mcp server
agent-pier
Self-hosted workspace for coding CLIs, mobile chat and reviewed agent pipelines
Set up
Runs on your computer. Pick your agent and operating system.
This project does not publish an install method we can turn into a config. Follow the README instead.
README
synced Oct 25, 2026AgentPier
Your coding CLIs and personal agents, on your own machine.
Self-hosted workspace for coding CLIs (Codex, Claude Code, OpenCode) and persistent personal agents. Native terminals and chat on desktop and phone, reviewed pipelines, and agents that work as a team.
Deutsch · Docs index · Contributing · Security · License
What you get
- Native CLI sessions: real tmux-backed terminals with each CLI's own login, models and prompts, plus a chat view that shows replies while they are written, completes the CLI's own slash commands, skills and plugin commands, recovers on the phone and takes dictation (slash commands, live updates, reload and resume, mobile delivery, dictation).
- Inbox: every CLI question and approval, pipeline gate and agent request that waits on you, with live counts, answered in place or in one list; Claude Code approvals offer Always allow per account and show plans before you approve them (inbox).
- Pipelines with review: reusable profiles, isolated Git worktrees, parallel reviewers whose verdicts are joined, bounded review loops, checks, a risk gate for sensitive paths, a token budget per run, a run queue per project with a concurrency limit and human approval, plus a built-in software factory from spec to pull request (pipelines).
- Agents and teams: persistent agents whose leads ask and delegate to their members on request, by suggestion or on their own and share their project folders, coding projects and MCP servers with them or set up routines on them that report back, members that agree among themselves and report to their lead, Agency agents as templates for agents and members, work goals that keep an agent going until the job is done, optional nightly dreaming that tidies each agent's memory, hooks that let monitoring and other systems wake an agent, with @-mentions, Telegram, skills, routines, check-ins, files in both directions, images created through ChatGPT, PDFs read with the agent's own model (or an optional fallback), read or read-and-write access to project folders and GitHub through your token profiles (agents).
- Users: add family members who sign in with their own password and chat privately with their own or shared agents, locked away from shell, coding and the rest of your workspace; you read their chats only when you switch it on (users).
- Central MCP servers: add a server once and bind it to agents and to your coding CLIs, with OAuth sign-in from AgentPier and per-agent folders for local servers (MCP).
- SSH and SFTP: SSH and SFTP hosts with a pinned host key (SFTP with a password or a key) that coding CLIs and agents use, with approvals for changes and deletes, whole-folder transfers, syncs and live activity rows; agents can propose a new SSH access that you confirm after checking its host key (SSH, SFTP).
- Secrets: named secrets, such as API tokens, that you grant to agents and coding sessions as a file, never as an environment variable (secrets).
- Connections: model access (provider connections and ChatGPT for agents), services for agents, MCP servers, SSH/SFTP accesses, secrets and GitHub connections in one place, created once and granted where they are used, each with Used by (providers). Native CLI accounts, skills, plugins and subagents are under CLIs and extensions (shared CLI extensions).
- Files and knowledge: a file explorer, private artifacts, shared project memory and AgentBus between sessions (files, artifacts, memory, AgentBus).
- Phone-first: install as an app, push notifications, and delivery and upload recovery (notifications, mobile recovery).
- Operations: backups, updates with Stable and Preview channels, an activity log, and a system status on the start page with disk, CPU and RAM, AgentPier's own share, a low-disk warning and cleanups for old update backups, transcripts and agent dependencies (backups, release channels, system status).
Requirements
- macOS 14 or later (Apple Silicon or Intel), or Linux on x64 or arm64. Intel Macs are supported, but the full native agent qualification covers Apple Silicon and Linux only.
- Node.js
^22.23.4 || ^24.22.1 || >=26.12.1(22.23.4+, 24.22.1+ or 26.12.1+; Node 23 and 25 are not supported; bundled in release packages), Git and tmux. - Optional: Tailscale for remote access, and a Chromium-based browser for the agents' browser tool (Brave or Chromium for visible agent browser windows; AgentPier can install a managed Chrome for Testing for them with one click).
- At least one coding CLI or model provider. Provider accounts and their costs are your own.
Install
macOS, install script. Installs prerequisites and the login service:
(agentpier_tmp=$(mktemp -d) && trap 'rm -rf "$agentpier_tmp"' EXIT && curl --fail --show-error --location --proto '=https' --proto-redir '=https' --tlsv1.2 https://github.com/Ranger-Marketing-Vertriebs-GmbH/agent-pier/releases/latest/download/install-agentpier.sh -o "$agentpier_tmp/install.sh" && /bin/sh "$agentpier_tmp/install.sh")
macOS, Homebrew:
brew install ranger-marketing-vertriebs-gmbh/tap/agentpier-installer && agentpier-install
Both open AgentPier at http://127.0.0.1:4380. Options: installation guide.
