—
Quick guide

Talk or type in the box below the reactor — it answers, and anything you commit to lands on Tasks automatically.

The ring shows who's answering; click a card under Specialists on the dashboard to see what each one covers.

Add API keys under Settings — each one shows "no key saved" until it's actually set.

Full permissions are on. Anvella can send, publish, delete and change your data without asking you first. Spending money still asks. Change this

Home

Speak to Anvella

Say something. Anything you commit to lands on the task list automatically.
—
Thinking
Enter to send
Open tasks——
Completed——
Spend——
Uptime——
Goals——
Memory—
Vault—
Needs you now

The evidence
The business
Your week

    More on Home

    Earlier conversations

    Model—
    Let Anvella pick the model
    Anvella reads each prompt first and sends it to the model that suits that prompt — a quick question stays on the free local model, something hard escalates. The decision is made per message, not once for the whole conversation, so a long chat can move between models as the work changes. Off means every turn uses exactly what you picked below.
    Local free, this machine
    —

    Point it at another machine in Models → Where Ollama runs.

    Runs on your device, in this tab. Answers ordinary questions but can't browse, read email, or use any of Anvella's tools -- those need a real account. First use downloads the model once; after that it's cached in this browser.

    Quick thinking — Paid plan

    Fast, low-cost models for everyday turns the local model can't handle alone -- Anvella picks whichever is quickest without asking.

    Free trials stay on local models. See plans that unlock this →
    Deep thinking / coding — Paid plan

    Frontier strength -- the same class as GPT, Sonnet, Opus, and GLM -- reached only once the free tiers have genuinely struggled, and gated behind your approval. Anvella's smart routing picks whichever fits the moment; it never uses the heaviest model for a simple task.

    Free trials stay on local models. See plans that unlock this →
    Image / video —
    ComfyUI local · free

    Runs on this computer, so it costs nothing and nothing leaves the machine — but it has to actually be running, and it needs several GB of model files.

    Effort
    slower is deeper
    Engine starting…

    Quick actions

    Dashboard

    Loading the dashboard

    Specialists

    ROUTEstandby BRAIN— PROJECT— SKILLS— AUTONOMYidle MEDIA— LINKED— REVIEWER AGREEMENT—

    Tick what belongs on your home page. Drag, or use the arrow buttons, to reorder.

    And what sits around the reactor. Hiding a gauge does not turn anything off — it stops it taking up room.

    Add

    Open

    Done

    Workspaces

    Tasks and notes are per project. Memory marked global is not, and follows you across all of them.

    All projects

    ProjectOpenNotes

    Browse this computer

    Limited to the folders allowed in anvella.toml. Reading is free; opening files is gated.

    Contents

    —

    Where your assistant thinks

    This runs on your own hardware, not the machine hosting this console. Point it at your Ollama, or give it your own Anthropic key — whichever you have. Your key is encrypted with your login code, so it cannot be read without that code.

    —

    Or run it from your own machine

    If your Ollama is on a laptop or a machine behind a router, there is nothing to type above — it has no address this server could reach. Run this on that machine instead and it dials out to us, so nothing needs to be exposed or port-forwarded.

    anvella connector --server wss://… --code YOUR-ACCESS-CODE

    Your access code is the one you signed in with. Leave it running; stop it with Ctrl-C and your turns go back to being answered here.

    Already signed in to Claude Code, Codex or the Gemini CLI on that machine? Add --claude-cli, --codex or --gemini-cli and your turns can use your own subscription, under its own limits. The CLI runs on your machine and only its reply comes back — your login never leaves it.

    Or use your subscription

    Sign in to the provider's own CLI once on this machine and point one rung at it instead of an API key. It bills your existing subscription, under its existing limits.

    Not on the Free plan — Free stays local-only by design.

    Claude Code accepts only sonnet, opus, claude-sonnet-5-5 or claude-opus-5-5; sonnet and opus mean Sonnet 5.5 and Opus 5.5, and blank is Sonnet 5.5. Codex and Gemini take their own model name, or blank for their default.

    —

    Personal token

    This is what you sign in with, and what your secrets above are encrypted under — changing it re-encrypts everything in place, right now, so nothing is ever unreadable in between.

    —

    My data

    Export everything this account holds, or remove it. Deleting is immediate and cannot be undone — typing DELETE below is the only confirmation you get, because there is no undo to fall back on after.

    Canvas & calendars

    Read-only: this only ever reads your schedule, never posts or submits anything on your behalf.

    —

    What's due

    Link Canvas or a calendar above to see what's coming up here, grouped by course.

    Where Ollama runs

    Defaults to this machine. Any reachable Ollama works: a bigger PC on your network via Tailscale, or a rented GPU box. Takes effect after a restart.

