Archestra

The all-in-one open-source enterprise AI platform.

Built on a strong security and observability foundation: SSO and RBAC, sandboxed code execution, Lethal-Trifecta guardrails, OpenTelemetry traces, and Prometheus metrics — first-class, not bolted on.

Quickstart  ·  Docs  ·  Releases  ·  Slack

https://github.com/user-attachments/assets/912b85e2-ef14-4e83-a807-5e2a81457a88

---

What it does

Point your users — or your agents, or Claude / Codex / Cursor — at one URL. Archestra handles the rest:

• 💬 Chat for non-technical users. Internal AI assistant with projects, MCP apps, and Slack, MS Teams, and email front-ends.
• 🛠️ Developer LLM & MCP portal. One token for Claude Code, Codex, Cursor — see the proxy.
• 🚪 LLM gateway for any provider (Anthropic, OpenAI, Azure, Bedrock, DeepSeek, …) with cost limits, virtual API keys, and dynamic model routing.
• 🔌 MCP gateway with OAuth + On-Behalf-Of so tools run as the user, not a shared service account.
• 🤝 A2A gateway for agent-to-agent triggers.
• 📦 Private MCP registry so teams ship their own tools — see registry docs.
• 🎼 MCP orchestrator with a Kubernetes operator and self-serve promotion.
• 🤖 Agent runtime with scheduled / email / webhook triggers, sub-agent delegation, reusable skills, sandboxed code execution, and a K8s-native filesystem.
• 📚 RAG knowledge base plumbed via connectors to your existing stack.
• 🧩 Mini app builder — see apps.
• 🛡️ Deterministic guardrails for tool calls and Lethal Trifecta protections.
• 🪪 Identity & access with SSO (OIDC, SAML, Okta, Entra), RBAC with role mapping & team sync, and secrets management.
• 🌎 Environments with per-env egress policies and per-env cost limits.
• 🔭 Observability out o