> ## Documentation Index
> Fetch the complete documentation index at: https://hub.hcompany.ai/llms.txt
> Use this file to discover all available pages before exploring further.

> ## Agent Instructions
> H Platform has three products: the Agents API (managed computer-use agents, base URL https://agp.eu.hcompany.ai/api/v2 or https://agp.hcompany.ai/api/v2 for the US), the Models API (OpenAI-compatible Holo vision-language models at https://api.hcompany.ai/v1), and HoloTab (a free no-code Chrome extension that runs Holo in the user's browser, with recordable routines and schedules). The `holo` CLI (`pip install "hai-agents[cli]"`) runs Agents API agents from a terminal, drives the user's own desktop with `-a h/holo-desktop`, and serves coding agents through `holo mcp`.
> Authenticate with a bearer API key from the HAI_API_KEY environment variable. SDKs: `pip install hai-agents` (Python, `from hai_agents import Client`) and `npm install hai-agents` (TypeScript, `import { HaiAgentsClient } from "hai-agents"`). CLI: `holo`.
> Agents do work in a browser or on a desktop; describe the task as an imperative instruction. To run a task quickly, prefer the pre-built agent `h/web-surfer-flash`. Read results from the session's `latest_answer` after it reaches a terminal status.
> Sessions are the unit of work; wait for a terminal status (completed, failed, timed_out, interrupted) before reading the answer. Use webhooks or the `changes` long-poll endpoint to follow progress.

# Desktop security and privacy

> What holo sends to H Company when an agent drives your desktop, what stays on your machine, and how to prepare a sensitive run.

An agent that drives this machine, such as `h/holo-desktop`, uses your real desktop. It sees visible windows, clicks, types, runs shell commands, and reads and writes files. What leaves your machine depends on [where the agent loop and the model run](https://hub.hcompany.ai/agents-api/cli.md#where-it-runs).

## What H Company receives

| Mode | Sent to H | Not uploaded |
| - | - | - |
| Agent loop in H's cloud (default) | The task, your [`~/.holo` files](https://hub.hcompany.ai/agents-api/cli#customize-every-run), and the session's steps, screenshots, and tool results. The session is kept like any other, with a [live view](https://hub.hcompany.ai/agents-api/observe-and-steer.md). | Files the agent does not open, and local logs |
| `--local`, hosted model | The agent lookup, and each model request: task, instructions, action history, screenshots | The session, tool results the model never sees, and local logs |
| `--local`, your model server on this machine | The agent lookup only. Your H API key never goes to your server | Everything else |
| `--local`, your model server elsewhere | The agent lookup only. That server gets the model requests | Everything else |

Cloud agents such as `h/web-surfer-flash` drive a browser on H's infrastructure in every mode, so they cannot use your own model server.

The Models API keeps no prompts or screenshots by default, only request metadata (time, model, token counts). H is SOC 2 and ISO 27001 certified and runs its own models, so nothing goes to a third-party model provider.

## What the agent can see

Anything on screen can end up in a screenshot: other apps and tabs, documents, chats, account names, file paths, and secrets. The terminal output and the runtime log under `~/.hai/agent-runtime/logs/` can contain the same things. They stay on your machine, but review them before you share them.

When a [coding agent](https://hub.hcompany.ai/agents-api/coding-agents.md#local-server) runs `holo`, the host decides when to call it and what task to send. The server asks the host to confirm with the user before an agent sends, deletes, pays, or changes settings, but the host still decides, so this is not a safety boundary. Check whether the host asks before tool calls, and whether its MCP config is global or per project. The data still goes where the mode above sends it.

## Before a sensitive run

1. Close unrelated windows, tabs, chats, and password managers.
2. Use `--local` with [your own model](https://hub.hcompany.ai/agents-api/cli.md#run-the-model-yourself) if the task must not reach H.
3. Use a separate browser profile for web apps, away from your personal cookies.
4. Keep the task narrow, so the agent opens fewer apps.
5. Rotate any credential that showed up in shared logs or screenshots.


This documentation is built and hosted on [Mintlify](https://mintlify.com), a developer documentation platform.