Download Clabrate.

Clabrate is free. Verify your email the first time you open it; after that the on-device features work offline. You must be 16 or older.

💻

macOS

Apple silicon (M-series)

↓ Download free

Free · macOS 11+ · Apple silicon · signed & notarized.

🪟

Windows

Coming soon

Native Windows build in the works

Coming soon

Want it on Windows? Let me know on X.

🎙 On-device transcription 💻 Local enhance mode 🔒 Usage counts only if you turn them on

Install the DMG in Applications and open it. Verify your email, then complete microphone and keyboard permissions and local model setup. Hold right ⌥ to dictate at your cursor.

Download transparency

Signed release. Visible trail.

Clabrate downloads as a macOS DMG. The app is Developer ID signed, Apple-notarized, stapled, Gatekeeper checked, and published with public release metadata for people who want to verify the install.

Release identity

Developer ID signed, Apple-notarized, stapled, and Gatekeeper checked before upload.

Release manifest: releases.json
DMG checksum: SHA-256
Bundle ID: com.clabrate.desktop

Network use

The Mac app counts how it is used only if you turn that on: which features and built-in tools you use, never what you say, type or see. It is off unless you turn it on. Rewarded ads in Spot on Android are separate: when it shows the ad provider’s consent tool or an ad, the provider’s SDK collects information from your phone to show and measure ads. The website, clabrate.com, uses Google Analytics. In the European Economic Area, the United Kingdom and Switzerland, and where we cannot tell which country you are in, it stays off until you accept. Elsewhere it is on unless you turn it off or your browser sends a privacy signal.
Sign-in contacts the Clabrate account service, hosted on Cloudflare. Resend delivers the sign-in email.
Model downloads are fetched from their original providers onto your Mac. Update checks go to updates.clabrate.com.
Optional cloud AI features send what they need from your Mac to that feature’s provider. Cloud Voice runs on your Clabrate account: your Mac asks the Clabrate account service to start each session, then sends your audio, the conversation, enabled tool results and anything you attach straight to its provider. The other cloud features use your own API key or login.

Local data

Settings, history, Spot Collection and downloaded models are stored on your Mac. Provider keys and your sign-in use the macOS Keychain.
Dictation is transcribed on your Mac. Audio leaves it only when you turn on a cloud AI feature that uses it.

macOS permissions

Why Clabrate asks.

These prompts are there because macOS protects the exact things a voice tool needs to touch: your microphone, your global shortcut, and the app where finished text should land.

Microphone

Records your voice while dictating or using voice features.

Accessibility

Types finished text into the app where your cursor is and arranges windows when you ask the assistant to manage them.

Input Monitoring

Detects the hold-to-talk shortcut globally.

Automation

Reads limited front-app context, such as browser URL, only for context-aware dictation features like transforming text for email or chat.

Manual verification commands Show

Verify the DMG

curl -L -o Clabrate-latest-aarch64.dmg https://updates.clabrate.com/Clabrate-latest-aarch64.dmg
curl -L -o Clabrate-latest-aarch64.dmg.sha256 https://updates.clabrate.com/Clabrate-latest-aarch64.dmg.sha256
shasum -a 256 -c Clabrate-latest-aarch64.dmg.sha256
codesign --verify --verbose=2 Clabrate-latest-aarch64.dmg
xcrun stapler validate Clabrate-latest-aarch64.dmg
spctl -a -vvv -t open --context context:primary-signature Clabrate-latest-aarch64.dmg

Inspect the app bundle

hdiutil attach Clabrate-latest-aarch64.dmg
codesign -dvvv /Volumes/Clabrate/Clabrate.app
spctl -a -vvv -t exec /Volumes/Clabrate/Clabrate.app
hdiutil detach /Volumes/Clabrate

Read release metadata

curl -L https://updates.clabrate.com/releases.json | jq .
curl -L https://updates.clabrate.com/releases.json.sig

App updates use a separate signed updater manifest read only by installed copies of Clabrate.