> ## Documentation Index
> Fetch the complete documentation index at: https://docs.tinfoil.sh/llms.txt
> Use this file to discover all available pages before exploring further.

# Tinfoil Proxy app

> Run Tinfoil Proxy in your menu bar so every AI request from your computer gets a verified connection to a Tinfoil secure enclave.

Tinfoil Proxy is the same verified proxy as the [CLI binary](https://docs.tinfoil.sh/local-proxy/cli.md) wrapped in a menu-bar app. At session start it verifies a Tinfoil router enclave against the public attestation transparency log; for the rest of the session every upstream connection is TLS-pinned to the attested public-key fingerprint, and the proxy re-runs attestation if the enclave presents a new certificate.

> [!NOTE]
>
> Proxy versions that use V3 attestation have [beta verification](https://docs.tinfoil.sh/resources/feature-status.md) while V3 deployment is ongoing.

## Install

> [tab] macOS
>
> Download the installer for your Mac from the [latest release](https://github.com/tinfoilsh/tinfoil-proxy/releases/latest):
>
> * Apple Silicon: `Tinfoil-Proxy-arm64.pkg`
> * Intel: `Tinfoil-Proxy-x64.pkg`
>
> Double-click the installer, or run the command below:
>
> ```bash theme={"dark"}
> # Apple Silicon (swap arm64 for x64 on Intel)
> curl -fsSL -o /tmp/Tinfoil-Proxy.pkg \
>   https://github.com/tinfoilsh/tinfoil-proxy/releases/latest/download/Tinfoil-Proxy-arm64.pkg
> sudo installer -pkg /tmp/Tinfoil-Proxy.pkg -target /
> open -a "Tinfoil Proxy"
> ```

> [tab] Linux
>
> Grab the `.deb` (`tinfoil-proxy_amd64.deb`) from the [latest release](https://github.com/tinfoilsh/tinfoil-proxy/releases/latest):
>
> ```bash theme={"dark"}
> # Debian / Ubuntu
> curl -fsSL -o /tmp/tinfoil-proxy.deb \
>   https://github.com/tinfoilsh/tinfoil-proxy/releases/latest/download/tinfoil-proxy_amd64.deb
> sudo apt install /tmp/tinfoil-proxy.deb
> ```
>
> Then launch **Tinfoil Proxy** from your applications menu. On GNOME (the default on Ubuntu) the tray icon needs the [AppIndicator extension](https://extensions.gnome.org/extension/615/appindicator-support/); KDE, Cinnamon, and XFCE work out of the box.

> [tab] Windows
>
> Download `Tinfoil-Proxy-Setup.exe` from the [latest release](https://github.com/tinfoilsh/tinfoil-proxy/releases/latest) and run the installer.

After installing, open the app once to launch it into the menu bar. If you want Tinfoil Proxy to start automatically next time you log in, toggle **Open at Login** from the popup or the tray menu.

## Use it from any tool

Point your OpenAI-compatible tool at the local endpoint Tinfoil Proxy exposes:

```text theme={"dark"}
Base URL: http://127.0.0.1:3301/v1
```

On startup the proxy auto-discovers a Tinfoil router enclave, verifies its attestation, and forwards subsequent requests to it. You can copy the URL from the menu-bar popup.

## Compare to the CLI

Tinfoil Proxy is the menu-bar wrapper around the same `tinfoil-proxy` binary; both serve `http://127.0.0.1:3301/v1` and do the same attestation. Pick whichever fits your workflow:

| | CLI (`tinfoil-proxy`) | Menu-bar app (Tinfoil Proxy) |
| - | - | - |
| Best for | Scripts, CI, headless servers | Day-to-day use on your laptop |
| Install | `go install …` or pre-built binary | `.pkg` / `.deb` / `.exe` |
| Stays running | Foreground process | Menu-bar (opt in to **Open at Login**) |
| Auto-update | Manual | Built in (macOS & Windows) |
| Verification UI | Logs | Live status |


This documentation is built and hosted on [Mintlify](https://mintlify.com), a developer documentation platform.