# Download IT-AI

> Download the IT-AI agent, MCP server and itai CLI for Windows, macOS and Linux from the GitHub release, and verify each file before you run it.

Canonical page: https://glick.run/it-ai/download.html

The agent, the MCP server and the `itai` CLI are published on the [IT-AI agent release page](https://github.com/gitayg/haive-agent/releases/latest). The latest release is **v3.9.0** (2026-10-10). Downloads are anonymous.

## Pick your file

| Platform | Agent | MCP server | CLI |
|---|---|---|---|
| Windows x86-64 | `it-ai-windows.exe` | `it-ai-mcp-windows.exe` | `itai-windows.exe` |
| macOS (Apple Silicon) | `it-ai-macos` | `it-ai-mcp-macos` | `itai-macos` |
| Linux x86-64 | `it-ai-linux`, `it-ai-linux.deb` | `it-ai-mcp-linux` | `itai-linux` |
| Linux arm64 | `it-ai-linux-arm64`, `it-ai-linux-arm64.deb` | `it-ai-mcp-linux-arm64` | `itai-linux-arm64` |

Linux binaries are linked against glibc 2.31, so one binary runs on Debian 12, Ubuntu 22.04 and later, and ARM single-board computers. To fetch the latest of any file directly:

```sh
curl -fsSL -O https://github.com/gitayg/haive-agent/releases/latest/download/it-ai-linux
```

Usually you do not download the agent by hand: your hub's **Register a device** panel serves the agent for each platform and shows the exact enrollment command. See the [docs](https://glick.run/it-ai/docs.html).

## Verify before you run it

```sh
curl -fsSL -O https://github.com/gitayg/haive-agent/releases/latest/download/SHA256SUMS
shasum -a 256 it-ai-mcp-macos          # compare with the matching line in SHA256SUMS
gh attestation verify it-ai-mcp-macos --repo gitayg/haive-agent
```

The attestation is a Sigstore-signed record of the commit and the public CI workflow that built the file. Each binary also has a `.sig` file: the ed25519 signature the agent checks before it updates itself.

The binaries are **not** signed with Apple or Microsoft code-signing certificates yet. On macOS, a file downloaded in a browser is quarantined: clear the flag after you verify it (`xattr -d com.apple.quarantine <file>`). On Windows, SmartScreen or Defender may warn about an unsigned file.

## The hub

The hub is not on this release page. It is licensed under the Elastic License 2.0 and is free to self-host for your own organization. To run one, [get in touch](https://glick.run/contact.html).

## Build from source

```sh
git clone https://github.com/gitayg/haive-agent
cd haive-agent
cargo build --release      # target/release/{IT-AI,it-ai-mcp,itai}
```