    Pulls whichever models Settings → Brain names, skipping any already on disk. It acts on whatever the address above points at, not necessarily this machine.

    Free local models

    Tool reliability, whether a model actually does what you ask rather than saying it did, matters more here than speed. No public leaderboard reports it, so these figures are measured on this machine.

    Train the brain while idle Off — nothing runs while you are away.
    ★ ModelSizeRequires LicenceToolsNotes Arena Get
    Download pulls through Ollama on whichever machine Models → Where Ollama runs points at — this one by default. Sizes are the real on-disk figures Ollama reports for anything already pulled, and the catalogue's own estimate for anything not.

    Audit trail

    WhenEventDetail

    Goals

    The autonomous loop steers by these. With none set it has nothing to notice drifting. They are markdown checkboxes in your vault, so editing them in Obsidian works too.

    ProjectGoalState
    Today —

    What it always knows about your business

    Loaded into every reply, not just when something matches. This is what stops a small local model writing like it has never heard of you. Keep it short — it is paid for on every turn.

    Exactly what the model sees
    
            

    What it knows about you

    Shared across every project, and stored as plain bullets in your vault.

    Import from another assistant

    You see every fact it extracts before anything is written. Nothing reaches memory without your approval.

    Found — untick anything you do not want kept
    Fact
    Canonical knowledge graph
    Nothing to draw yet.
    Click a node to see what it connects to. Drag to move, scroll to zoom.

    Background

    Read at the start of every conversation. It is an ordinary note in your vault, —, editable here or in Obsidian. Only the bullet points are read.

    Conversation history

    Written into your vault as it happens. Anvella searches this itself, so you can just ask what you discussed last week.

    —

    Skills

    Every tool here is offered to the model on every turn, so the list is a latency budget as much as a capability list.

    SkillOfferedWhat it does

    Practices

    Looked up only when a question asks for one, so none of this sits in the prompt. Your own notes go in the vault and win over the shipped ones.

    Browser and desktop control

    Anvella drives a browser of its own, never your everyday one, and only sites you have allowed. Nothing downloads unless you press a button.

    
          

    Use the AI subscriptions on this device

    Each one works only after you sign in through the provider's own CLI. Nothing here copies browser cookies or turns a web session into an unofficial API. Run this on the device that owns the subscriptions:

    anvella connector --server wss://your-engine.example --code YOUR-CODE --claude-cli --codex --gemini-cli

    Checking this door…

    Only enable CLIs you installed and authenticated yourself. API keys remain a separate option; they are not required for these official local CLI bridges.

    The free stack

    These are gigabytes each, so nothing downloads on its own. Licence is a shipping decision: several well-known models are not free to use in a product you sell, and those are flagged.

    JobModelRuns onSize LicenceInstall

    Access codes

    Everyone who can reach this console needs a code. Each one gets its own vault, journal, tasks, memory, spend cap and assistant — nothing is shared. A code is shown once, when it is issued, because only its hash is kept here.

    Today's routing

    Every turn by tier, and how many times a free tier's quota ran dry today and the turn fell back.

    Loading today's routing

    Customer-hosted connectors

    Accounts that have ever run anvella connector against this server — whether they're online right now, and what they last reported having installed.

    accountstatuslast seenmodelshardware
    None yet.

    Who has one

    accountplanstatusspend last activitycompute
    None yet.

    Customize — pick one above

    Reissue is for "I lost my code": it mints a new one and emails it if an address is on file. Their old code stops working and any keys they saved under it are cleared -- tell them first.

    —

    Pipeline

    Stages are a fixed ladder, not free text: a status field becomes seventeen spellings of "waiting on them" inside a month. Empty stages are shown on purpose, because a pipeline that hides them looks healthy right up until nothing has been quoted.

    Fill in from what you already have

    Upload a spreadsheet (.xlsx or .csv), drop in a screenshot or a photo of a business card, paste a link to a shared sheet or your website, or read your mailbox. Contacts, finances, social accounts and business details are found and shown to you first.

    Contacts

    Export CSV
    NameCompanyContact StageValue

    Contact

    The timeline is append-only. Correcting it means adding to it — a history you can quietly rewrite is not a history.

    Import contacts

    Preview before you import. Columns this does not recognize are kept on the contact rather than dropped.

    Revenue

    ClientEmailNetPayments

    Costs

    Every category shows even at zero, so nothing recorded silently vanishes off the summary.
    —
    employee
    —
    product
    —
    shipping
    —
    other
    LabelCategoryAmount

    Export

    Every number on the Summary sheet is a live formula. State tax covers four verified states; anywhere else shows as unsupported rather than a guessed number. An ESTIMATE, never tax-filing software.

    Download workbook

    Draft a post

    Written here, decided by a person, published by a connected scheduler — never by this form. See Connectors for publishing setup.

