AgentOS is a durable agent runtime that serves agents over API, MCP, and chat interfaces like Slack. Build customer-facing agents and serve them to your users from your product, through AI apps like Claude and ChatGPT, or interfaces like Slack. AgentOS gives you one agent backend for every frontend.
Three ways to build agents.
- Coding agent. Point a coding agent at the skills in
.agents/skills/and it can create, improve and evaluate your agents for you. - Natural language. Ask the built-in Platform Builder to build agents for you.
- No-code Studio. Build agents visually using the AgentOS Studio.
Three ways to serve your agents to your users.
- Your product. Call the AgentOS REST API from your product.
- AI apps. Connect your agents to Claude and ChatGPT using the AgentOS MCP server.
- Chat interfaces. Distribute your agents through Slack, WhatsApp (and more) using AgentOS Interfaces.
Monitor and govern your agents.
The AgentOS Control Plane gives you a unified view of your agent platform. Trace every action. Enforce agent- and tool-level permissions.
Everything runs in your cloud, your data lives in your database.
Copy this prompt into your favorite coding agent. It sets up the platform and builds your first agent for you:
Help me set up my agent platform and build my first agent.
Clone https://github.com/agno-agi/agentos-modal into a folder called agent-platform, cd in, and run the setup-platform skill (in .agents/skills/).
Your coding agent checks Docker, sets up .env, boots the platform, verifies the MCP endpoint, connects to the AgentOS UI, then builds your first agent. Prefer to drive yourself? See Manual Setup.
Prerequisite: Docker installed and running.
git clone https://github.com/agno-agi/agentos-modal agentos
cd agentos
# Configure credentials
cp example.env .env
# Open .env and set OPENAI_API_KEY
# Run the platform on docker
docker compose up -d --buildConfirm your AgentOS is running at http://localhost:8000/docs.
- Open os.agno.com and sign in.
- Click Connect OS, enter
http://localhost:8000as the URL, name it Local AgentOS, and connect.
- Click Chat under the Agno team and tell it what you're working on: "Help me build an agent for my product".
- Give it the docs URL for your product, or for a product you like —
docs.agno.com, say. - Click the Refresh button on the top right. You should now see your new agent in the Agents dropdown. Chat with it directly, or just ask Agno to run it for you.
Your cloned repo points at this public template. Create your own GitHub repo and point your platform at it:
git remote rename origin upstream # keep the template connected for updates
git remote add origin <your-private-repo-url>
git push -u origin mainHeads up. Create the private repo first (github.com/new, or
gh repo create <name> --private). Keepupstreamconnected, so thatgit pull upstream mainbrings in template updates in the future.
You can run the platform anywhere that supports containerized images. This template deploys the container to Modal (always-warm, single container) paired with Neon serverless Postgres for pgvector persistence (Modal has no managed Postgres of its own) — and a coding-agent skill, /deploy-platform, that will help you deploy it.
Prerequisites: the modal CLI (
pip install modal+modal token new), neonctl (npm i -g neonctlorbrew install neonctl, thenneonctl auth), Python 3, and OpenSSL.
Create a new .env.production file for production credentials.
cp .env .env.production # or cp example.env .env.production
# Edit .env.production with production valuesKeeping a separate .env.production lets us use different values for local and production: different OpenAI keys, production-only credentials, a different Slack workspace.
./scripts/modal/up.shThis creates a Neon Postgres project (pgvector included; connection facts persist to your env file), writes the agentos-secrets Modal secret, and modal deploys the app from modal_app.py — the image is built from this repo's own Dockerfile, kept always-warm with min_containers=1 and capped at max_containers=1 (the in-process scheduler must not run twice). The script then pins AGENTOS_URL to the stable https://<workspace>--agentos.modal.run URL, generates MCP_CONNECT_SECRET (the chat-app OAuth consent secret, printed in the closing summary) when your env file doesn't have one, and pauses for a JWT verification key (see next section).
Neon project & organizations.
up.shcreates the Neon project withneonctl. Neon projects are org-scoped, soneonctl projects createneeds an organization — setNEON_ORG_ID(find it withneonctl orgs list) in.env.productionso the deploy runs unattended instead of stopping at an interactive org prompt. Alternatively, create the project yourself at console.neon.tech and fillDB_HOST/DB_PORT/DB_USER/DB_PASS/DB_DATABASEin.env.production;up.shdetects those and skips creation. In that caseNEON_PROJECT_IDwon't be set, sodown.shcan't delete the database — remove it by hand in the Neon console.
Token-Based Authorization is on by default. Without a JWT_VERIFICATION_KEY or JWT_JWKS_FILE, the app refuses to serve traffic in production. The platform's job is to keep your data private, so the safe default is "refuse to start" without an authentication token.
Token-Based Auth gives you three things:
- No public access. The server rejects requests without a valid token.
- Per-request identity. Middleware parses the token and extracts the
user_id,session_id, and custom claims. Each request is tied to a user and session, giving you auditability and traceability. - Granular permissions. Scopes on the token decide what each caller can do — run agents, read sessions, manage the platform. Admin tokens can do everything; scoped tokens get exactly what their claims grant.
During ./scripts/modal/up.sh, once the app URL exists the script pauses so you can mint the key.
- Open os.agno.com, click Connect OS → Live, and enter your modal.run URL.
- Name it Live AgentOS, flip Token-Based Authorization (JWT) on and connect. The UI generates your public key. (Ran into an issue? Go to Settings → OS & Security → Token-Based Authorization (JWT) to get the key from the settings page.)
- Copy the public key.
- Paste the full public key into the
up.shprompt. The script saves it into your env file for future syncs:
JWT_VERIFICATION_KEY="-----BEGIN PUBLIC KEY-----
MIIBIjANBgkq...
-----END PUBLIC KEY-----"If you run non-interactively or skip the prompt, you can sync environment variables later with ./scripts/modal/env-sync.sh.
The script prints the app URL — open /docs on it, or tail the logs:
modal app logs agentosAgentOS comes with an MCP server at /mcp (wired via mcp=MCPConfig(...) in app/main.py), where Agno itself is published as a first-class agno tool — clients just call it, no id discovery. There are two ways to connect your AgentOS to MCP clients:
- AI Apps like Claude and ChatGPT connect to your AgentOS over the internet using OAuth. Add
https://<workspace>--agentos.modal.run/mcpas a custom connector in the chat app's connector settings. Leave the form's optional OAuth fields (client ID / client secret) empty. Click Connect and, on the consent page, enter theMCP_CONNECT_SECRETthatup.shgenerated during deploy (saved in.env.production). - Coding agents like Claude Code, Claude Desktop, Codex, and Cursor connect to your AgentOS via the MCP URL. Register your AgentOS with the MCP clients on your machine:
uvx agno connect --url https://<workspace>--agentos.modal.runAfter a successful connection, open one of these apps and ask:
can you access my agentos mcp?
./scripts/modal/redeploy.shModal rebuilds the image from the Dockerfile (cached layers where nothing changed) and rolls the always-warm container.
To re-sync environment variables, run the following command:
./scripts/modal/env-sync.shIt rewrites the agentos-secrets Modal secret and redeploys — secrets are read at container start, so the redeploy is what applies them.
./scripts/modal/down.shStops the Modal app and deletes the Neon project, including all data, then verifies both are gone before declaring success.
Change authorization=runtime_env != "dev" to authorization=False in app/main.py and redeploy. Use this only inside a private VPC behind another auth layer. Without it, anyone who guesses your service URL can access your platform.
This platform is designed so that coding agents can drive the entire create → improve → evaluate → maintain lifecycle for you.
Open your coding agent of choice (Claude Code, Codex, Cursor) and run:
/create-agent
It asks a few questions, generates the agent file in agents/, registers it in app/main.py, adds its description and quick prompts to app/config.yaml, restarts the container, and smoke-tests it for you.
Improve your agents by running the following skills:
/extend-agent— Add a tool, add a capability, refine the instructions, fix a known bug./improve-agent— Claude simulates scenarios from the agent'sINSTRUCTIONSand its real usage recorded in the database, runs them against the live container, judges the responses, and edits until they pass.
Run the eval suite to check for regressions. The evals live in evals/cases.py, and run history shows up in the AgentOS UI next to your sessions and traces.
The evals run on the host machine, so set up the venv with ./scripts/venv_setup.sh && source .venv/bin/activate, then run:
python -m evals --tag smoke # fast checks of the self-driving surfaces
python -m evals --tag release # broader pre-release confidence
python -m evals --name <case> # one case while iterating
python -m evals -v # stream the full run with rich panelsIf a case fails, run /eval-and-improve — it diagnoses each failure, fixes what's in scope, and loops until green.