Linux. Download the .aprelease package for your architecture from the
releases
and install it with sh scripts/install.sh --archive <package> --service from a
checkout. See the Linux guide and the
exact commands.
From source (macOS or Linux):
git clone https://github.com/Ranger-Marketing-Vertriebs-GmbH/agent-pier.git
cd agent-pier
npm ci
npm run build
npm start
First steps
- Open http://127.0.0.1:4380 and create the workspace user. Later visits need the login. Finish this before you share access.
- Open the sidebar Menu (group Set up): sign in to a coding CLI under CLIs and extensions › Accounts, or add a provider connection under Connections › Model access. Missing CLIs can be installed from the overview or under CLIs and extensions › Installation. Search (⌘K or Ctrl+K) finds every page, agent and action, also by its old name.
- Choose + in the sidebar's Sessions group (on a phone, + › Session in the header), pick a CLI, an account and a project folder, and start. The native terminal handles CLI logins and menus; the chat shows the saved conversation.
- Optional: open Agents from the Menu, choose Enable agents and create one with New agent (agents guide).
Choose German or English under Settings › General › Language. Stopping the web server leaves CLI sessions running; stop a session in the interface to end its CLI process.
Update
Installed versions update under Settings → Operations → Updates, on the
Stable or Preview channel (release channels). A
failed start returns to the previous version. Coding CLIs update from the overview
(CLI updates); a CLI AgentPier installed cannot start sessions
below its minimum version until it is updated. A source checkout updates with git pull,
npm ci and npm run build (updating).
Upgrading from 1.x
- There is no rollback to 1.x after the update, and backups made by 2.0 cannot be restored on 1.x. Take a backup before updating if you might go back.
- Sign in again once to OAuth MCP servers used from managed Codex accounts.
- Lead agents now ask and instruct their members without an approval prompt.
- Settings moved: shared credentials are under Connections, CLI accounts and extensions under CLIs and extensions, the agent service under Agents › Runtime, the rest in the Settings tabs; old links still work.
- Backups copy CLI profiles by allowlist, include histories (AgentPier's sessions, chats and AgentBus messages, and CLI histories) only encrypted with a passphrase, and restored hook scripts need
chmod +xagain.Details: Upgrading from 1.x.
Guides
The docs index lists every guide.
| Area | Guides |
|---|---|
| Use | Inbox · Providers · Pipelines · Files · Artifacts · MCP · SSH · SFTP · Secrets · Notifications |
| Agents | Agents · Users · Workflows · Model connections · Runtime updates |
| Operate | macOS · Linux · Remote access · Backups · Operations · System status · Sandbox |
| Develop | Architecture · UI guide · Settings pattern · Testing · Frontend · Contributing |
Data and security boundaries
AgentPier is a trusted personal workspace, not an isolation boundary between users.
Its data lives in .data/ for a source checkout and in
~/Library/Application Support/AgentPier for a macOS installation. The data holds
credentials, profiles, session metadata and conversations with private file
permissions, but is not encrypted at rest. The login protects the web workspace;
remote access explains Tailscale Serve and the network mode.
Users you add reach only their own app and their agents' chats, never
your workspace, files or settings; the operating-system user and its data stay yours.
Coding CLIs and agents run as your operating-system user. The optional nono sandbox confines CLI sessions only, not agents. An agent with shell access works with your logins, files and keys; local MCP servers run commands on the host; an agent's own Telegram bot answers the people you allow; and a lead agent's questions and tasks run on its members without approval. See SECURITY.md.
Development
npm ci
npm run check
npx playwright install chromium webkit
npm run test:e2e
AGENTPIER_TEST_BROWSER=webkit npm run test:e2e
For frontend development, run AGENTPIER_DEV=1 npm start for the backend and
npm run dev in a second terminal. Vite serves on port 5173 and proxies /api and
/auth to the backend on 4380; AGENTPIER_DEV=1 lets the backend accept that dev
origin. In a pipeline stage with a leased port block, both follow AGENTPIER_PORT
(see Ports and browser sessions).
Bug reports, documentation improvements and focused pull requests are welcome. Start with CONTRIBUTING.md, the testing guide and the frontend architecture. Report vulnerabilities privately using SECURITY.md.
License
AgentPier is licensed under Apache-2.0. Bundled AgentBus retains its MIT license. Dependencies and provider marks retain their respective notices and rights; see third-party notices.