Install Golem
Golem is a local-first proxy and MCP server that sits in front of your LLM traffic: redaction, routing, local tools, and honest observability. It runs on your machine, it is free, and it is open source. No account required.
macOS and Linux
curl -fsSL https://golem.run | shWindows (PowerShell)
irm https://golem.run | iexThen
golem init # wire this project up
golem --help # everything elseWhat the installer does
It prefers npm and falls back to a standalone binary, so you end up with the lighter of the two your machine can support:
- Node 22 or newer with npm present, so it runs
npm install -g golem-run, which then updates itself like any other global package. - Otherwise it downloads a self-contained binary. On macOS and Linux that lands in
~/.local/bin(or/usr/local/bin) and the script tells you if that is not on yourPATH; on Windows it lands in%LOCALAPPDATA%\Golem\binand is added to your userPATHfor you.
Supported: macOS and Linux on x64 and arm64, and Windows on x64 and arm64. Anything else stops with a message rather than installing something that will not run.
Read it before you run it
Piping a script into a shell means trusting whoever served it. Both scripts are short and worth thirty seconds: install.sh and install.ps1. Those links go to the exact files that run, served from the tagged release on GitHub over HTTPS.
Being straight about the limits: the download is authenticated by TLS and by GitHub's release, and nothing more. There is no checksum file and no code signature yet, so a compromised release would not be caught by the installer. If that matters to you, install with npm install -g golem-run instead, which verifies package integrity against the registry, or build from source.
Knobs
| Variable | Effect |
|---|---|
GOLEM_VERSION | Pin an npm version instead of taking the latest. |
GOLEM_BIN_DIR | Install the standalone binary somewhere specific. |
GOLEM_INSTALL_NODE | Set to 1 to let the installer bootstrap Node via your package manager. Off by default, because installing a language runtime behind someone's back is not a default. |
GOLEM_INSTALL_BASE | Point the binary download at a mirror. Defaults to this domain. |
Working with other people?
Everything above stays free forever, with your config on your own disk. This portal is the part a team needs: one set of configuration everyone shares, workplace connectors, and role-based access.
Set up a team