Skip to main content
Use the macOS app when a Mac should keep reporting without an interactive shell. The download only places the app — you open it and paste an access key to start discover. Published zips, an optional DMG, and a longer checklist live at install.corporatelabs.ai/MACOS.md.

​
Install

  1. Console → Installations → type macOS → copy the access key
  2. Download CorporateLabs.dmg
  3. Drag CorporateLabs.app into Applications
  4. Open it from Applications (not the disk image). A CorporateLabs window opens with the enroll UI — it does not use the browser. Paste the clt_… key and start discover.
That registers a user LaunchAgent which runs clabs run (discover). The app window uses CorporateLabs branding (hex mark, status, start/stop). It does not run intercept, install a VPN, change the system proxy, or add a certificate to the trust store. Right-click → Open the first time if macOS Gatekeeper warns (builds are unsigned until they are notarized). If it still blocks:

​
What it sends

Outbound HTTPS to https://api.corporatelabs.ai only. The agent does not listen on a local port.
Confirm rows in console Events / Hosts.

​
Uninstall

Drag CorporateLabs.app to the Trash. The LaunchAgent notices the app is gone, unloads itself, and deletes:
  • ~/Library/LaunchAgents/ai.corporatelabs.clabs.plist
  • ~/Library/Application Support/clabs
  • ~/Library/Logs/clabs
Your network settings are unchanged. To stop without deleting the app: open CorporateLabs.app and choose Stop agent.

​
Notes

  • Same clabs binary as Linux and the CLI installer
  • Intercept (MITM) stays job-scoped — do not expect it from this app
  • Requires macOS 12 (Monterey). Local DMG builds use Go 1.22 so the binary is not stamped for macOS 13.