Local execution, zero ports
Files, shell, search, web - the bridge runs on your box and connects outbound only. Your code never leaves the loopback.
A single Python client that runs code, reads files, and drives PentestGPT/OpenClaw locally - every tool call lives on a branch you can compare, replay, or merge. No ports exposed.
Outbound-only WebSocket. Approval-first execution. Pro plan.
Local code execution where it belongs - anchored to the branch that asked for it, with a paper trail you can branch from.
Files, shell, search, web - the bridge runs on your box and connects outbound only. Your code never leaves the loopback.
Every approval and result is anchored to the branch that asked for it. Rerun with different inputs by branching, not by editing.
Write/exec tools wait for an explicit allow. First-writer-wins so a stale tab can't override a decision you already made.
Code, PentestGPT, OpenClaw - all hosted by the same gptree-graft binary. Switch with --runtime, no extra installs.
The agent calls a tool. You approve. The bridge runs it locally. The result lands inline - and any future branch from this point inherits the grafted state.
resources/js and group them by file.bridge.fs.grep? Graft is gated on the agents plan feature. Free trial available.
In Settings → GPTree Graft, create a token. GPTree stores only its hash.
One pip install, one command to start. The client connects outbound - no ports exposed.
Most local-agent stacks bury tool calls in a flat log. GPTree puts every approval, every command, every output on the conversation tree - so you can branch from a failed run, rerun with one variable changed, and merge the version that worked.
The first branchable local agent runtime.
Sign up for GPTree, upgrade to Pro, and run your first local tool call in under five minutes.