Show HN: 自托管公司操作系统,各部门的 Claude Code 和 Codex 智能体
Show HN: Self-hosted company OS, Claude Code and Codex agents in departments

原始链接: https://github.com/OtoDock/oto-dock

OtoDock 是一个自托管的多租户平台,旨在将 AI 智能体转化为协作型数字员工。它基于 Claude Code 和 Codex 构建,支持企业部署能够管理部门、委派任务并在本地服务器或联网硬件上自主运行的智能体。 核心功能包括: * **可定制架构:** 每个智能体均包含人设、持久化记忆、私有/共享工作区、知识库及特定工具。 * **灵活部署:** 在自有基础设施上运行智能体,使用您自己的 Anthropic 或 OpenAI 订阅。智能体甚至可以绑定电话号码以实现语音交互。 * **安全沙箱:** 每个智能体都在带有严格网络和凭据安全策略的隔离内核沙箱中运行,确保团队的数据隐私。 * **企业级就绪:** 支持单点登录 (SSO)、双重身份验证 (2FA)、用户成本追踪以及基于角色的访问控制。 * **可扩展性:** 提供社区插件库以实现一键集成(如 GitHub、Notion、Home Assistant),并支持自定义 MCP 工具。 OtoDock 专为团队设计,提供统一的仪表盘来管理工作流、安排任务并监督智能体会议。该项目采用“公平源码”(FSL-1.1-Apache-2.0) 协议,五人以内免费,并通过单个 Docker 脚本即可轻松安装。

Dimitris 发布了 **OtoDock**,这是一个自托管的“公司操作系统”,旨在通过自主 AI 智能体来管理业务运营。与 Claude Code 或 Cowork 等工具类似,它允许用户在自己的硬件上部署 AI 智能体,并在安全、隔离的内核沙箱(使用 bubblewrap 和 pasta)中运行。 主要功能包括: * **多租户协作:** 支持四种不同的团队协作模式。 * **灵活的 AI 集成:** 兼容 Anthropic、OpenAI 或本地模型。 * **广泛的能力:** 智能体可以处理复杂任务,如拨打电话(通过 Twilio/Asterisk),以及进行带有实时预览的办公文档或视频编辑。 * **连接性:** 智能体可通过出站 WebSocket 在远程计算机之间同步,无需 VPN 或开放入站端口。 OtoDock 采用 Fair Source 许可协议分发,最多支持五名用户免费自托管。该项目部分功能由其自身的 AI 智能体构建而成,可通过简单的 Docker-compose 安装。开发者目前正在征求社区关于安全性和沙箱模型的反馈,以进一步完善平台。 **GitHub:** [github.com/OtoDock/oto-dock](https://github.com/OtoDock/oto-dock) **网站:** [otodock.io](https://otodock.io)
相关文章

原文

OtoDock

OtoDock — Collaborative Agents

The brains of your company, built on Claude Code & Codex, working on your Anthropic and OpenAI subscriptions.

License: FSL-1.1-Apache-2.0 Version CI Docs Website

Docs · Install · Features · Discussions

Self-hosted · Multi-tenant by design · Fair source
Runs on  Claude Code · Codex · your API keys · local models

Seven faces of the OtoDock dashboard: the company map, an agent's dashboard, an Excel file in the chat, an artifact, the tools page, a meeting and the terminal

Dashboard highlights. The two-minute video tells the whole story.

If OtoDock is useful to you, a star on this repository helps other people find it.


OtoDock acts as the brain of your company. You create powerful agents that connect to the tools your company runs on, work in departments, delegate to each other, and keep working on their own when no one is watching. It is multi-tenant by design. Many people work with the same agents, and there are four modes that decide how an agent is shared and where its work lands. You work with your agents on your self-hosted dashboard, or you can even give them a phone line and talk to them. All of it runs on your own Anthropic and OpenAI subscriptions, and on local models.

Every agent gets a name and a job, like a Personal Assistant, a System Admin or a Marketing Manager, and runs on your server. An agent is made of six parts, and you can edit every one of them.

  • Persona. Plain-language instructions tell the agent who it is and how it works.
  • Memory. The agent keeps its own notes across chats.
  • Workspace. The folder where the everyday work lands. It is private for each person, shared by the whole team, or both, depending on the agent's mode.
  • Knowledge. Reference documents are always on hand.
  • Skills. The agent learns techniques it can apply to its work.
  • Tools. The agent uses only what it is allowed to use.

