MoltenRock for law firms, accountants & agencies

AI help with client work. On your terms, on your Macs.

Keep mailbox passwords and API keys sealed on each Mac, let AI agents read and draft but never send, and decide exactly which agent sees which inbox. Every access is logged. No MoltenRock account and no MoltenRock cloud.

Download MoltenRock · FreeMac App Store

For small offices on Mac · Pro licences cover up to five Macs each

Activity · client inboxlocal only
  • Hermesclient mail · summarise a threadread
  • HermesMoltenMail · reply for reviewdraft saved
  • Claude CodeNotion · project notesread
  • unknown processmailbox passwordblocked

Illustration, example data: what the Activity log could show on a day like this.

The problem

Client work is exactly where you want help, and exactly where you can’t be careless.

  • Client email is sensitive
    Handing an AI tool your mailbox password usually means it can read, send and delete everything.
  • Passwords in the wrong places
    Staff try new AI tools with real passwords and keys pasted into settings and config files.
  • You need to know who looked
    When a client asks what touched their matter, “an AI tool, probably” isn’t an answer.

What changes

Agents that read and draft. People who decide.

  • Read and draft, never send
    Through MoltenMail and MoltenRock’s mailbox bridge, agents read mail and save drafts. They can never send, delete, move or mark anything.
  • Passwords stay sealed
    Mailbox passwords stay in the macOS Keychain or MoltenRock’s Secure-Enclave vault: agents get the mail, never the password. API keys go only to the agents you approve.
  • Every access recorded
    Which agent read which mailbox or used which key, and when, in the Activity log on that Mac.
  • Per Mac, per person
    Each Mac has its own vault and its own grants. One Pro licence covers up to five Macs.

In practice

What it looks like in your office

Examples of the everyday jobs people hand to an agent, with MoltenRock deciding what the agent can reach.

  • Law firms
    Summarise a long client thread and draft a reply for a lawyer to review. The agent reads only the mailboxes you grant, and never sends.
  • Accountants
    Pull a client’s Stripe invoices and payouts into a summary, and draft the email that goes with it. Stripe changes wait for approval.
  • Creative agencies
    Keep the team’s OpenAI and other API keys sealed instead of shared in chat; let agents read project status from Notion, Asana or ClickUp.

Want the model itself to stay private too? MoltenRock AI is coming: a privacy-first model that runs only on local models or end-to-end encrypted cloud models. Read more →

A day with it

Setting up an office

  1. 01
    Install on each Mac
    From the Mac App Store or as a notarized download. No account to create for anyone.
  2. 02
    Seal the credentials
    Each person moves their mailbox passwords and API keys into MoltenRock on their own Mac.
  3. 03
    Grant, per agent
    Decide which agent reads which mailbox, with a token per connection. Nothing else is shared.
  4. 04
    Review, not babysit
    Drafts wait in each person’s Drafts folder; the Activity log shows every access.

What you need

The apps for this

  • MoltenRock

    The vault for mailbox passwords and API keys, the per-agent grants and the Activity log.

    See MoltenRock →
  • MoltenMail

    Your existing inbox for your agent: read and draft only, never send, delete or move.

    See MoltenMail →
  • MoltenRock Connect

    Business tools such as Stripe, Notion, Airtable, Asana and Zendesk for your agent, with customer names tokenised.

    See MoltenRock Connect →

Questions

What people ask first

Is it GDPR compliant? Does it protect privilege?

We don’t make compliance claims for you; what matters is how you use it. Here is what MoltenRock does: credentials stay sealed on each Mac, agents can read and draft but never send, every access is logged locally, and there is no MoltenRock server in the path. What your agent sends to its own AI provider is governed by that provider’s terms, so choose that provider with your obligations in mind.

Can an agent send email on our behalf?

No. The mail access is read and draft only. A person reads each draft and presses send.

Where are our passwords stored?

In the macOS Keychain or MoltenRock’s Secure-Enclave vault on each Mac. An agent reading mail receives the mail, never the mailbox password.

Can we manage everyone from one place?

Not today: each Mac is set up on its own, and each person controls their own vault. Team-wide features are on our roadmap; see the enterprise page, or tell us what you need.

Does MoltenRock see our client data?

No. Email content, credentials and app usage are never sent to us. The only thing a Pro licence sends is a licence check: the licence key and a random device ID. The privacy policy lists exactly what is processed.

Help with the work. Not with your passwords.

Free for Mac. Pro licences cover up to five Macs each.

Download MoltenRock · FreeSetting up a whole team?

Not quite you?

MoltenRock for other kinds of work