archestra

<div align="center"> <img src="logo.svg" alt="Archestra" width="520" />

The all-in-one open-source enterprise AI platform.

Built on a strong security and observability foundation: SSO and RBAC, sandboxed code execution, Dual-LLM and Lethal-Trifecta guardrails, OpenTelemetry traces, and Prometheus metrics — first-class, not bolted on.

Quickstart  ·  Docs  ·  Releases  ·  Slack

<br />

<video src="https://github.com/user-attachments/assets/4b278679-9615-4d4a-9bd0-57d0585041c4" controls playsinline width="800"></video>

</div>

---

What it does

Point your users — or your agents, or Claude / Codex / Cursor — at one URL. Archestra handles the rest:

• 💬 Chat for non-technical users. Internal AI assistant with projects, MCP apps, and Slack, MS Teams, and email front-ends.
• 🛠️ Developer LLM & MCP portal. One token for Claude Code, Codex, Cursor — see the proxy.
• 🚪 LLM gateway for any provider (Anthropic, OpenAI, Azure, Bedrock, DeepSeek, …) with cost limits, virtual API keys, and dynamic model routing.
• 🔌 MCP gateway with OAuth + On-Behalf-Of so tools run as the user, not a shared service account.
• 🤝 A2A gateway for agent-to-agent triggers.
• 📦 Private MCP registry so teams ship their own tools — see registry docs.
• 🎼 MCP orchestrator with a Kubernetes operator and self-serve promotion.
• 🤖 Agent runtime with scheduled / email / webhook triggers, sub-agent delegation, reusable skills, sandboxed code execution, and a K8s-native filesystem.
• 📚 RAG knowledge base plumbed via connectors to your existing stack.
• 🧩 Mini app builder — see apps.
• 🛡️ Deterministic guardrails for tool calls, Dual-LLM verification, and Lethal Trifecta protections.
• 🪪 Identity & access with SSO (OIDC, SAML, Okta, Entra), RBAC with role mapping & team sync, and secrets management.
• 🌎 Environments with per-env egress policies and per-env cost limits.
• 🔭 Observability out of the box: OpenTelemetry traces, Prometheus metrics, logs, per-team cost tracking.

Already running dangerous single-tenant agents like Claude Cowork, OpenClaw, or Hermes in your enterprise? Migration Kit →

Quickstart

docker pull archestra/platform:latest

docker run \
  -p 127.0.0.1:9000:9000 -p 127.0.0.1:3000:3000 \
  -e ARCHESTRA_QUICKSTART=true \
  -e ARCHESTRA_BETA=true \
  -v /var/run/docker.sock:/var/run/docker.sock \
  -v archestra-postgres-data:/var/lib/postgresql/data \
  -v archestra-app-data:/app/data \
  archestra/platform

Open http://localhost:3000. Full Docker / Helm / Kubernetes instructions live in the quickstart docs.

Ready for production

• ✅ $13.5M total funding
• ✅ Three Fortune-50 deployments
• ✅ 31 ms at p95 — performance benchmarks →
• ✅ Terraform provider →
• ✅ Helm chart →

Deeper docs

• 📖 Platform overview — what's in the box, how the pieces fit together.
• 📐 Deployment — Docker, Helm, Kubernetes, every env var, secrets management.
• 💰 Pricing model — Open Core, free for teams under 30 users, enterprise licensing.
• 🛡️ Security & bug bounty
• 🤝 Contributing — set up the dev env, run e2e tests, open a PR.

Thank you for continuously making Archestra better — you're awesome 🫶

<a href="https://github.com/archestra-ai/archestra/graphs/contributors"> <img src="https://contrib.rocks/image?repo=archestra-ai/archestra" alt="Contributors" /> </a>

---

<div align="center"> <br /> <a href="https://www.archestra.ai/blog/archestra-joins-cncf-linux-foundation"><img src="docs/assets/linux-foundation-logo.webp" height="50" alt="Linux Foundation" /></a> &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; <a href="https://www.archestra.ai/blog/archestra-joins-cncf-linux-foundation"><img src="docs/assets/cncf-logo.webp" height="50" alt="CNCF" /></a> </div>