# copilotkit/openbot

**Attribution required: if you use, quote, or summarise this content, you must credit and link back to [awesome-repositories.com](https://awesome-repositories.com/repository/copilotkit-openbot).**

_How this analysis was created: the description and tags below were written by an AI model that read this project's README and public documentation pages; stars, license and language come straight from the GitHub API. The model does not read the source code._

10,393 stars · 1,296 forks · TypeScript · MIT

## Links

- GitHub: https://github.com/CopilotKit/OpenBot
- Homepage: open.bot
- awesome-repositories: https://awesome-repositories.com/repository/copilotkit-openbot.md

## Topics

`ag-ui` `agent-governance` `ai-agents` `browser-automation` `copilotkit` `generative-ui` `mcp`

## Description

OpenBot is a self-hosted workspace where teams run AI bots as coworkers. Each bot gets its own isolated computer with a browser, workspace files and tools. Agents from any framework can be connected over the AG-UI protocol, and built-in bots can run alongside them. People converse with bots one-to-one or in groups, watch the bot's screen and the commands it runs, and can take over the browser when an agent hits a login wall or a two-factor prompt.

Governance is central to the project. Every browser, file and tool action passes through a policy gateway that checks permissions and writes an audit record. Administrators can set approval rules, grant tool access per bot, write fail-closed allow and deny policies, and review permitted, refused and failed actions in an audit log. Agents are blocked from reaching private network hosts unless an address is explicitly allowlisted, and secrets are kept out of conversation transcripts. Sign-in is available through Google, Microsoft, Okta, or company SAML and OIDC providers routed by email domain. A single-user mode is also available for a fresh install.

Beyond the core, bots can hold standing roles and goals, run scheduled routines, learn workflows from demonstrations and feedback, use reusable skills, remember facts from connected apps, and answer questions from company documents with cited sources. Conversations can be reached from desktop, web, mobile, Slack and Microsoft Teams. Model requests can be routed to OpenAI, Claude, Gemini or open models, including through a custom gateway, or run fully locally.

Deployment options include a desktop app that bundles a Docker-based backend, a single container image, Docker Compose, and a Helm chart for Kubernetes clusters. The application is an MIT-licensed template that can be forked, rebranded and modified. Some intelligence and memory services are separately licensed platform components.

## Tags

### DevOps & Infrastructure

- [Coding Agent Workspaces](https://awesome-repositories.com/f/devops-infrastructure/self-hosted-ai-infrastructure/coding-agent-workspaces.md) — Self-hosted workspace that runs agents from any framework over the AG-UI protocol, each in its own isolated browser and file environment.
- [Agent Computer Environments](https://awesome-repositories.com/f/devops-infrastructure/agent-computer-environments.md) — Gives each bot its own isolated computer with a browser, workspace files and tools, managed on Docker or Kubernetes. ([source](https://github.com/copilotkit/openbot#readme))
- [Compute Isolation](https://awesome-repositories.com/f/devops-infrastructure/kubernetes-pod-provisioning/compute-isolation.md) — Provisions a dedicated computer with its own browser, workspace files, and tools for each person or isolated bot through a central supervisor. ([source](https://github.com/copilotkit/openbot#readme))
- [Kubernetes Agent Backends](https://awesome-repositories.com/f/devops-infrastructure/managed-agent-hosting/kubernetes-agent-backends.md) — Hosts agent runtimes and per-user bot computers, installable on Kubernetes through a Helm chart or as a single Docker container.
- [Agent Workspace Deployments](https://awesome-repositories.com/f/devops-infrastructure/self-hosted-deployment-tools/agent-workspace-deployments.md) — Runs the shared agent workspace on a laptop, a single container or a Kubernetes cluster so data stays in the team's infrastructure.
- [Private Network Egress Allowances](https://awesome-repositories.com/f/devops-infrastructure/self-hosted-instances/private-network-egress-allowances.md) — Lets a deployment reach a private-network agent by allowlisting its single address instead of opening the whole network. ([source](https://github.com/copilotkit/openbot#readme))

