# VMPane

> VMPane is a native macOS app that runs macOS, Linux and Windows 11 on Arm virtual machines on Apple silicon Macs. macOS and Linux run on Apple's Virtualization framework; Windows runs on QEMU with Hypervisor.framework, a software TPM and Secure Boot. A built-in MCP server (`vmpane mcp`) lets AI agents use a VM at one of five access levels; every VM starts at Off.

Status: pre-alpha; public betas come first. Macs with Apple silicon, macOS 15 or later. Open source under the Apache 2.0 license: https://github.com/nhtera/vmpane

## Get started

- [Overview](https://vmpane.erai.dev/docs/overview): What VMPane is, the three guests, AI agents and the limits
- [Install](https://vmpane.erai.dev/docs/install): Requirements, the DMG or Homebrew, updates and uninstalling

## Guests

- [macOS guests](https://vmpane.erai.dev/docs/guides/macos): Apple's restore image, the install, guest tools, snapshots
- [Linux guests](https://vmpane.erai.dev/docs/guides/linux): Ubuntu, Debian and Fedora from the catalog, your own arm64 ISO, shared folders
- [Windows guests](https://vmpane.erai.dev/docs/guides/windows): Windows 11 on Arm from your ISO, set up with no clicks

## AI agents

- [VMPane for AI agents](https://vmpane.erai.dev/docs/mcp): Connect Claude Code, Codex or Gemini; the five access levels; the tools
- [vmpane commands](https://vmpane.erai.dev/docs/cli): Every command of the vmpane tool

## Reference

- [Security model](https://vmpane.erai.dev/docs/security-model): What a VM, an agent and the app can and cannot reach
- [VM bundle format](https://vmpane.erai.dev/docs/bundle-format): What is inside a .vmpane bundle
- [Architecture](https://vmpane.erai.dev/docs/architecture): How the app, the helpers and the guest tools fit together

## Project

- [Security policy](https://vmpane.erai.dev/docs/security): How to report a vulnerability
- [Contributing](https://vmpane.erai.dev/docs/contributing): How to build VMPane and send a change
- [Code of conduct](https://vmpane.erai.dev/docs/code-of-conduct): How we work together