> ## Documentation Index
> Fetch the complete documentation index at: https://docs.tinfoil.sh/llms.txt
> Use this file to discover all available pages before exploring further.

# Tinfoil Proxy app

> Run Tinfoil Proxy in your menu bar so every AI request from your computer gets a verified connection to a Tinfoil secure enclave.

Tinfoil Proxy is the same verified proxy as the [CLI binary](/local-proxy/cli) wrapped in a menu-bar app. At session start it verifies a Tinfoil router enclave against the public attestation transparency log; for the rest of the session every upstream connection is TLS-pinned to the attested public-key fingerprint, and the underlying Go client re-runs attestation if the enclave presents a new certificate.

## Install

<Tabs>
  <Tab title="macOS">
    Download the matching `.pkg` for your Mac from the [latest release](https://github.com/tinfoilsh/tinfoil-proxy/releases/latest) — `Tinfoil-Proxy-arm64.pkg` for Apple Silicon, `Tinfoil-Proxy-x64.pkg` for Intel — and double-click to install, or run:

    ```bash theme={"dark"}
    # Apple Silicon (swap arm64 for x64 on Intel)
    curl -fsSL -o /tmp/Tinfoil-Proxy.pkg \
      https://github.com/tinfoilsh/tinfoil-proxy/releases/latest/download/Tinfoil-Proxy-arm64.pkg
    sudo installer -pkg /tmp/Tinfoil-Proxy.pkg -target /
    open -a "Tinfoil Proxy"
    ```
  </Tab>

  <Tab title="Linux">
    Grab the `.deb` (`tinfoil-proxy_amd64.deb`) from the [latest release](https://github.com/tinfoilsh/tinfoil-proxy/releases/latest):

    ```bash theme={"dark"}
    # Debian / Ubuntu
    curl -fsSL -o /tmp/tinfoil-proxy.deb \
      https://github.com/tinfoilsh/tinfoil-proxy/releases/latest/download/tinfoil-proxy_amd64.deb
    sudo apt install /tmp/tinfoil-proxy.deb
    ```

    Then launch **Tinfoil Proxy** from your applications menu. On GNOME (the default on Ubuntu) the tray icon needs the [AppIndicator extension](https://extensions.gnome.org/extension/615/appindicator-support/); KDE, Cinnamon, and XFCE work out of the box.
  </Tab>

  <Tab title="Windows">
    Download `Tinfoil-Proxy-Setup.exe` from the [latest release](https://github.com/tinfoilsh/tinfoil-proxy/releases/latest) and run the installer.
  </Tab>
</Tabs>

After installing, open the app once to launch it into the menu bar. If you want Tinfoil Proxy to start automatically next time you log in, toggle **Open at Login** from the popup or the tray menu.

## Use it from any tool

Point your OpenAI-compatible tool at the local endpoint Tinfoil Proxy exposes:

```text theme={"dark"}
Base URL: http://127.0.0.1:3301/v1
```

On startup the proxy auto-discovers a Tinfoil router enclave, verifies its attestation, and forwards subsequent requests to it. The enclave's attested public-key fingerprint is pinned for the rest of the session, and the underlying Go client re-runs attestation if the enclave rotates its TLS certificate. You can copy the URL from the menu-bar popup.

## Compare to the CLI

Tinfoil Proxy is the menu-bar wrapper around the same `tinfoil-proxy` binary; both serve `http://127.0.0.1:3301/v1` and do the same attestation. Pick whichever fits your workflow:

|                 | CLI (`tinfoil-proxy`)              | Menu-bar app (Tinfoil Proxy)           |
| --------------- | ---------------------------------- | -------------------------------------- |
| Best for        | Scripts, CI, headless servers      | Day-to-day use on your laptop          |
| Install         | `go install …` or pre-built binary | `.pkg` / `.deb` / `.exe`               |
| Stays running   | Foreground process                 | Menu-bar (opt in to **Open at Login**) |
| Auto-update     | Manual                             | Built in (macOS & Windows)             |
| Verification UI | Logs                               | Live status                            |