[ self-host · your box ]

It already runs on your machine.

There's no cloud tenancy to provision and no server to rent. One install brings up the whole stack locally — UI, sidecar, engine, vault, and pluggable models. The only traffic that leaves the box is the provider calls you choose to make, under keys you hold.

[ the five on-device layers ]
  1. L1

    UI · React + Vite

    Dashboard, Chat, Live, Memory graph, Workflows. Loads from disk, runs in your browser at localhost:8858.

  2. L2

    Sidecar · Node

    Long-lived host process: routing, MCP host, channels, queues, cron, license. Streams results end-to-end over SSE.

  3. L3

    Engine · runtime

    Director, swarm scheduler, persona memory, skills runner, providers, embed pipeline.

  4. L4

    Vault · disk

    ~/.agentiqflow holds sealed secrets, sessions, tasks, workflows, and your markdown memory vault.

  5. L5

    Models · pluggable

    40+ providers plus local Ollama. Swap per agent. This is the only layer that can reach off-box — and only when you call it.

[ what leaves the box ]
on your call

Model provider calls

Only the inference calls you trigger, sent directly to the provider under your own key. No relay, no markup.

on your call

Channel & integration calls

Only the messaging channels and workflow integrations you wire up and run. SSRF-guarded outbound HTTP.

on your call

Signed update checks

The app polls the update server for a newer signed build; you choose when to apply. Verified via minisign + sha256.

on your call

Optional cloud sync

If — and only if — you enable it, config/workflows/memory push to your own S3-compatible bucket or WebDAV. Your bucket, your keys.

never

Telemetry / analytics

None. There is no background phone-home and no fine-print analytics.

never

Your prompts & data

Never relayed to us. Data stays in your filesystem unless you explicitly forward it.

[ ops story ]
Install

One native installer per platform — DMG/PKG (macOS), AppImage (Linux + Raspberry Pi), NSIS .exe (Windows). Signed, with a rollback button.

Run on a box

Runs happily on an always-on machine or a Raspberry Pi 4/5 (systemd unit). Keep the swarm live 24/7 on hardware you own.

Docker

Run the sidecar in a container if you prefer isolated, reproducible deploys — same loopback-first defaults apply.

Update

The app checks the update server for signed releases and applies them on your say-so; every artifact is verified before it's installed.

Back up

Everything lives under ~/.agentiqflow. Optional end-to-end cloud sync pushes snapshots to your own bucket.

The full network and vault details live on the security page. When you're ready, the installers are on the download page.