Overview

Protect Local Coding Agents

Silmaril discovers supported local coding agents, configures their protection, and shows their current state in one place.

The app also provides a local inventory of plugins, skills, MCP servers, and connectors, plus recent protection activity. Direct installs show an Update action when a verified update is ready.

Install

Install The App

You need macOS 14 or later, a supported coding agent, and the Firewall URL and API key supplied by Silmaril.

Download

Download Silmaril 0.3.3 from the verified Silmaril download service.

Move to Applications

Open the DMG, then drag Silmaril to the Applications folder.

Open Silmaril

Open Silmaril from Applications and complete the onboarding flow below.

Mounted Silmaril installer showing the Silmaril app and Applications folder — Drag Silmaril into Applications.

If your Mac is managed by your organization, follow your administrator's installation process instead.

Managed Deployment

MDM Rollout

Silmaril supports Jamf Pro, Kandji, Microsoft Intune, Workspace ONE UEM, Mosyle, and Fleet. The Kandji procedure below installs the app, keeps it present, enables launch at login, and leaves updates with Silmaril.

Kandji

Create the Custom App

In Kandji, open Library, select Add Library Item, choose Custom App, and select Add & Configure. Name the item Silmaril.

Set Execution Frequency to Audit and enforce, choose Installer Package, upload the current Silmaril PKG, and set Restart to Disabled. Paste this check into Audit Script:

bash / Kandji audit script

#!/bin/bash

if [[ -x "/Applications/Silmaril.app/Contents/MacOS/Silmaril" ]]; then
  exit 0
fi

exit 1

Save the Library Item. This audit keeps Silmaril installed while allowing the app to update itself.

Create the Login & Background Item

Return to Library, select Add Library Item, choose Login & Background Items, and select Add & Configure. Name it Silmaril Login Item, then select Add Background Item.

Set Identifier Type to Bundle Identifier and enter dev.silmaril.SilmarilMacOS. Save the background item and the Library Item.

Assign both Library Items

Open Blueprints, select the target Assignment Map, and choose Edit Assignments. Find Silmaril and Silmaril Login Item in the Library Item Bank, drag both into the applicable assignment node, and save the map.

Open and verify

After Kandji installs the package, open Silmaril from Applications. Complete the onboarding flow below. Launch at Login is enabled by default. In Kandji, open Library → Silmaril → Status and confirm the Mac reaches Pass. Log out and back in to verify Silmaril opens automatically.

Setup

Complete Onboarding

Secure your agents

Review the permission presented, allow it when prompted, then select Continue.

Connect Silmaril Firewall

Enter the Firewall URL and API key supplied by Silmaril. Select Verify connection, wait for Firewall connection verified, then continue. The key is stored in your login Keychain.

Silmaril onboarding connection panel with a synthetic Firewall URL and masked API key — Verify the Firewall connection before continuing.

Prepare your agents

If Silmaril finds supported agents, select Protect agents and wait for each one to become ready. Exclude only an agent you intentionally do not want Silmaril to manage. If no supported agents are detected, continue; Silmaril will detect them after installation.

Verify live activity

Start a new agent session, then return to Protection to verify live activity. New installations begin in Shadow mode, which reports activity without blocking it.

Silmaril Protection page showing a synthetic list of supported agents in Shadow mode — Protection shows coverage and status for supported agents.

Troubleshooting

Resolve Common Issues

Silmaril does not open: Confirm that your Mac runs macOS 14 or later and that Silmaril is in Applications. Download the DMG again if needed. If macOS reports that the app is damaged or cannot be verified, stop and contact Silmaril Support instead of bypassing the warning.
No agents found: Install or start a supported coding agent, return to Silmaril, and refresh the agent list.
Connection rejected: Correct the supplied Firewall URL or API key, then select Verify connection again. Contact Support if the connection is still rejected.
Needs attention or Restart required: Open the affected agent and follow the action shown. After a repair or update, restart the named app or begin a new terminal session.
Notifications are off: Open Settings and select Enable next to Notifications. If permission was previously denied, enable Silmaril in macOS System Settings.
The issue continues: In Settings, select Export Diagnostics. Then open Support in Silmaril to send the export, or email aum@silmaril.dev.