Channels
iOS app with Home Screen widgets, native Mac app, web app, voice, email, Slack, Telegram, Microsoft Teams, and Discord, now an official channel with a setup wizard. Sent messages can be edited in place in Slack and Telegram. Every surface shares the same memory and identity.
Official Herald desktop apps for macOS, Windows, and Linux with native streaming voice. Gateway routes messages across Telegram, Discord, and Slack.
Execution
Build me a habit tracker gets you a working, interactive app in the conversation. Read this page uses the browser extension to read your open tabs and act on the page you are looking at. Call the dentist and reschedule places an actual phone call with its own voice.
Executes code, custom tools, and function calls locally or on self-hosted servers. Herald desktop apps add native streaming voice, but real-world browser and mobile workflows require custom tooling.
Hosting
Run on-device as a native Mac app, on Vellum's managed cloud, or self-host on your own VPS.
Run locally on desktop, self-host on a private server, or deploy via third-party community hosting like FlyHermes.
Integrations
Native agent skills plus 1-click integrations with 50+ services through managed OAuth, including native Calendly and Eventbrite. Your assistant acts in real services without you touching tokens or API keys.
Manual configuration required for every connector, key, and orchestration step you want to use.
Memory
Vellum builds a structured memory of your projects, people, and preferences automatically, across every surface. It sharpens with every conversation and correction, and there is nothing to configure: no files to curate, no engine to pick, no embedding provider to wire up.
Agent-curated flat memory files with no managed persistence. Long-term memory depends on what you wire up.
Modularity
Builds its own skills, learns your tone, and adapts based on what you reward and correct. Install new skills from a growing library, or just ask and it figures out a way.
Customization happens through code changes. The core agent loop itself is fixed.
Open Source
Open source under MIT license. Full codebase available on GitHub.
Open source under MIT license. Full codebase available on GitHub.
Pricing
Free Base plan with free credits to start. Paid plans from $30/mo (Mighty), $100 (Super), and $200 (Ultra) with pay-as-you-go credits, configurable compute and storage, and your assistant's own email and subdomain on higher tiers.
Free codebase, but you pay for infrastructure, model API usage, and ongoing maintenance to keep it running.
Privacy
Run locally on Mac, in Vellum Cloud, or self-host. Vellum never has access to your data on any deployment path.
Self-hostable, but your data passes through whatever model provider you wire up. Privacy depends on your stack.
Schedules
Built-in scheduling for daily briefings, weekly reports, and hourly checks that just run on a cadence.
No native scheduling. Bolt on cron or an external orchestrator.
Security
Credentials live in an isolated vault and never enter the model layer, so prompt injection can't exfiltrate your keys. Every sensitive action asks permission with a risk badge before it runs, and guardian approvals land in one inbox.
API keys flow directly into model context for tool calls, with no isolation between credentials and LLM input.
Setup
No terminal, no API keys, no daemon. Voice-first onboarding is the default: your first experience is speaking, not configuring. Free, no credit card, up in minutes.
Herald desktop apps install in minutes on Mac and PC. Full server deployments with custom gateways and third-party managed infrastructure (FlyHermes) still require developer setup.
Storage
Vellum Cloud: 3 GB RAM and 4 GB storage by default. Mac app runs on standard Mac hardware.
Self-hosted. Resource needs scale with model size and tool load. No official minimum specs published.
Trust
Every sensitive action asks first with a risk badge, guardian approvals land in one inbox, and you can export or delete your data at any time. The trust model is written down in the docs.
Security boundaries depend entirely on your self-hosted setup. Herald added signed webhooks and A2A protocols, but host isolation and credential protection remain your responsibility.