Straight answers.
What SalesOS does today, what it will never do, and where the plans are written down.
Approvals. Who decides what leaves.
Can an AI send for me?
Not email. Over MCP an agent drafts, and people send from the inbox or launch campaigns. For WhatsApp and LinkedIn, which are not released yet, every send an agent asks for will pass a server-enforced approval, by default a person’s yes.
Can Claude approve its own request?
No. Approving is reserved for a signed-in member. Claude, any MCP client, an API key and an OAuth token all get a refusal.
What can my Claude actually do?
Over MCP it reads contacts, campaigns, the inbox and the CRM, researches public pages, and drafts replies and campaigns. It cannot send email, approve requests or change autonomy policies. Depending on the scopes you grant, it can edit records such as contacts, mailbox settings and suppressions, so grant only what it needs.
What happens to text a prospect writes?
On the WhatsApp and LinkedIn tools (not released yet) it reaches an agent wrapped as untrusted content, with links neutralised. The email inbox tools return message bodies as written today, so treat what an agent reads from replies as untrusted.
Self-hosting. Your servers, your keys.
Is there a hosted version?
No. SalesOS is self-hosted only, free to run, with no account to create with us.
What do I need to run it?
A Linux or macOS server with Docker, about 2 GB of disk and 4 GB of memory to start. The installer checks the rest.
Whose AI key does it use?
Yours. Set your Anthropic key on the instance and Anthropic bills you directly, with no markup. Your Claude over MCP runs on your own Claude plan.
Can I move my data to another instance?
Yes. A workspace can be exported to an archive and imported on another instance, and a whole instance moves with its data path and its keys.
Channels. What it sends, and how carefully.
Which channels does it send on today?
Email: warmup, careful per-mailbox sending, campaigns and one inbox for every reply. A contact can already be known by email, phone, WhatsApp or LinkedIn identity, and a reply on any channel your workspace runs stops them in every sequence.
Will it send WhatsApp messages?
WhatsApp is being built, for warm conversations only. An agent will never be able to start a chat with someone who has not written in, replied or consented. The connection is an unofficial linked device, and WhatsApp may restrict numbers used this way.
Does it guarantee deliverability?
No, and nothing can. Warmup, caps and checks help you follow provider rules and see trouble early. Placement also depends on your content, your list and your domain’s history.
Does it sell or find contact data?
No. SalesOS holds the contacts you add or import, and data providers run on your own accounts and keys.
Data. Where it lives and who sees it.
Is it GDPR compliant?
You run it, so you are the controller of the data it holds. SalesOS gives you retention settings, suppression, export and encryption to work with, but compliance depends on how you use it.
Does my data leave my servers?
Only where you connect something. AI features send the text they work on to the model provider you configure (Anthropic by default), reply labelling sends reply text to its provider, and each integration receives what you send it. Leave them unset and nothing goes.
How is sensitive data protected?
Mailbox credentials, integration tokens and sensitive payloads are sealed with per-workspace keys, and the keys themselves are kept wrapped. See the trust page for the details.
Does anything report back to you?
No. The only outbound call an instance makes on its own is an optional update check against GitHub releases. There is no telemetry.
What is planned?
A morning list of who to talk to and why, in-app AI teammates with scopes and budgets, LinkedIn, more ways to approve, and a second brain for cited answers. The roadmap has the phases.
Run it on a server you control.
Self-host it with your own keys, and keep the decision about what leaves with people. Pre-release: the installer brings up the upstream warmbly release until SalesOS publishes its images.