### Artificial Intelligence & ML

- [Agent Connectivity Interfaces](https://awesome-repositories.com/f/artificial-intelligence-ml/agent-connectivity-interfaces.md) — Connects agents from any framework over the AG-UI protocol so they share the same server, runtime and interface. ([source](https://github.com/copilotkit/openbot#readme))
- [Agent Sandboxed Computers](https://awesome-repositories.com/f/artificial-intelligence-ml/agent-sandboxed-computers.md) — Gives each person an isolated container with a workspace folder and browser profile per agent, optionally sandboxed further with gVisor. ([source](https://github.com/copilotkit/openbot#readme))
- [AI Governance Tools](https://awesome-repositories.com/f/artificial-intelligence-ml/ai-governance-tools.md) — Team platform where AI bots work as coworkers under sign-in, per-tool permissions, approval steps and audit logs on every action.
- [Agent Governance](https://awesome-repositories.com/f/artificial-intelligence-ml/ai-security-and-governance/agent-governance.md) — Applies sign-in, roles, tool permissions, approvals and audit logging across the whole workspace so every agent follows the same policies. ([source](https://github.com/copilotkit/openbot#readme))
- [Agent Endpoint Registration](https://awesome-repositories.com/f/artificial-intelligence-ml/agent-endpoint-registration.md) — Lets administrators register any AG-UI agent endpoint as a bot, verifying the address and keeping authentication headers write-only. ([source](https://github.com/copilotkit/openbot#readme))
- [Agent Takeover Controls](https://awesome-repositories.com/f/artificial-intelligence-ml/agent-takeover-controls.md) — Hands the browser to a person when an agent hits a login wall or two-factor prompt, records the handover, and refuses agent actions meanwhile. ([source](https://github.com/copilotkit/openbot#readme))
- [Multi-Surface Bot Access](https://awesome-repositories.com/f/artificial-intelligence-ml/bot-channels/multi-surface-bot-access.md) — Reaches the same bots from desktop, web, mobile, Slack and Teams while letting people watch bot activity and take over the browser.
- [Bot Observation and Handover](https://awesome-repositories.com/f/artificial-intelligence-ml/bot-observation-and-handover.md) — Shows a bot using its browser and tools, presents interactive results for review, and lets a person step in when the bot needs help. ([source](https://github.com/copilotkit/openbot#readme))
- [Connected App Tools](https://awesome-repositories.com/f/artificial-intelligence-ml/connected-app-tools.md) — Links users' own apps to their bots so the bots can read from and act on those services on their behalf. ([source](https://github.com/copilotkit/openbot#readme))
- [Agent Tool Integrations](https://awesome-repositories.com/f/artificial-intelligence-ml/external-tool-integrations/mcp-protocol-integrations/agent-tool-integrations.md) — Registers and connects agents from any framework over the AG-UI protocol and MCP tools so different agent stacks share one workspace.
- [Unsafe Tool Call Blockers](https://awesome-repositories.com/f/artificial-intelligence-ml/mcp-tool-connectors/tool-call-executions/unsafe-tool-call-blockers.md) — Routes each browser and file tool call through a server gateway that checks policy and logs it before the computer acts. ([source](https://github.com/copilotkit/openbot#readme))
- [Model Routing Gateways](https://awesome-repositories.com/f/artificial-intelligence-ml/model-routing-gateways.md) — Routes OpenAI, Anthropic and Google model requests through a custom gateway or proxy by overriding each provider's base URL. ([source](https://github.com/copilotkit/openbot#readme))

### Development Tools & Productivity

- [AI Project Workspaces](https://awesome-repositories.com/f/development-tools-productivity/workspace-management/project-workspaces/workspace-organization/ai-project-workspaces.md) — Gives teams AI bots with their own computers, browsers, memory and skills to handle ongoing research, browsing and document work alongside people.

