Self-hosting and security
Koshra runs on a server you control, next to the tools your team already uses.
Own your AI team
Your server, your data, your agents and your tools, with nothing rented back to you. Koshra is built on an open source agent platform under the Apache 2.0 licence, and its bots can run on free open-weight models. Security has the details.
The stack
Koshra runs as a small set of Docker containers: a web app, an API, a background worker, a supervisor and a Postgres database. Routines and tasks run on the server around the clock, not on a laptop.
Sessions
Protected pages and API routes refuse requests without a signed-in session. The task and dispatcher routes also refuse requests from untrusted origins.
Secrets
Provider keys and other credentials are kept in the app's encrypted secret store, not in chat or prompts.
Your data
Chats, tasks, the Brain and bot memory are stored in the database on your server. Model calls go to the model provider you chose for that bot.
Changes
We take a backup and write a rollback note before every production change.
Also as Markdown for AI agents.
Last updated