android / your pod, in your pocket
Mazemaker on Android.
Your pod, in your pocket.
Your agents' memory doesn't live in our cloud — it lives on your machine, in your pod. The Android app is the thin client that reaches it: recall, dream, think, graph, and the full engine console, on your phone. And in 1.4 it goes further than anything else on Android: a real Linux agent runs on the phone itself — no root, no cloud — plugged straight into your memory.
A real Linux agent — on your unrooted phone
This is the part nobody else ships. Mazemaker boots a genuine Alpine Linux VM on a stock, unrooted Android phone — no root, no custom recovery, no cloud — and runs a full Hermes agent inside it. Chat with it entirely on-device. And when your pod is in reach, that on-phone agent plugs straight into your mazemaker memory: it recalls and remembers against your whole graph, through the encrypted gateway, with no key and no address baked into the app.
- Native, not a webview. A real Linux VM — hardware-accelerated (pKVM/AVF) where the silicon allows, emulated elsewhere. The agent runs its own tools and its own Python, on the phone.
- No root, no compromise. Stock Android 8+. Nothing to unlock, nothing to void, nothing to trust but your own device.
- Wired to your memory. The on-device Hermes reaches your pod over the same token + TLS + AES gateway the app pairs with — your whole memory graph, in your pocket, from an agent that lives on the phone.
- Nothing baked in. The on-device pod mints its own access key at first boot; you paste it once. No secret ships in the download.
What's on the phone
Not a cut-down companion — the operating surface of your pod, rebuilt for a thumb. Fourteen screens over the pod's own wire contract:
- Recall — semantic search over your whole memory graph, with the offline cache so recent memories are there even without the pod on the network.
- Dream — kick off and watch consolidation (NREM / REM / Insight); get a notification when a cycle completes.
- Think — spreading-activation traversal from any memory, depth-controlled.
- Graph — the knowledge graph overview and its heaviest edges.
- Engine console — stats, quota, diagnose, prune (with a dry-run), supersedes log, AFE facts.
- Timeline & Remember — browse chronologically, add a memory from anywhere.
- Hermes — on the phone. A full Hermes agent runs in a real Linux VM on the device, answering on loopback. Toggle it on and chat entirely on-device; wire it to your own OpenRouter key. When your mazemaker pod is reachable it gains your whole memory — recall and remember, through the same encrypted gateway, no address typed.
How it stays yours
- Zero baked-in addresses. The app assumes nothing about where your pod is — you supply the host, it talks there and nowhere else. Verified: the source ships with no hardcoded IP anywhere.
- Encrypted gateway, one QR scan. Pair to your pod's secure gateway by scanning a QR — the app pins the gateway's certificate on first touch, then every request rides a TLS + token + AES envelope. Or run it plain on your LAN. mDNS finds the pod for you; no address to type.
- Reach it from anywhere — nothing opened. Off your LAN, the app finds your pod through your own circuit-relay: the pod dials out to it, so no inbound port is ever exposed on your machine. The relay is a blind pipe — it only forwards the already-sealed envelope, keyed by your gateway's fingerprint, and never holds a key that opens it. Home on Wi-Fi or out on mobile data: same app, same pod.
- Your pod is the only authority. The app dictates no timeouts and holds no keys it didn't generate on-device; a long-running recall or dream is bounded by your server config, never cut short by the client.
- Signed, on-device keys. Release-signed build; identity keys are generated on the phone and never leave it.
- No key ships in the app. The on-device pod mints its own access key at first boot; you paste it once in Settings. Nothing secret is baked into the download — verified, the release carries no key.
Requirements
| Android | 8.0 (API 26) or newer |
|---|---|
| A pod | Your own Mazemaker pod, reachable on your LAN |
| Tier | Pro or Enterprise (full dream, Postgres backend) |
| Install | Sideload the signed APK (enable "install unknown apps" for your browser) |
Get it
The download is gated to Pro in your dashboard — that's where your tier is known and the signed APK is served.