    Draft from a prompt

    One caption, into the same queue below, waiting on the same approval step.

    Queue

    PlatformHook / captionState

    Readiness

    —
    WhenFromToWhy

    Checklist

    Only connectors this company actually configured — one nobody linked is not homework, it is not on this list.
    ConnectorStatusDetail

    Inquiries

    Every request for service, who owns it, and when it is due. Record one a person took by phone or at the counter; the rest arrive on their own.

    WhoRequestStateOwnerDue
    No open inquiries.
    Inquiry

    Contact history

      Intake policy

      The rules the desk applies to a new inquiry -- hours, services, who takes what. Saved with the revision you had open, so two people editing at once cannot silently overwrite each other.

        Opening hours, local time. Blank means closed that day; two spans as 09:00-12:00, 13:00-17:00.

        Find a company

        Walks the company's own site for facts — an email, a phone number, hours — each with where it was seen. Only ever reads; never clicks, submits or signs in.

        Escalated

        A reply the classifier was not confident enough to route on its own. Resolving means a person looked at it — the classification history that explains why it was raised stays, it is never edited away.
        ContactStageConfidenceWhy Updated

        Push notifications

        Reaches whatever phone or desktop is subscribed to the configured ntfy topic. See Connectors to set it up.

        Connected services

        Every connector is read-only, so nothing here can move money. Keys stay on this machine and are never shown again once saved.

        GitHub Actions

        WorkflowStateSchedule

        Recent runs

        NameOutcomeDurationBranch EventWhen

        Ad campaigns

        Nothing is published from here. "Draft copy with Anvella" writes a first pass into the campaign's copy field and stops.

        Effort

        More effort is slower. This is not a free quality slider — it moves the model that answers and how much context it prefills, and both are measured latency.

        Cost

        —
        spent this month
        —
        monthly cap
        —
        paid calls, ever
        —
        saved by caching
        —
        Claude

        Local models are free and answer everything by default. A paid provider is reached only on purpose — asked for by name, local down, or the router escalating on real evidence — and never past the cap.

        Spend by day (last 14 days)

        Spend by model, this month

        ModelCallsOutput tokensSpent
        Nothing spent yet this month.

        Every model this router can reach

        ModelIn $/MtokOut $/MtokContext
        A web assistant is quicker on ordinary prose and costs no tokens, but it spends your account rather than your CPU, it breaks when a provider changes their page, and automating those interfaces is restricted by their terms. Easy questions stay local either way — driving a browser to answer "what time is it" is slower than the model already loaded.
        A tighter ceiling *within* the monthly cap above, not instead of it — for someone who wants to keep themselves from burning a month's credit in the first week. Blank means no weekly limit; the monthly cap still applies either way. This machine's own default — each customer's own code can set a tighter one on the Codes tab.

        Usage across your accounts

        Your own spend has no cap — this is cumulative, by provider, plus what each customer account has used this month.

        By customer, this month

        AccountCompanySpent
        No customer accounts yet.

        Website uptime

        Checked every few minutes. A site going down interrupts you; coming back up is good news that waits for whenever you next look.

        SiteStatusLast checked
        Not watching anything yet.

        Providers & routing

        A rung is reached only once the one below it has demonstrably struggled. The reason for the last escalation is on the ladder below.

        Which stage answered last
        Local→ Cheap→ Sonnet→ Opus
        What each provider has learned — preferences, skills and outcomes it remembers between turns, so the cheap tier gets smarter through memory rather than raw capability.
        A machine-wide kill switch, distinct from the cap above: the cap says "spend no more"; this says "spend nothing, ever" — the setting a free trial needs so a quietly-enabled key never gets called.
        Escalation ceiling
        A selection, not a fallback pair, at each rung — whichever this names is the only one that stage reaches. Configure below whichever ones you have not decided on yet; only the one picked here per rung is ever called automatically.
        — · Get a key ↗
        — · both a token and account id are needed · Get a token ↗
        — · Get a key ↗
        — · reaches Qwen3.8-27B, competitive with Sonnet/Opus on coding at roughly a tenth of Sonnet's price · Get a key ↗
        — · one-time free grant, then paid · Get a key ↗
        — · Get a key ↗
        — · Get a key ↗
        Frontier switch (live, no restart)
        — · Get a key ↗

        Email alerts

        A customer account is warned at 80% and 90% of its own monthly cap, but only if it has an email on file in the Codes tab. You are emailed whatever the self-check or a routine flags as urgent.

        For Gmail: Google Account → Security → 2-Step Verification → App passwords — a 16-character password scoped to just this, not your real Gmail password. Any other SMTP provider's own credentials work the same way. Stored in this machine's own settings file, same as everything else on this page — not the encrypted-per-account store the Codes tab secrets use.

        no SMTP configured

        Anvella is an AI agent and can make mistakes. Granting this lets it act on your behalf — actions may be irreversible, and you remain responsible for them. Terms.

