freshcrate
Skin:/
Home > Frameworks > agent-zero

agent-zero

Agent Zero AI framework

Why this rank:Strong adoptionRecent releaseHealthy release cadence

Description

Agent Zero AI framework

README

🚨 AGENT ZERO SKILLS 🚨

Skills System - portable, structured agent capabilities using the open SKILL.md standard (compatible with Claude Code, Codex and more).

Plus: Git-based Projects with authentication for public/private repositories - clone codebases directly into isolated workspaces.

See Usage Guide and Projects Tutorial to get started.

Showcase

A personal, organic agentic framework that grows and learns with you

  • Agent Zero is not a predefined agentic framework. It is designed to be dynamic, organically growing, and learning as you use it.
  • Agent Zero is fully transparent, readable, comprehensible, customizable, and interactive.
  • Agent Zero uses the computer as a tool to accomplish its (your) tasks.

âš™ī¸ Installation

Click to open a video to learn how to install Agent Zero:

Easy Installation guide

⚡ Quick Start

macOS / Linux:

curl -fsSL https://bash.agent-zero.ai | bash

Windows (PowerShell):

irm https://ps.agent-zero.ai | iex

Docker:

docker run -p 80:80 agent0ai/agent-zero

A detailed setup guide for Windows, macOS, and Linux can be found in the Agent Zero Documentation at this page.

💡 Key Features

  1. General-purpose Assistant
  • Agent Zero is not pre-programmed for specific tasks (but can be). It is meant to be a general-purpose personal assistant. Give it a task, and it will gather information, execute commands and code, cooperate with other agent instances, and do its best to accomplish it.
  • It has a persistent memory, allowing it to memorize previous solutions, code, facts, instructions, etc., to solve tasks faster and more reliably in the future.

Agent 0 Working

  1. Computer as a Tool
  • Agent Zero uses the operating system as a tool to accomplish its tasks. It has no single-purpose tools pre-programmed. Instead, it can write its own code and use the terminal to create and use its own tools as needed.
  • The only default tools in its arsenal are online search, memory features, communication (with the user and other agents), and code/terminal execution. Everything else is created by the agent itself or can be extended by the user.
  • Tool usage functionality has been developed from scratch to be the most compatible and reliable, even with very small models.
  • Default Tools: Agent Zero includes tools like knowledge, code execution, and communication.
  • Creating Custom Tools: Extend Agent Zero's functionality by creating your own custom tools.
  • Skills (SKILL.md Standard): Skills are contextual expertise loaded dynamically when relevant. They use the open SKILL.md standard (developed by Anthropic), making them compatible with Claude Code, Cursor, Goose, OpenAI Codex CLI, and GitHub Copilot.
  1. Multi-agent Cooperation
  • Every agent has a superior agent giving it tasks and instructions. