Open source · Apache 2.0 · Self-hosted

One chat. Multiple AI agents working in parallel.

HydraOps is a multi-agent system that runs on your machine. Agents with their own personality write code, answer questions and generate images and video, with API or local models. Your keys never leave home: everything goes through a credential firewall.

Download for Windows Install on Linux & macOS View on GitHub

I use it every day on my own machine. There is a Windows desktop installer and a headless server mode; a container image is on the way.

Works with your API key from

OpenAIAnthropicGeminiGroqxAIMistralDeepSeekQwenKimiGLMMiniMaxOpenRouterLeonardo

and with local models, no key needed, via

llama.cppLM StudiovLLMOllama

See it work

Real recordings of the app with real models. The waits while the model thinks are sped up.

Karen looks up the five biggest casual games on Google Play. The line under the dots shows each step (searching, reading a page…) and the reply comes with a table and its sources.

What you get

If you have tried OpenClaw-style personal assistants, this is the multi-agent take: several agents in one chat, orchestrated locally. No mandatory external services. Your keys and your data never leave your machine.

Agents with personality

Each agent is six Markdown files, editable from the interface itself: soul, skills, tools, memory, heartbeat and profile.

Four worker types

Code, general, image and video. Each one has its own engine and resolution, and you can configure them per agent.

Extensible tools

Native add-ons, your own in my_addons/ with hot loading, and MCP servers over HTTP.

Credential firewall

API keys are never in the repository, the database or the .env: a local proxy injects them at the network boundary. Workers only ever see the "proxy" placeholder.

Tool guard

Every tool goes through a filter that blocks credential paths, catastrophic commands and requests to internal networks, and redacts secrets from results.

Full-featured chat

Attachments, inline images and video, scheduled tasks (cron), statistics and an interface in five languages: es, en, it, fr and pt-BR.

Works with your tools

Apps on your computer and online services on top, HydraOps' own tools below. Tokens stay in the local key proxy.

Blender

Builds and edits scenes in the Blender you have open.

Read the post →

ComfyUI

Runs the workflows you saved: images, video and 3D on your own GPU.

Read the post →

Unity

Builds scenes in your Unity 6 editor, runs tests and builds.

Playwright

Microsoft's real browser: pages that need JavaScript, clicks, forms, screenshots.

MarkItDown

Microsoft's converter: PDFs, Office files and web pages into Markdown.

Brave Search

Web results from the Brave Search API, by region.

Perplexity

One up-to-date answer with its sources, instead of a list of links.

ChatGPT

Ollama · LM Studio

Local models on your machine through Ollama, llama.cpp, LM Studio or vLLM.

GitHub

Reads code, triages issues and PRs, comments. Your token decides what it may write.

Read the post →

Talk to your agents from the phone and approve held actions there.

Read the post →

X

Posts to your accounts, several if you like. Every post waits for your approval.

Hugging Face

Searches models and datasets, reads licenses, checks gated access.

Civitai

Finds checkpoints and LoRAs with their trigger words. Read only.

Calendar

A shared calendar with notes and tasks scheduled for an agent. Changes wait for your approval.

Tasks

Runs a prompt by itself on a schedule; the result arrives in the chat or on Telegram.

3D

Turns a description into a 3D model with your own model, rendered in a sandbox.

Read the post →

Remember

Keeps short notes that apply to every future conversation.

Read the post →

Recall

Searches your past conversations by keyword.

Read the post →

Workflows

Picks a ComfyUI workflow you saved, changes only what you asked and brings back the result.

Read the post →

Plan

/plan proposes the steps. Nothing runs until you approve.

Read the post →

One Shot

Draw the task as a diagram and get one self-contained prompt.

Read the post →

Skills

Know-how for the agents from the catalog or any GitHub repository, checked before it installs.

Commands

Type / for verbs that cost no tokens: /agents, /status, /remember. Also on Telegram.

Delegate

Hands a task to another agent; the reply lands in that agent's chat.

Send to Telegram

Sends a message or a result to your phone when you ask for it.

Image edit

Crops, rotates, resizes, trims the background or puts several images on one sheet.

Web search

Searches the web and returns a short list of links. No key needed.

Fetch URL

Reads a page you already know as Markdown. Also reads RSS and Atom feeds.

YouTube

Reads a video's transcript to summarize or quote it.

HydraOps is not affiliated with or endorsed by the companies named here. All product names, logos and brands are property of their respective owners.

Architecture

A pnpm monorepo in TypeScript ESM. No service publishes directly to NATS: everything is written to a SQLite outbox first and a single process drains it, so a network failure never loses events.

UI · Angularthe chat and every view
API · ExpressREST and file server
SQLite outboxevery event is persisted before it travels
outbox-workera single process drains the outbox to NATS
NATS JetStreamthe message bus
Orchestratorassigns each task to the right agent
Workerscoder · general · graphic · video: they run the task and send the result back to the chat

Security built in

Four things already taken care of, so you don’t have to think about them.

Keys never cross the firewall

They live outside the project and the key-proxy injects them at the network boundary: neither the workers, nor the database, nor the .env ever see a real key.

A guard on every tool

It blocks credential paths and destructive commands, redacts secrets from results, and keeps fetch_url away from internal addresses.

The API listens only on 127.0.0.1

Out of the box it is not reachable from another machine. Nothing gets exposed by accident.

Opening it to the network requires a token

With HYDRA_HOST=0.0.0.0 the API demands a HYDRA_AUTH_TOKEN: the browser asks for it once, and with no token defined the API simply refuses to open up.

To report a vulnerability: security@hydraops.org

Install

Three ways to get it running, from fastest to most flexible.

Windows installer

Download the .exe from Releases. It needs no Node and no pnpm: the services run on the Node bundled with Electron. Your data and keys stay outside the installation directory and the app updates itself.

Download .exe

From source

For Windows, Linux and macOS. Requirements: Node 20+, pnpm 9 and the nats-server binary (on your PATH, in a nats/ folder inside the repo, or via NATS_SERVER_BIN in the .env). No build steps to remember: pnpm desktop builds packages and interface and opens the app window.

git clone https://github.com/TraX22/HydraOps.git
cd HydraOps
pnpm install
cp .env.example .env
pnpm desktop

24/7 server mode

For a screenless mini PC: a single command builds, brings up NATS and all eight services, applies migrations and seeds the database, health-checks each phase and restarts anything that crashes. A systemd unit ships in deploy/.

pnpm serve