Nokker
An assistant that acts for you and the whole family. Its name comes from a door knocker: it knocks before coming in. You talk to Nina, you decide on a Approval card.
How it works
Short answers to the questions people ask us, with the notes that go with them: this is how Nokker files what it knows.
Play the memory demoWhat is Nokker?
In short
An assistant that acts for you and the whole family: finding the right answer, filing papers, drafting an email, keeping the schedule, writing code. You talk to it normally, on the web or in Telegram. And before acting outside, it knocks: nothing leaves without your yes.
Under the hood
A Python core (nokker/) built on three pillars: dynamic context powered by CortHeXis (nokker/context/, nokker/memory/), a safety judge with deterministic invariants checked before any model (nokker/qa/), and multi-model with a tier chosen at every turn (nokker/route/, nokker/providers/). Every turn is bound to a tenant at the boundary (API, Telegram), never guessed.
Related notes: Nokker Nina Approval card The household
Nothing leaves without you: how does it work?
In short
Before sending something to someone, spending or deleting, Nokker shows you a card: what it will do, for whom, and what it changes. You approve or refuse. The most sensitive actions are confirmed on your device, with your face or your fingerprint. Reading, filing or drafting, it does without bothering you.
Under the hood
Every tool call is classified by effect: read, write, external send, spend, destructive. Deterministic invariants (nokker/qa/) decide before the model: external send and spend → card; destructive → strong card; mass send → refused. A strong card needs a WebAuthn assertion with user verification (device biometrics); a standard card also accepts a one-time code. An automatic reviewer may approve benign writes, never a strong, destructive, external-send or spend card. While the card waits, the action is not run.
Related notes: Approval card Sensitive actions What it does without asking Passkey
How does Nokker pay?
In short
Nokker has its own prepaid card, which you top up. It can never spend more than you put on it, and every payment waits for your face or your fingerprint. A payment agent, a separate service, is the one using it. Preview: agent payments are coming soon to the beta.
Under the hood
A payment agent separate from the core (payagent/): the core applies the household's budgets and rules and raises the card; it does not pay. The mandate is hashed then signed by your passkey (WebAuthn, user verification required); it sets the amount, the merchant and the deadline. The payment agent does not trust the core: it re-checks the device, the signature, the mandate hash and the deadline itself before paying. It pays with a dedicated virtual prepaid card, issued by a regulated institution, with a cap: the balance you put on it is the limit. The model never sees the card number. Flag off in the beta.
Related notes: Payment agent The agent's prepaid card Signed mandate Your bank card stays yours Budgets
What does Nokker remember, and how do I erase it?
In short
It keeps what matters as short notes, one fact per note, linked together, and rereads the ones that help at every message. At night it tidies up; in the morning it tells you what changed, and it can be undone. You can export everything about you and have your account erased, within 24 hours.
Under the hood
Notes live in Postgres with pgvector, scoped to a profile or the household (nokker/memory/). At every turn, the dynamic context (nokker/context/) recalls the useful notes. The nightly consolidation applies, reports in the morning and can be undone. Account export is limited to one request per 24 h; erasure goes through a strong card, then the purge follows within 24 h.
Related notes: Memory as notes The nightly tidy-up Yours or the home's See and erase
Is Nokker's memory CortHeXis?
In short
Yes. Nokker's memory runs on CortHeXis, our open-source memory engine: short, linked notes, found again at every message, in any language. CortHeXis also rereads the whole memory and flags what is wrong, like a broken link or a fact corrected in one place and not the other.
Under the hood
CortHeXis (Apache 2.0 licence, self-hostable, no account) keeps a folder of short markdown notes, one fact each. Recall at every message, sub-agents included; hybrid (meaning and keywords), cross-lingual search, every result carrying its age. A review rereads the whole memory and proposes repairs with a diff, written only once approved. The index is rebuilt from the notes. In Nokker, it is the “dynamic context” pillar (nokker/context/, nokker/memory/).
Related notes: CortHeXis Memory as notes Open source
Where is my data?
In short
During the beta, the app is hosted in France, by OVHcloud: your account, your conversations, your connectors and the AI model computation. Your conversations only help improve our models if you choose so. With Lokkal, your memory stays on your machine.
Under the hood
The beta runs on OVHcloud managed Kubernetes, in France. Each account is an isolated tenant in Postgres: a tenant column on content tables, row-level security enabled and forced (nokker/store/migrations/), the tenant set at the boundary; outside a tenant context, a read fails instead of serving someone else's data. Training consent is a separate choice, unticked by default; connector content is excluded.
Related notes: Data in Europe Your choice, not ours Lokkal
What does it work with?
In short
With what you already have: your usual mailbox, your calendar, Telegram on your phone, your photos and documents. With Lokkal, also your smart home and the AI models you choose.
Under the hood
Mail over IMAP/SMTP with an app password, presets for the large providers and a custom setting (nokker/connectors/). Calendar over CalDAV (read and write) or iCal (read). Telegram through a bot, with on-device approval. Images read by a vision model. Home automation (Home Assistant) only on Lokkal: the cloud beta opens no gateway into your home.
Related notes: What you already have Nina Lokkal
Is it for the whole family?
In short
Yes: one Nokker for the home, up to six people, each with their own account and private space. A photo of the schedule becomes the family calendar. Kids' profiles open household by household during the beta.
Under the hood
A household groups up to six accounts; each one stays an isolated tenant, with its private memory, and shares a household memory (nokker/household/). Minor profiles open by allowlist during the beta; a payment rule refuses any spending by a minor that the payer has not allowed. Family calendar: photo or PDF read, card, then written over CalDAV or as an .ics file.
