—Desktop · Install
Install the desktop app.
The website explains and distributes Axiom Agent. Deployment intake, approvals, guided operations, validation, and evidence workflows live in the installed application.
Use the live release manifest
01
What the current desktop build delivers
- Installed workspace — desktop navigation for releases, approvals, connectors, validation, audit evidence, and related operational views
- Desktop authentication — browser-approved pairing returns control to the installed application
- Repository workspace — select, clone, inspect, edit, branch, commit, push, and open pull requests with repository-scoped access
- Native shell — tray and notification integrations are available for supported application events
- Explicit connection state — unavailable APIs, missing credentials, and connector failures remain visible
- Persisted app state — the current build uses Tauri's file-backed app store; OS-keychain-backed secret persistence is not yet shipped
02
System requirements
- macOS — Apple Silicon or Intel build matching your Mac; the release currently targets macOS 12 or later
- Windows — Windows 10 or 11 on x64 with Microsoft Edge WebView2 available
- Linux — x64 desktop with WebKitGTK 4.1 and GTK 3 runtime dependencies; use AppImage, Debian, or RPM packaging as appropriate
- Network — HTTPS access to the configured Axiom API and any integrations you enable
- External accounts — identity-provider and connector accounts remain your organization's responsibility; permissions vary by connector
03
Install — macOS (Apple Silicon + Intel)
Download the matching DMG
Visit /download. Choose Apple Silicon or Intel. The enabled button points directly to the matching asset from the current desktop-v* release.
Verify the release if required
Each current release asset has a detached .asc signature. Import the public key linked in the release notes, then run gpg --verify installer.dmg.asc installer.dmg. Compare the SHA-256 digest with the value published by GitHub.
Open the DMG and install
Mount the disk image, drag Axiom Agent to /Applications, and eject the image.
Handle Gatekeeper according to the manifest
Do not assume the app is signed or notarized. If the download page reports an unsigned developer build, right-click the app, choose Open, and review the warning. Organizations that forbid unsigned software should not install that asset.
Complete desktop sign-in
Choose browser sign-in in the app. Your browser approves the pairing request and the installed application polls for the scoped desktop session. A browser redirect is part of desktop authentication, not a separate web product.
04
Install — Windows x64
Download MSI or EXE
The generic Windows download prefers the MSI when it is present in the live manifest. The release page also exposes the NSIS .exe.
Verify before running
Download the matching .asc signature and verify it with the release public key. Treat the installer as unsigned unless the download page reports a machine-attested Windows signature.
Review SmartScreen
Unsigned builds can trigger SmartScreen. Review the publisher state and your organization's policy before choosing More info → Run anyway.
Install and sign in
Complete the installer, launch Axiom Agent, and approve the desktop pairing flow in your browser.
05
Install — Linux x64
Choose a package
The generic Linux button prefers AppImage. The release page also provides .deb and .rpm assets when available.
Verify the detached signature
Import the release public key and verify the asset's .asc file before installation.
Install or run
chmod +x ./Axiom.Agent_*_amd64.AppImage ./Axiom.Agent_*_amd64.AppImage sudo dpkg -i Axiom.Agent_*_amd64.deb sudo rpm -i Axiom.Agent-*-1.x86_64.rpm
Sign in
Open Axiom Agent from the desktop menu or AppImage and approve the pairing flow in your browser.
06
Updates and release notes
Automatic update delivery is not configured in the current Tauri bundle. Check the download page for a newer verified tag and install it manually. Review the public Axiom Agent release notes before upgrading.
Trust questions
Is this a browser product?
No. The website provides product information, documentation, verified downloads, and an isolated sample-data sandbox. Operational workflows are delivered by the installed app.
Are current builds signed and notarized?
Only when the live release manifest has explicit signing attestations. Detached GPG signatures verify release origin but do not replace Apple notarization or Windows Authenticode.
Where is the desktop session stored?
The current implementation uses Tauri's file-backed app store. OS-keychain-backed persistence is pending, so use the app only on a trusted workstation and sign out or clear app data on shared machines.
Can the desktop app deploy?
The released path can dispatch the tenant-owned AWS ECS workflow after administrator approval and configured repository, environment, and deployment target checks.
Does it update automatically?
Not currently. Install newer verified releases manually.
What was verified here?
Release presence, asset names, GitHub SHA-256 digest, detached GPG signature, desktop TypeScript, sandbox tests, and the broader automated suite. Platform installation still requires testing on each target OS.
Still blocked?
Include the failed step and error. Never send a password, token, or cloud secret.