        Wake word

        Two syllables or more — a short phrase sounds like too much ordinary speech and fires constantly.

        Anvella is an AI agent and can make mistakes. Granting this lets it act on your behalf — actions may be irreversible, and you remain responsible for them. Terms.

        Appearance

        Changes preview instantly; Save keeps them.

        Account & access

        Only a hash of the token is stored, so it can never be shown to you again after it is issued — including by this console.
        Signs out every device, including this one.
        Creates a new random token and shows it once — copy it immediately.
        Shorter and easier to type, but far easier to guess than the random default — worth it once your PIN is set, since routine sign-in then rests on the PIN, not this.

        Your New Console Token

        Copy this now — it will not be shown again.

        Email & calendar

        History is a separate switch from email on purpose — "read my inbox" and "read everywhere I have been" are not the same permission.
        No API key and no Google Cloud project. You sign into a browser profile once (anvella browse signin) and Anvella reads what you can see. Revoking access is signing out.

        Anvella is an AI agent and can make mistakes. Granting this lets it act on your behalf — actions may be irreversible, and you remain responsible for them. Terms.

        Desktop control

        Empty means it can drive nothing — an application only becomes reachable once you name it here. Clicking commits to a real action; typing is reversible. Blank caps mean it can run for as long as it needs to, unsupervised — set a number instead if you want a leash on it.

        Anvella is an AI agent and can make mistakes. Granting this lets it act on your behalf — actions may be irreversible, and you remain responsible for them. Terms.

        Improvement loop

        Fixes one real failure at a time on its own branch, and keeps the change only if the suite, the linter and the type checker all pass. It never pushes, merges or touches main by itself: a green branch shows up in Approvals and you decide.
        The full-gate requirement and the own-branch-only, never-main rule above apply either way — this only decides whether a green branch waits for your click. Turning it on emails [smtp] owner_email (set that up under Settings → Email alerts) every time it pushes on its own, with what changed and the exact commands to review or undo it — the branch itself, on git, is the real backup, never deleted by this.

        Anvella is an AI agent and can make mistakes. Granting this lets it act on your behalf — actions may be irreversible, and you remain responsible for them. Terms.

        Workflows

        Off until you turn one on. Nothing here runs, spends or sends just because it is listed.

        Routines

        A prompt that runs on its own, on a schedule. Local models cost nothing per run, so a question asked every morning is free. New routines start paused until you turn them on.

        Scheduled

        NameWhenNext runRunsLast

        Work

        Every background job, with what it attempted and what it actually verified. Attempted means it ran; verified means the result was checked on the page. Unknown means something irreversible fired and the answer was lost — those need you.

        Recent

        StateGoalAttemptsDetail
        
              

        Permissions

        How much Anvella may do before asking you first. Spending money always asks, at every level.

        Anvella is an AI agent and can make mistakes. Granting this lets it act on your behalf — actions may be irreversible, and you remain responsible for them. Terms.

        Waiting for you

        Anything that would send, change, delete or spend stops here first. Approving one thing never approves the next.

        Premium model requests

        Claude Sonnet or Opus wants to answer instead of a free tier. Nothing paid runs until you say so; denying just means the free tier's answer stands.

        Model recommendations

        Checked against a hand-maintained catalog, not the internet — nothing here refreshes on its own; see "Check for updates". Approving one only tells you what to change in Settings — nothing here ever flips a dropdown for you.

        Standing permissions

        Each grant is named, revocable, and bounded by an expiry and a use count. Nothing here was created by clicking Approve on a one-off.
        NameScopeUsedExpires
        Terms of Service Privacy Policy

        Which sites may Anvella use?

        Allowing something lets Anvella open it. It does not approve sending, spending or deleting — those still stop and ask.

        Turn on browser control?

        Anvella is an AI agent and can make mistakes. Granting this lets it act on your behalf — actions may be irreversible, and you remain responsible for them. Terms.

        Turn on full permissions?

        Warning: Anvella will send, publish, delete and change your data without asking first. Spending money still always requires your approval, and scheduled routines never run with full permissions. Anvella is an AI agent and can make mistakes; its actions can be irreversible. By continuing you accept full responsibility for everything Anvella does while this mode is on, and agree that Anvella and its operator are not liable for any resulting loss or damage. See Terms.

        —

        Tools it can reach

        This month's usage

        By tier

        You have something typed that is not saved

        Leaving this page clears it. Nothing has been sent anywhere yet.

          Delete my data

          This permanently removes your memory, history, and stored secrets from this installation. It does not cancel a plan or refund anything — speak to whoever issued your access code for that. Type DELETE to confirm.