Related notes: The household Kids' profiles Family calendar
What is Lokkal?
In short
Nokker on your computer. One command installs it (Docker needed); your memory stays at home, the work runs in a sandbox, and you choose which AI model it talks to. It is an early release, with signed installers.
Under the hood
A Docker Compose: the core and the web in containers, the state in a single folder at home. Code commands run in a Docker sandbox, with isolated worktrees. The local API only listens on the machine and requires a local token. Installers, images and binaries are signed (Sigstore signatures published alongside). The model is your choice: yours, or the one we offer.
Related notes: Lokkal See and erase Open source
Is Nokker open source?
In short
Yes. Nokker's code is published under the Apache 2.0 licence on GitHub, and so is its memory, CortHeXis. You can read what it does and run it yourself.
Under the hood
Core under the Apache 2.0 licence; part of the code derives from an MIT-licensed open-source agent project, attribution kept in NOTICE. CortHeXis, the memory, is Apache 2.0 too. The brand, name and logo are not covered by the licence.
Related notes: Open source CortHeXis
How much does it cost?
In short
One subscription for the household, instead of one per person and per tool: the whole home shares the same Nokker. The beta is free for 30 days.
Under the hood
Household tiers live in nokker/billing/: the household follows the active tier of the person who pays, and the quota is shared by the whole home.
Related notes: One subscription for the home The household
How do I join the beta?
In short
Fill in the form on nokker.ai/beta/. We read the answers and write to each person selected, with a personal invitation valid for 7 days. The beta is free for 30 days.
Under the hood
Applications stored in Switzerland, form protected against bots. Invitation by email with a single-use token valid for 7 days; in the beta, each account is an isolated tenant.
Related notes: Private beta One subscription for the home
The notebook
Each card is a short note, linked to its neighbours. That is the shape of Nokker's memory.
Nina
She is who you write to, on the web or in Telegram. She prepares, you decide. She remembers what matters thanks to the Memory as notes.
What you already have
Your usual mailbox (connected with an app password), your calendar (read and write, or a read-only link), Telegram on your phone, your photos and documents. The smart home goes through Lokkal.
Approval card
Sending to someone, spending, deleting: each one shows up as a card, saying what it does and for whom. You approve or refuse; refused, nothing left. See Sensitive actions and What it does without asking.
Sensitive actions
Deleting, paying, erasing your account: you confirm those on your device, with your face or your fingerprint, never with just a message. That is what the Passkey is for.
What it does without asking
Reading, searching, filing, drafting: nothing leaves, so no card. To delete, it asks, unless you just told it exactly what. Everything else goes through a Approval card.
Passkey
Your device's key, unlocked with your face or your fingerprint. It signs your approvals; nobody can do it for you. For a payment, it signs the Signed mandate.
Payment agent
A separate service, called only to pay. It pays with its own The agent's prepaid card, after your approval; Nokker never touches your bank card. Preview: agent payments are coming soon to the beta.
Signed mandate
Your “to pay” card approved with your Passkey: it sets the merchant, the amount and the deadline. It is the Payment agent's purchase order, nothing more.
The agent's prepaid card
A virtual card just for the agent, which you top up. It can never spend more than you put on it, and you see the remaining balance after each payment. See Your bank card stays yours.
Your bank card stays yours
Nokker never sees a card number. Only the payment agent uses the The agent's prepaid card; your own card is never handed to it.
Budgets
Per purchase, per day, per month: beyond them, spending is refused before any Signed mandate card. A child only spends if a parent allows it: see Kids' profiles.
Memory as notes
One fact per note: a title, a few lines, links to neighbouring notes. At every message, Nokker rereads the ones that help, so you never explain everything twice. The engine is called CortHeXis.
Yours or the home's
What is about you stays in your space; what is about the whole home goes into the The household memory.
The nightly tidy-up
At night, it groups and files what it learned. In the morning, it tells you what changed, and all of it can be undone. See Memory as notes.
See and erase
You can export everything about you and have your account erased: it is done within 24 hours, after a confirmation on your device. With Lokkal, your notes stay at home.
CortHeXis
Nokker's memory engine, open source (Apache 2.0) and built by the same team. Short notes, one idea each, found again at every message, in any language. It also rereads the whole memory and flags what is wrong: a link to a note that no longer exists, a fact corrected in one place and not the other. corthexis.com · code on GitHub. See Open source.
Data in Europe
During the beta, the app is hosted in France, by OVHcloud: your account, your conversations, your connectors and the AI model computation. See Your choice, not ours; with Lokkal, your memory stays at home.
Your choice, not ours
Your conversations only help improve our models if you tick the box, unticked by default. The content of your emails, calendar and files is never used for it. See See and erase.
The household
Up to six people, each with their own account and private space, one One subscription for the home. See Kids' profiles and Family calendar.
Kids' profiles
Profiles made for kids; during the beta, they open household by household. A child spends nothing without a parent's approval, within the Budgets.
Family calendar
A photo or a PDF of the schedule becomes appointments, and everyone sees their part. Nothing is added without your Approval card.
One subscription for the home
One subscription for the The household, instead of one per person and per tool. The Private beta is free for 30 days. Spending follows the Budgets.
Private beta
A form on nokker.ai/beta/. We read the answers and write to each person selected, with a personal invitation valid for 7 days. Free for 30 days.
Lokkal
Nokker on your machine: one command installs it (Docker needed). Your memory stays at home, the work runs in a sandbox, you choose the AI model, and it can run your smart home. Early release, signed installers. See Open source.
Open source
Nokker's code is published under the Apache 2.0 licence, on GitHub, and so is its memory, CortHeXis. The licence covers the code, not the name or the logo.
Last updated: November 2026.