Thanks to visit codestin.com
Credit goes to github.com

Skip to content

Self-hosted app store and runtime for AI agents. Install third-party agents, run them on your infrastructure with your own model providers (Ollama, Bedrock, OpenAI, etc.). Container isolation, credential injection, default-deny egress.

License

Notifications You must be signed in to change notification settings

agentsystems/agentsystems

Folders and files

NameName
Last commit message
Last commit date

Latest commit

Β 
Β 
Β 
Β 
Β 
Β 
Β 
Β 
Β 
Β 
Β 
Β 
Β 
Β 
Β 
Β 
Β 
Β 
Β 

AgentSystems

Note

Pre-Release Software - AgentSystems is in active development. Join our Discord for updates and early access.

Self-hosted app store and runtime for third-party AI agents.

Most AI companies are building for the wrong future. AI distribution is inverting: instead of sending data to agents, agents will run where data lives.

Why the inversion is inevitable:

  • Frontier models, open-source models, and local hardware all keep improving
  • Building agents is quickly becoming trivial
  • Models can run locally or via your own cloud accounts β€” reducing dependency on third-party agent platforms
  • NVIDIA's research shows small language models excel at specialized tasks β€” most agent workloads don't need massive generalist models
  • As AI transforms white-collar work, millions of subject matter experts (accountants, analysts, consultants, underwriters) will create agents to leverage their domain expertise. A tax accountant builds an agent for startup equity compensation. An insurance underwriter builds one for risk assessment.
  • The market floods with specialized agents for every niche task

Two problems emerge: discovery and trust. When agents are everywhere, how do you discover them? How do you run third-party agents without exposing your data or credentials?

AgentSystems provides infrastructure for both:

Distribution:

  • Self-hosted catalog indexed by GitHub username
  • Federated Git-based discovery with auto-merge
  • Permissionless publishing

Security model:

  • Container isolation
  • Runtime credential injection (separated from agent provider)
  • Default-deny egress with per-agent allowlists
  • Provider abstraction (agents inherit your OpenAI/Anthropic/Bedrock/Ollama config)
  • Hash-chained audit logs

Infrastructure for a commoditized agent future.

πŸ“Ί Watch the 100-second demo | Full walkthrough (9 min)

Installation

# macOS / Linux
curl -fsSL https://github.com/agentsystems/agentsystems/releases/latest/download/install.sh | sh
agentsystems init agent-platform && cd agent-platform
agentsystems up

That's it. Open http://localhost:3001 and start discovering agents.

Prefer manual installation? See the manual installation guide.

What's running: Gateway (API), UI (web interface), egress proxy (network controls), and PostgreSQL (audit logs).

Next: In the UI, click "Discover" β†’ Find an agent β†’ Click "Add" β†’ Invoke it

Have an NVIDIA GPU? See the GPU acceleration guide.

How It Works

For Agent Users: Browse Agents β†’ Add Agents β†’ Run Agents

AgentSystems user workflow - configure models, discover agents, deploy, execute, and view audit trail

For Agent Developers: List on Index

Build agent with model requirements

1. Build agent with model requirements

Push to container registry

2. Push to container registry

Submit to agent index

3. List your agent in the index (automated merge)

Agent available for discovery

4. Agent available for discovery

Architecture

graph TB
    subgraph "Your Infrastructure"
        App[Your Application]
        UI[Web UI :3001]
        GW[Gateway :18080]
        Agent[Third-Party Agent<br/>Container]
        Proxy[Egress Proxy :3128]
        Storage[Thread Storage<br/>/artifacts/thread-id/]
        Audit[Hash-Chained Logs<br/>PostgreSQL]
    end

    subgraph "External"
        Index[Agent Index<br/>agentsystems.github.io]
        Allow[approved.com βœ“]
        Block[evil.com βœ—]
        AI[AI Providers<br/>OpenAI/Anthropic/Ollama]
    end

    Index -.->|1. Discover & Pull| GW
    UI -->|Manage| GW
    App -->|2. POST /invoke/agent| GW
    GW -->|3. Route + Inject X-Thread-Id| Agent
    Agent -->|4. Outbound Call| Proxy
    Proxy -->|Check Allowlist| Allow
    Proxy -.->|Blocked| Block
    Agent <-->|5. Read/Write| Storage
    Agent -->|6. Call LLM| AI
    Agent -->|7. Return Result| GW
    GW -->|8. Response| App
    GW -->|Audit Logs| Audit

    style Agent fill:#1a4d5c
    style Proxy fill:#2d5f3f
    style Block fill:#5c1a1a
    style Audit fill:#3d3d5c
    style UI fill:#3d5c4d
Loading

How is this different from...?

Agent frameworks (LangChain, Agno, CrewAI)? Those help you build agents. AgentSystems helps you discover and run agents built by others. You can build with those frameworks and publish to AgentSystems.

Cloud-hosted agents (Harvey, Artisan)? Your data goes to their servers. AgentSystems runs on your infrastructure β€” designed to keep your data under your control.

Deployment platforms (Coolify, Heroku)? Those deploy web apps. AgentSystems deploys AI agents with agent-specific features: model routing, egress controls, thread-scoped storage, federated discovery.

Manual Docker / Docker Compose? AgentSystems adds discovery and pre-built infrastructure: federated agent catalog, UI, gateway, egress proxy, audit logs.


Platform Components

The platform consists of 6 interdependent repositories:

Component What It Does Technology Latest Version
agent-control-plane Gateway, orchestration, egress proxy FastAPI, PostgreSQL Version
agentsystems-sdk CLI tool for deployment Python, Docker Version
agentsystems-ui Web interface for management React, TypeScript Version
agentsystems-toolkit Library for building agents Python, LangChain Version
agent-template Starter template for new agents FastAPI, LangGraph rolling
agent-index Federated agent discovery GitHub Pages rolling

Frequently Asked Questions

Q: How does agent publishing work?

A: Fork the agent-index repo, create developers/your-github-username/, add your agent metadata, and submit a PR. Auto-merge validates that the folder name matches your GitHub username (fork ownership = namespace ownership). No manual approval needed.

Q: Are agents reviewed before being listed?

A: No. The AgentSystems Community Index lists agents from third-party developers. AgentSystems does not review or endorse software in any index.

Q: Can I use this in production?

A: AgentSystems is pre-release. Use for development and testing. For production, wait for stable release or contact us on Discord for early access guidance.

Q: Can I run a private agent index?

A: Yes. The index is Git-based and federated. Fork the agent-index repo to run your own index.

Documentation

Getting Started:

For Agent Developers:

Contributing

We welcome contributions across the stack:

  • πŸ€– Build Agents - Create specialized agents and publish to the index
  • πŸ”’ Security - Improve isolation, audit mechanisms, or egress controls
  • πŸ“š Documentation - Write guides, tutorials, or API references
  • πŸ› Bug Reports - Help identify and fix issues

See CONTRIBUTING.md for guidelines.

Community

License

Licensed under the Apache-2.0 license.

About

Self-hosted app store and runtime for AI agents. Install third-party agents, run them on your infrastructure with your own model providers (Ollama, Bedrock, OpenAI, etc.). Container isolation, credential injection, default-deny egress.

Topics

Resources

License

Code of conduct

Contributing

Stars

Watchers

Forks

Languages