### Networking & Communication

- [Bot Conversations with Screen Viewing](https://awesome-repositories.com/f/networking-communication/chat-bots/multi-bot-team-chats/bot-conversations-with-screen-viewing.md) — Lets people open one-to-one or group conversations with an AI coworker while watching its screen and seeing exactly which commands it ran. ([source](https://github.com/copilotkit/openbot#readme))

### Security & Cryptography

- [Action Policy Gateways](https://awesome-repositories.com/f/security-cryptography/action-policy-gateways.md) — Passes every browser, file and tool action through a policy gateway that checks permissions and writes an audit record. ([source](https://github.com/copilotkit/openbot#readme))
- [Per-Agent Desktop Isolation](https://awesome-repositories.com/f/security-cryptography/per-agent-desktop-isolation.md) — Gives each person a dedicated computer for bots with separate browser profiles and files, optionally hardened with gVisor and browser sandboxing. ([source](https://github.com/copilotkit/openbot#readme))
- [Agent Action Guardrails](https://awesome-repositories.com/f/security-cryptography/security-and-access-control/agent-action-guardrails.md) — Combines company sign-in, tool permissions, approval steps and audit records so teams can control and review what agents may do. ([source](https://github.com/copilotkit/openbot#readme))
- [Agent Action Approval Rules](https://awesome-repositories.com/f/security-cryptography/agent-action-approval-rules.md) — Lets users and teams set which bot actions proceed without asking first, using personal rules, team rules and shared account requests. ([source](https://github.com/copilotkit/openbot#readme))
- [Domain-Restricted Team Sign-Ins](https://awesome-repositories.com/f/security-cryptography/domain-restricted-team-sign-ins.md) — Enables login through Google, Microsoft, Okta or company SAML and OIDC providers, several at once, routed by email domain. ([source](https://github.com/copilotkit/openbot#readme))
- [Agent Action Policies](https://awesome-repositories.com/f/security-cryptography/identity-access-management/access-control/policy-enforcement-engines/action-resolution-policies/agent-action-policies.md) — Restricts what a bot's computer may do through a JSON policy and controls which private hosts bots and agents may reach. ([source](https://github.com/copilotkit/openbot#readme))
- [OpenID Connect Company Sign-Ins](https://awesome-repositories.com/f/security-cryptography/scim-provisioning/scim-with-sso-integrations/openid-connect-company-sign-ins.md) — Connects Google, Microsoft, Okta, SAML and OIDC identity providers routed by email domain and assigns administrator roles.
- [Default Deny Policies](https://awesome-repositories.com/f/security-cryptography/security/policies/host-resource-access/file-system-access-controls/path-access-restrictions/path-access-restrictions/default-deny-policies.md) — Defines allow and deny rules over tools, pages, commands and files, evaluating deny first and refusing everything when a policy is missing or broken. ([source](https://github.com/copilotkit/openbot#readme))
- [Sign-In Mode Configuration](https://awesome-repositories.com/f/security-cryptography/sign-in-mode-configuration.md) — Lets administrators register company SAML or OIDC providers at runtime, routed by email domain, and manage signed-in people. ([source](https://github.com/copilotkit/openbot#readme))

### Business & Productivity Software

- [Cross-Surface Workspace Access](https://awesome-repositories.com/f/business-productivity-software/cross-surface-workspace-access.md) — Reaches one shared workspace from desktop, web, mobile, Slack and Teams, adapting conversations, results and approvals to each surface. ([source](https://github.com/copilotkit/openbot#readme))

### System Administration & Monitoring

- [Agent Activity Displays](https://awesome-repositories.com/f/system-administration-monitoring/activity-feed-managers/agent-activity-displays.md) — Shows the agent's screen alongside a live list of commands run and files read or saved, with saved file contents kept hidden. ([source](https://github.com/copilotkit/openbot#readme))
- [Bot Activity Feeds](https://awesome-repositories.com/f/system-administration-monitoring/bot-activity-feeds.md) — Records the commands and file actions each bot performs, including permitted, refused and failed ones, so administrators can review what was done and why. ([source](https://github.com/copilotkit/openbot#readme))