Logo
Deploy Now

Stars

1,923

Forks

201

Watchers

7

Developer links

OpenBot

Open source GrokBot, built by the team behind the AG-UI protocol. OpenBot is the open-source enterprise agent platform that gives every AI coworker its own sandboxed computer — a real Chromium browser with its own login sessions, a private filesystem, and only the MCP tools you explicitly grant. The centralized gateway evaluates CEL policy rules against tool name, intent, bot identity, page URL, element attributes, and file paths before any action executes, writing an immutable audit row for every call and outcome. Any agent that speaks AG-UI — LangGraph, Mastra, CrewAI, Pydantic AI, Google ADK, or hand-written endpoints — registers as a Bot and receives its own channel with persistent conversation history. The take-the-wheel system lets humans assume control when an agent encounters login walls or two-factor prompts, recording control transfers as structured audit events. Knowledge documents from Google Drive and OneDrive carry source-based permissions where deny principals always win and ambiguous mappings refuse retrieval entirely. The React and Vite frontend provides live screen viewing of each agent's browser, channel-based chat, admin settings, and component galleries. The Hono API server on port 3001 handles authentication, role-based access, tenant packaging, and credential management backed by PostgreSQL with pgvector. Deploy via Docker Compose with the included supervisor that manages per-bot computer containers. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.

OpenBot
OpenBot
OpenBot

Benefits

  • Governed Agent Computer Access
  • Every agent action passes through a centralized gateway with CEL policy evaluation, immutable audit logging, and fail-closed defaults where missing policies permit nothing.
  • Framework Neutral Agent Protocol
  • Any AG-UI endpoint becomes a Bot regardless of framework. LangGraph, CrewAI, Pydantic AI, Mastra, Google ADK, and custom agents all register identically.
  • Human Takeover Control System
  • Seamlessly hand control between human and agent when login walls or sensitive actions arise, with structured audit events recording every control transfer and release.
  • Source Based Knowledge Permissions
  • Documents from Google Drive and OneDrive carry source-level access controls where deny principals always win and ambiguous permission mappings refuse retrieval entirely.

Features

  • Sandboxed Agent Computers
  • Each Bot receives an isolated Chromium browser with its own profile, session cookies, a private /workspace filesystem, and screenshot capture via the agent-computer container.
  • CEL Policy Engine
  • Common Expression Language rules inspect tool name, intent, bot identity, page URL, element attributes, and file paths with deny-before-allow evaluation order.
  • Channel Based Chat
  • Agents receive dedicated channels with persistent conversation history, live browser screen viewing, and generative UI components rendered inline alongside prose responses.
  • Live Screen Viewing
  • Watch each agent's browser in real time from the React frontend, take manual control when needed, and hand it back with full audit trail.
  • Docker Compose Deployment
  • Single start script launches PostgreSQL with pgvector, agent-computer containers, supervisor, Hono API server, and React frontend with configurable environment variables.