archestra
Enterprise AI Platform with guardrails, MCP registry, gateway & orchestrator
Links
README
From the repo.
The all-in-one open-source enterprise AI platform.
Built on a strong security and observability foundation: SSO and RBAC, sandboxed code execution, Dual-LLM and Lethal-Trifecta guardrails, OpenTelemetry traces, and Prometheus metrics — first-class, not bolted on.
Quickstart · Docs · Releases · Slack
What it does
Point your users — or your agents, or Claude / Codex / Cursor — at one URL. Archestra handles the rest:
- 💬 Chat for non-technical users. Internal AI assistant with projects, MCP apps, and Slack, MS Teams, and email front-ends.
- 🛠️ Developer LLM & MCP portal. One token for Claude Code, Codex, Cursor — see the proxy.
- 🚪 LLM gateway for any provider (Anthropic, OpenAI, Azure, Bedrock, DeepSeek, …) with cost limits, virtual API keys, and dynamic model routing.
- 🔌 MCP gateway with OAuth + On-Behalf-Of so tools run as the user, not a shared service account.
- 🤝 A2A gateway for agent-to-agent triggers.
- 📦 Private MCP registry so teams ship their own tools — see registry docs.
- 🎼 MCP orchestrator with a Kubernetes operator and self-serve promotion.
- 🤖 Agent runtime with scheduled / email / webhook triggers, sub-agent delegation, reusable skills, sandboxed code execution, and a K8s-native filesystem.
- 📚 RAG knowledge base plumbed via connectors to your existing stack.
- 🧩 Mini app builder — see apps.
- 🛡️ Deterministic guardrails for tool calls, Dual-LLM verification, and Lethal Trifecta protections.
- 🪪 Identity & access with SSO (OIDC, SAML, Okta, Entra), RBAC with role mapping & team sync, and secrets management.
- 🌎 Environments with per-env egress policies and per-env cost limits.
- 🔭 Observability out of the box: OpenTelemetry traces, Prometheus metrics, logs, per-team cost tracking.
Already running dangerous single-tenant agents like Claude Cowork, OpenClaw, or Hermes in your enterprise? Migration Kit →
Quickstart
docker pull archestra/platform:latest
docker run \
-p 127.0.0.1:9000:9000 -p 127.0.0.1:3000:3000 \
-e ARCHESTRA_QUICKSTART=true \
-e ARCHESTRA_BETA=true \
-v /var/run/docker.sock:/var/run/docker.sock \
-v archestra-postgres-data:/var/lib/postgresql/data \
-v archestra-app-data:/app/data \
archestra/platform
Open http://localhost:3000. Full Docker / Helm / Kubernetes instructions live in the quickstart docs.
Ready for production
- ✅ $13.5M total funding
- ✅ Three Fortune-50 deployments
- ✅ 31 ms at p95 — performance benchmarks →
- ✅ Terraform provider →
- ✅ Helm chart →
Deeper docs
- 📖 Platform overview — what's in the box, how the pieces fit together.
- 📐 Deployment — Docker, Helm, Kubernetes, every env var, secrets management.
- 💰 Pricing model — Open Core, free for teams under 30 users, enterprise licensing.
- 🛡️ Security & bug bounty
- 🤝 Contributing — set up the dev env, run e2e tests, open a PR.
Thank you for continuously making Archestra better — you're awesome 🫶
Collected info
- ★ 4,055 stars
- ⎇ 1,145 forks
- Language: TypeScript
- Source updated: 7/29/2026
Config for your environment
Replace {MCP_ENDPOINT_URL} with this MCP’s endpoint URL (from its repo or docs above). No API key — you connect directly.
Tool
OS
Config file: ~/.cursor/mcp.json
{
"mcpServers": {
"mcp-server": {
"url": "{MCP_ENDPOINT_URL}"
}
}
}Paste into mcpServers in the config file. Restart Cursor after saving.
If this MCP is also published on mcpchannel.ai, you can subscribe from Browse and use the gateway config there instead.

