Onyx Code 2.7.1

Your privacy rules hold for more of what agents and MCP tools do: chat's guesses leave your MCP configuration alone, an agent's command is checked the way each shell runs it, and on Windows no tool can make a file you cannot delete. The activity log also says which calls it cannot vouch for.

Downloading

If you're installing manually:

macOS

• Apple Silicon Mac (M1 or newer): download OnyxCode-darwin-arm64.dmg (smaller, native).
• Intel Mac, or unsure: download OnyxCode-darwin-universal.dmg (runs on both).

Open the .dmg and drag Onyx Code to /Applications/. Both macOS downloads are signed and notarized by Apple, so they pass Gatekeeper and open without security warnings.

Linux (x64)

• Debian / Ubuntu: download OnyxCode-linux-x64.deb and install it with sudo apt install ./OnyxCode-linux-x64.deb.
• Other distributions: download OnyxCode-linux-x64.AppImage, make it executable (chmod +x), and run it. On Ubuntu 24.04 (which lacks libfuse2) run it with --appimage-extract-and-run.

Windows (x64)

Install with winget: winget install OnyxCode (recommended). It runs through Microsoft's App Installer (a trusted Microsoft Store app) with a package listing reviewed in Microsoft's community winget repository, so it verifies the download and gives a smoother first-run experience. The same installer (OnyxCode-win32-x64-winget.exe) is also attached here for manual download; note it is not code-signed yet either way, so Windows may still show an "Unknown publisher" warning. A code-signed installer is planned for a later release.

The *-autoupdate.zip, darwin-*.json, linux-x64.json and win32-x64.json files are plumbing for Onyx Code's
built-in auto-updater. They are not designed for manual install and will give
you a worse first-run experience than the download above.

What's New

Your MCP configuration stays out of chat's guesses. When chat looks for a file that is not there and reads the closest match, it leaves a project's MCP configuration (mcp.json and the like) out of its picks, so the tokens your servers keep there stay with you. A file the model names is read as before.

On Windows, every tool keeps to names you can delete. MCP tools and the agent's own reads and writes refuse a name Windows reserves (NUL, COM1, or one ending in a dot), as chat's own tools do since 2.7.0, and say why. A command naming a file with a backslash in it (secr\ets) is checked the way bash reads it too, so your privacy rules hold for it.

Agent commands split over lines are checked as they run. A command an agent writes across several lines, or with a Windows line ending, is checked the way bash and PowerShell each read it, and a # the way zsh reads it in the agent's terminal, so your deny rules and privacy rules hold for every command it runs, and one the readings disagree on asks you first.

An activity log that says what it cannot see. A call to an MCP server that runs as a program on your computer is counted as local, though that program may go online itself. The activity log's viewer and its audit report say how many such calls their local-only count includes.

System Requirements

• macOS 11 (Big Sur) or later.
• Apple Silicon (M1 or newer) or an Intel Mac. The Universal download runs natively on both.

Installing

1. Download the .dmg that matches your Mac (see "Downloading" above).
2. Open it and drag Onyx Code into your Applications folder.
3. Launch it from Applications. Because the build is notarized, it opens without a security prompt.

Verification

This build is signed and notarized by Apple. macOS verifies it on first launch, so it opens as an app from an identified developer without security warnings.