Because the repo is managed by coding agents, it moves fast. Run /review-and-improve before a release or after a refactor: it sweeps for drift between docs, code, and config, auto-fixes mechanical drift like stale paths and missing env vars, and flags anything bigger.
| Variable | Required | Default | Description |
|---|---|---|---|
OPENAI_API_KEY |
yes | none | OpenAI key for models and embeddings. |
RUNTIME_ENV |
no | prd |
dev disables JWT. Compose sets this to dev for local — never put dev in an env file that env-sync.sh pushes to Modal, or production serves unauthenticated. |
JWT_VERIFICATION_KEY |
prd | none | Public key from os.agno.com. Required when RUNTIME_ENV=prd, unless JWT_JWKS_FILE is set. |
JWT_JWKS_FILE |
prd | none | Path to a JWKS file; alternative to JWT_VERIFICATION_KEY for production JWT verification. |
AGENTOS_URL |
no | http://127.0.0.1:8000 |
Scheduler base URL. scripts/modal/up.sh pins it to the stable https://<workspace>--agentos.modal.run URL and writes it back into your env file. Also the public origin OAuth metadata derives from when MCP_CONNECT_SECRET is set. |
MCP_CONNECT_SECRET |
no | none | If set (≥16 chars, e.g. openssl rand -base64 32), /mcp becomes its own OAuth 2.1 authorization server so claude.ai and ChatGPT (web) can connect; connecting asks for this secret on a consent page. Requires AGENTOS_URL. scripts/modal/up.sh auto-generates it on deploy. PAT and JWT bearers keep working alongside. |
AGENTOS_MCP_SIGNING_KEY |
no | none | Optional high-entropy signing-key material (≥32 chars) for OAuth tokens. Unset, a strong key is generated and persisted in the database. Rotating it invalidates outstanding tokens. |
ENABLE_DEPLOY_CHECK |
no | True |
The reference deployment-check cron runs daily by default. This env var owns the schedule's toggle (re-asserted on every boot); the workflow is runnable on demand regardless. |
EVALS_TAG |
no | smoke |
Eval tag run by the run-evals workflow. |
EVALS_CASE_TIMEOUT_SECONDS |
no | 90 |
Default per-case timeout for run-evals runs; applies only to cases that don't set their own timeout_seconds. |
EVALS_SUITE_TIMEOUT_SECONDS |
no | derived | Whole-suite timeout for run-evals runs; per-case timeouts are the granular limit. Unset, it is derived from the cases the tag selects. Set it to override. |
PARALLEL_API_KEY |
no | none | Authenticates Agno's and the Studio registry's web search tools (Parallel SDK when set; keyless MCP fallback). Also the fast route for ingesting a product's docs — clean markdown per page, JS-rendered pages and PDFs included; without it ingestion still works, page by page, just slower. |
SLACK_BOT_TOKEN / SLACK_SIGNING_SECRET |
no | none | Both must be set to enable the Slack interface. The bot token also lights up the registry's send-only Slack toolkit for built agents. |
DB_HOST / DB_PORT / DB_USER / DB_PASS / DB_DATABASE |
no | matches compose | Postgres connection. |
DB_DRIVER |
no | postgresql+psycopg |
SQLAlchemy driver. |
NEON_PROJECT_ID |
no | none | Modal deploy only — scripts/modal/up.sh provisions a Neon project via neonctl and persists its id here; down.sh reads it to delete the project; env-sync.sh deliberately skips NEON_* keys (never synced to the app). If you create the project yourself at console.neon.tech, fill the DB_* values instead and up.sh skips creation — but then down.sh can't delete the database, so remove it by hand. |
NEON_ORG_ID |
no | none | Modal deploy only — neonctl requires an org even when you only have one: neonctl projects create prompts for it and hangs non-interactive runs. Set it (find yours with neonctl orgs list) so up.sh can pass --org-id and run unattended. |
AGNO_DEBUG |
no | False |
If True, Agno emits verbose debug logs. Compose sets this for dev. |
WAIT_FOR_DB |
no | False |
If True, the entrypoint blocks on the DB before starting. Compose sets this. |
- Agno documentation
- AgentOS introduction
- Agno on GitHub. Drop a star if this is useful.