An agent with its six parts around it: persona, memory, workspace, knowledge, skills and tools

Four ways to share one agent

Every agent has a mode that decides how people share it.

Mode What it means
Personal only A private workspace for each person.
Personal + shared A private workspace for each person as the default, and a shared one for the team.
Shared + personal A shared team workspace as the default for everyday work, plus a private one per person.
Shared only Everyone shares one history and one workspace.

Everyone gets the right seat

Admins add each person to the agents they need.

Three platform roles Three roles on every agent
An Admin runs the platform. A Manager has full control of the agent.
A Creator creates agents. An Editor edits the shared files.
A Member uses the agents they are given. A Viewer chats and reads the shared files.

Claude Code or Codex. Your subscription.

Claude Code runs on your Anthropic subscription, and Codex runs on your ChatGPT subscription. Every user connects their own subscription. Local models on your own hardware work as well. You pick the engine per agent, and you can switch it per chat.

Claude Code and Codex plugged into one agent, each with a your-subscription tag

They work while you are away

Agents run on any schedule, when a webhook event fires, or once at a time you choose. They work in your workspace, where their reports, files and updates land, and they notify you when something needs you. Notifications come in four severities, from a quiet chime to a persistent danger alarm. Every run is a full chat you can open, read and continue, so no one has to be watching.

Three triggers feeding an agent that works in the workspace and sends notifications

Give an agent a phone number

Agents answer and place phone calls. Bring your own Twilio account, or connect the Asterisk or FreePBX server you already run.

An agent with a phone number, taking incoming and outgoing calls over Twilio or Asterisk and FreePBX

Runs on your server. Works on your machines.

By default, all your agents run on your server, in an isolated sandbox, with one dashboard controlling all of them. You can also pair a laptop, a workstation or a PC running macOS, Linux or Windows with a one-line install. The machine keeps a single outbound connection to your server, so it needs no open ports, and its files stay in sync. The same agent then runs on that machine with full access to it, and you work with it from the same dashboard, anywhere. If the machine goes offline, your server takes over.

Your server with its agents, linked to a paired laptop, workstation and PC

Your own cloud of agents.

hero-v8-web.mp4

This entire video was directed, captured and edited by an OtoDock agent. Watch it in full quality on otodock.io.

The 3D company map: the Engineering, Marketing and Independent stages with their agents and the delegation lines between them The CEO agent's dashboard: the company graph and the day's numbers, kept fresh by the agent
Departments. Organize your agents into departments, decide who can delegate to whom, or put them in a meeting together. Live dashboards. Every agent gets live dashboards, so you can manage them effortlessly.
The home agent's control panel: alarm, climate, scenes and light sliders, run by the agent An Excel workbook opened and edited inside the chat, sheets and charts included
Endless tools. Your agents are digital employees. They connect to endless tools, from your calendar to your smart home. Documents. They edit Excel, Word and PowerPoint files right in the chat.
An interactive party budget built by the agent, rendered inside the chat The CEO agent opening a meeting with the developer agent, its work streaming live in the chat
Artifacts. Agents answer with live, interactive UI, rendered right in the chat. Meetings. Specialist agents discuss a topic together and converge on an answer, live in the dashboard.
A Claude Code terminal running inside the dashboard with the agent's tools loaded Your server and the paired machines it runs agents on
Terminal. The Claude Code or Codex terminal opens in the dashboard, with the agent's tools already loaded. Remote machines. The same agent, with all its tools and its synced workspace, runs on any machine you pair with one command, and it can use everything on that machine.

Agents are powerful, so OtoDock assumes they can't be trusted. Every server-side agent runs inside a kernel sandbox with always-on network isolation, and you grant access one service at a time.

  • A kernel sandbox around every agent. Each session runs in its own mount and process namespace. Folders are mounted automatically from each user's role per agent.
  • Network isolation. Private ranges, your LAN, and cloud metadata endpoints are unreachable by design. MCP tools that need a local service can be granted scoped access by the admin, per agent.
  • Secure credentials. Credentials are encrypted at rest and injected only per session. Agents can use them, but never see them.
  • Ready for teams. SSO sign-in, two-factor auth, and per-user cost budgets come standard, from the first install.

Read the security model →

One platform, the whole toolkit.

