Skip to content

Creel

Creel

A secure LLM task runner and personal AI assistant that separates credential-bearing data fetching from LLM processing. Supports both scheduled tasks (morning briefings, weather summaries) and interactive agent mode (chat via CLI or iMessage with tool calling).

A creel is a wicker basket usually used for carrying fish or blocks of peat. It is also the fish trap used to catch lobsters and other crustaceans.

Key Features

  • Secure by design — The LLM never sees credentials. Each executor runs in isolation with only the secrets it needs.
  • Scheduled tasks — Cron-based scheduling for recurring tasks like morning briefings and email digests.
  • Interactive agent mode — Chat via CLI (with TUI) or iMessage with full tool calling support.
  • Guardian security pipeline — Multi-stage input screening and action validation with prompt-injection detection, policy enforcement, and audit logging.
  • 16+ executors — Google Calendar, Gmail, Drive, Apple Notes, Reminders, Things 3, iMessage, web search, and more.
  • Container isolation — Production mode runs executors in Docker containers with read-only filesystems, dropped capabilities, and memory/CPU limits.
  • Secrets management — age-encrypted secrets decrypted at runtime; the LLM never touches credential files.