It already runs on your machine.
There's no cloud tenancy to provision and no server to rent. One install brings up the whole stack locally — UI, sidecar, engine, vault, and pluggable models. The only traffic that leaves the box is the provider calls you choose to make, under keys you hold.
- L1
UI · React + Vite
Dashboard, Chat, Live, Memory graph, Workflows. Loads from disk, runs in your browser at localhost:8858.
- L2
Sidecar · Node
Long-lived host process: routing, MCP host, channels, queues, cron, license. Streams results end-to-end over SSE.
- L3
Engine · runtime
Director, swarm scheduler, persona memory, skills runner, providers, embed pipeline.
- L4
Vault · disk
~/.agentiqflow holds sealed secrets, sessions, tasks, workflows, and your markdown memory vault.
- L5
Models · pluggable
40+ providers plus local Ollama. Swap per agent. This is the only layer that can reach off-box — and only when you call it.
Model provider calls
Only the inference calls you trigger, sent directly to the provider under your own key. No relay, no markup.
Channel & integration calls
Only the messaging channels and workflow integrations you wire up and run. SSRF-guarded outbound HTTP.
Signed update checks
The app polls the update server for a newer signed build; you choose when to apply. Verified via minisign + sha256.
Optional cloud sync
If — and only if — you enable it, config/workflows/memory push to your own S3-compatible bucket or WebDAV. Your bucket, your keys.
Telemetry / analytics
None. There is no background phone-home and no fine-print analytics.
Your prompts & data
Never relayed to us. Data stays in your filesystem unless you explicitly forward it.
One native installer per platform — DMG/PKG (macOS), AppImage (Linux + Raspberry Pi), NSIS .exe (Windows). Signed, with a rollback button.
Runs happily on an always-on machine or a Raspberry Pi 4/5 (systemd unit). Keep the swarm live 24/7 on hardware you own.
Run the sidecar in a container if you prefer isolated, reproducible deploys — same loopback-first defaults apply.
The app checks the update server for signed releases and applies them on your say-so; every artifact is verified before it's installed.
Everything lives under ~/.agentiqflow. Optional end-to-end cloud sync pushes snapshots to your own bucket.
The full network and vault details live on the security page. When you're ready, the installers are on the download page.