Cua launches desktop Spaces for agents, with user-approved app access

Why it matters

Cua is packaging desktop access and supervision as agent infrastructure. Teleportation could remove repeated sign-ins, while also making clear that a transferred session gives the Space's controller a live authenticated foothold.

Cua, founded by former Microsoft researcher Francesco Bonacci, launched Cua Spaces on October 2nd: a Mac app for running AI agents on desktops that users can watch and take over. Its most pointed feature is app teleportation, which can move a signed-in app session into an agent's Space after the user approves what will be transferred.

https://x.com/trycua/status/2106057192285548763

Bonacci and Cua research lead Dillon DuPont worked at Microsoft on Windows Agent Arena, a benchmark for agents operating a real Windows environment. In their 2024 paper, the team described more than 150 tasks and reported that its Navi agent completed 19.5% of them successfully, compared with 74.5% for an unassisted human. Bonacci left Microsoft in early 2025, built Lume, a command-line tool for running native macOS virtual machines on Apple Silicon, and founded Cua in San Francisco that March. Cua joined Y Combinator's X25 batch.

That history gives Spaces a practical focus: the computer an agent acts on, rather than the model deciding what to do. Cua says the app can connect a user's Mac to Spaces running on that Mac, on a Mac or Linux machine they own, or in their own cloud. The announcement described the first app rollout as macOS; it also said Linux images could run. Cua's documentation describes a Space as a desktop that can be a local container or virtual machine, a cloud sandbox, or an existing machine registered with the system.

The desktop is shared. A person can stream the screen, watch an agent act with its own cursor, step in using theirs, and hand control back. The app is built on Cua Driver, which Cua describes as the software layer agents use to operate desktop applications. The approach puts the user's ability to supervise work alongside the agent's ability to interact with apps that may not expose an API.

Teleportation addresses one friction point in that workflow: authentication. Instead of asking an agent to sign into an app from scratch, the user can transfer an app and selected session data into a Space. Cua's teleport guide says the consent flow presents the app, files and state involved before transfer; sensitive items require an explicit opt-in, and macOS may ask for Touch ID or a password. The guide also distinguishes app installation from moving signed-in state, and lists which apps are supported for each.

That permission step is central because a transferred session can act as a live sign-in. Cua's documentation warns that anyone controlling the destination Space may be able to use it, and advises teleporting only into Spaces the user owns. Its Keyvault guide says the vault keeps sessions encrypted on the Mac and mediates requests for access. These are product-design safeguards described by Cua, not an independent security assessment.

Cua says Spaces is free and source-available under FSL-1.1-MIT; Cua Driver remains MIT-licensed. The distinction matters for teams evaluating whether they can modify and deploy the product: the repository's licensing notes say Spaces releases become MIT-licensed two years after shipping. Cua also said Pro and Teams plans were planned, with shared team machines, session handoff, Keyvault sync and admin controls. Those plans point toward a business product built around coordinating agents and access across teams, while the launch version centers on an individual Mac user supervising a desktop.

Y Combinator's Cua listing says the startup has closed a seed round, but does not state its size or valuation. The launch announcement likewise gives no customer, usage or revenue figures. For now, Spaces is a product bet backed by Cua's earlier work on desktop-agent infrastructure: whether people will let agents handle authenticated work depends on the desktop being useful, and on permission boundaries holding up when a Space is shared or delegated.