  • Memory that persists. Agents keep transparent, editable memory files, per user and per agent.
  • Documents and files. Agents create and edit Word, Excel, PowerPoint and PDF files, and every file opens in a live editor inside the chat.
  • Images. Agents generate and edit images in the chat, and a professional-grade pipeline handles photo editing.
  • Video and audio. Agents generate footage and transitions, cut timelines, add captions, voice-overs and music, transcribe audio and video into text and subtitles, and produce speech and music of their own.
  • Web browsing. The browser tool from the community catalog lets agents research the live web.
  • Built-in tools. Schedules, triggers, notifications, meetings, delegation, phone calls, file transfer between agents, live charts and mini-apps, SSH hosts, and browser and computer control on paired machines all ship with the platform.
  • Community catalog. Ready-made agents, tools and skills install in one click, with GitHub, Notion, Home Assistant, Nextcloud, Prometheus, UniFi and Uptime Kuma among them, and more landing regularly.
  • Extensible by design. Any MCP tool server installs from a manifest, and tools are assigned per agent.
  • Usage and budgets. Costs are tracked per user and per agent, with weekly or monthly limits.
  • Team-ready security. SSO and OIDC, two-factor auth, per-agent roles, encrypted credentials and scoped API keys come from day one.

See all features at otodock.io/features.

A Linux server with Docker is all you need (4 GB RAM minimum, see the sizing guide). Create a folder for the install, then run the script in it:

mkdir otodock && cd otodock
curl -fsSLO https://raw.githubusercontent.com/OtoDock/oto-dock/main/scripts/install.sh
bash install.sh

The installer checks Docker, writes a .env with a generated database password, handles the Ubuntu 24.04+ host step automatically when the host needs it, downloads the release-pinned docker-compose.yml plus the phone-service overlay, and starts the stack. Everything lands in the folder you run it from. The script performs fresh installs only, and stops rather than touch an existing install.

If your users browse to the server by name or IP, set DASHBOARD_PUBLIC_URL in the generated .env. Behind a reverse proxy, also set TRUSTED_PROXY to your proxy's IP (reverse proxy & HTTPS). Every optional knob is documented in the Configuration reference, and the installation guide also covers building from source, bare-metal development, and running behind a reverse proxy with HTTPS.

Open http://localhost:8400 and the setup wizard greets you. Create the owner account, and OtoDock installs the Personal Assistant for you, with the tools it needs. Connect your Claude or ChatGPT subscription under Setup, AI Engines, and the banner that reminds you goes away. Open the Personal Assistant from the Agents page and send it your first message. Its reply streams in live, with every tool call and every file it creates (First run). From there you add agents from the community catalog or build your own, and you add the people who will work with them.

 dashboard/   React dashboard — chat, agents, tasks, files, admin
 proxy/       Platform core (FastAPI) — sessions, security, scheduling,
              the agent sandbox, and the WebSocket hub the dashboard talks to
 mcps/        MCP tool servers: OtoDock's custom set (files, memory, tasks,
              meetings, notifications, …) + community mirrors
 audio/       Speech package — STT / TTS / voice activity, provider-agnostic
 phone/       Telephony daemon — live calls over Twilio or FreePBX/Asterisk
 satellite/   Remote-machine agent — pairs your own hardware to the platform
 scripts/     Install, compose, backup/restore, and maintainer tooling

Agents run as Claude Code / Codex processes inside per-session kernel sandboxes, talk to their tools over MCP, and stream every step back to the dashboard. PostgreSQL holds the platform state.

Contributions are welcome: see CONTRIBUTING.md. Security reports: SECURITY.md.

OtoDock is fair source: licensed under the Functional Source License, v1.1, with Apache 2.0 future grant (FSL-1.1-Apache-2.0). You can use, run, modify, and redistribute it for anything except competing with OtoDock commercially — and each version automatically becomes plain Apache 2.0 two years after its release.

Self-hosting is free for up to 5 users. Growing teams license by seats. Same software, signed key, no feature gates on your data or your agents.

OtoDock started with Claude Code. I wanted to use it beyond the terminal and connect it to my services. So I built the platform around that idea. It has since become the place where my own agents work: large parts of OtoDock were built, tested, and shipped by agents running on OtoDock.

It's fair source so you can run it the same way for your company, and you can share your builds in the discussions.

— Dimitris Mourtzis

联系我们 contact @ memedata.com