Built for macOS 26 Tahoe · Gmail · single-scope OAuth
Troxic is a keyboard-first Gmail client written natively in SwiftUI for macOS 26. Real Liquid Glass chrome. A split inbox that classifies the sender, not every message. Phishing verdicts on the conversation you’re reading. And AI that runs on your API key — because there is no Troxic server to run it on.
Currently in closed testing — 100 named seats, no waitlist theatre.
gmail.modifySynced just now · 2 accounts
Live preview — click the window, then press jk to move · e archive · s star · u unread · ⇥ lane · ⌘K palette Live preview — tap a lane or a conversation. The real thing runs on the keyboard.
Every colour in Troxic comes from a resolved ThemeTokens struct — atmosphere, glass tint, accent, split-lane colours, text, separator, star. Views never invent a colour. Pick a theme below and the whole page re-tints with it, because this page reads the same tokens the app does.
In the app: Settings → Appearance, or ⌘K → “Use Ember Theme”.
Chrome uses the macOS 26 .glassEffect APIs with a
GlassEffectContainer per cluster — never a faked Material.
One rule keeps it readable: glass is chrome only. Message bodies always sit on an
opaque reader surface.
A full-window MeshGradient drifts slowly behind the chrome, with the
theme’s accent nebula anchored where that theme wants it — bottom-trailing for Aurora,
straight overhead for Noir. Glass needs something to sample.
Reduce Transparency swaps every glass surface for a solid, stroked card. Reduce Motion stills the atmosphere and drops every transition to opacity. Text pairs are checked against WCAG AA in all eight appearances.
Archive, star, snooze, reply, jump, unsubscribe — all of it under the home row. Actions apply optimistically and land in Gmail a moment later; if you change your mind, ⌘Z reverses the exact call that was made, batch or single.
Multi-select with ⇧J/⇧K and one undo covers the whole batch. Selection advances after archive and trash, so a hundred newsletters is a hundred e presses — not a hundred round trips to the mouse.
Sorting every message forever is a losing game. Troxic decides once, per sender, and remembers. Newsletters land in Other and stay there; people you actually write to are promoted from your own Sent history.
People. In INBOX, not automated — no List-Unsubscribe,
no Precedence: bulk, not a noreply@ — or a sender you’ve
written to before, starred, or pinned as a VIP.
Noise. Newsletters, receipts, notifications. Two or more threads from the same sender collapse into a single bundle row you can expand or archive whole.
People waiting on you. The last message is inbound, from a human, and you haven’t answered it. Ranked above ordinary unread inside every date group.
First contact. With the Gatekeeper on, an unknown sender waits outside the inbox until you press a to accept or b to block — the person, or the whole domain.
Build a lane from deterministic rules — from, to, subject, label, has-attachment, is-automated — and choose whether it hides matching mail from Important and Other. Add a plain-English prompt and Troxic asks your model once per sender, then caches the verdict forever.
Troxic already fetches the List-Unsubscribe header, so the Subscriptions
pane lists everything mailing you. It prefers the mailto: target and
sends it on your normal compose path. An https: target opens only after
you confirm — a silent background fetch is a tracking signal, not a courtesy.
Troxic is made at ForeGuards, where the day job is incident response. So the mail client ships with the checks you’d want on a suspicious message — on demand, on the conversation in front of you, never as a background scan of your mailbox.
Add your own DFIR Lab API key in Settings → Integrations and the shield in the
reader — or p — exports the open message as RFC 822 and posts
it to api.dfir-lab.ch under your key. The verdict comes back inline.
Clicking a URL in a message opens a sheet, not your browser. You can send that one URL through Safe Browsing before you go, or set link checks to run automatically when a conversation opens. Tracking parameters are stripped before anything is scanned.
Opening a message never tells the sender you opened it. Images stay blocked behind a banner until you load them, and “always load” is a per-sender allowance you can revoke in Settings → Privacy.
App Sandbox, Hardened Runtime, ATS. HTML mail renders in a locked-down
WKWebView with no arbitrary JavaScript. Bodies and tokens are never logged;
Authorization is redacted.
Troxic asks for gmail.modify and nothing more. It deliberately does not
request mail.google.com, which means the app is structurally incapable of
permanently deleting your mail — delete moves to Trash, where Gmail can still undo it.
Troxic has no AI business model, because it has no backend to bill you from. Paste an
OpenAI key or pick Apple Intelligence on this Mac, and every request is one you asked for,
scoped to one thread, sent with store: false.
A one-line summary above a long thread, cached per body fingerprint so reopening it never re-sends anything. ⌘⇧B briefs the whole conversation when one line isn’t enough.
Seven tones, three lengths, and a free-form instruction of your own. My Voice learns your style from a capped sample of your sent mail — one call, cached locally. Drafts always come back as editable text; Troxic never sends on its own.
Choose “On this Mac” and prompts run through Apple Intelligence on-device. Troxic never silently substitutes one provider for the other — if you picked on-device and it isn’t available, you get an error, not a quiet upload.
/ is an instant local filter with real operators —
from:, has:attachment, after:7d,
label:. Ask AI ranks up to eighty already-cached threads by subject,
sender and date; full bodies stay on the Mac.
When a lane’s rules can’t decide, Troxic can ask your model about that sender — once — and cache the answer. It is never asked again for that address.
Every AI feature stays dark until a key validates against GET /v1/models.
Nothing runs against your list in the background unless you explicitly turn on inbox
headlines — and even then it’s the subject and snippet of twelve visible rows, not bodies.
Later today, tomorrow morning, next Monday, in three days, or a date you pick. Follow-ups close themselves the moment a reply arrives — you only hear about the silence.
Set the send delay to 0, 5, 10 or 30 seconds and the toast timeout to 5, 10 or 20. ⌘Z cancels a pending send before it ever leaves the Mac.
Day, work week, week and month grids; drag a range to create an event; RSVP to an invite straight from the reader banner it was parsed out of. Calendar consent is separate and incremental — declining it changes nothing about mail.
Scheduled work fires while Troxic is running, and catches up on next launch. Turn on the companion and the app registers itself as a login item with a menu-bar extra, so a send-later still leaves at 7am whether or not the window is open.
Not “we don’t look at your mail.” There is no mailbox sync, no index, no queue — no place for it to go. Troxic talks to Google with your token and nothing sits in between. Two optional services can each be handed one thread when you ask: OpenAI, under your key, and DFIR Lab, which we run ourselves and say so plainly below.
Gmail REST over URLSession, one restricted scope.
The whole application. SwiftData is the source of truth the UI reads.
Only on an action you took, for the thread you’re in, under your key, with
store: false. Or never, if you use Apple Intelligence instead.
Only the message you pressed the shield on, or the single URL you chose to check. Never a background scan of the mailbox.
Disconnecting is real. Sign out revokes the Google grant and wipes the local mail cache and every derived summary. Your OpenAI and DFIR keys are only deleted if you ask for that too — they’re yours, not ours.
All of this is written down, in full, in the privacy policy — including exactly what each optional service receives and when.
gmail.modifyPlus calendar.events only if you connect Calendar.
Troxic is in closed testing while Google verification runs. Seats go to people who live in their inbox, love jk, and will tell us when something is wrong.
Requires macOS 26 and a Google account. During testing, Google shows an “unverified app” screen on first consent.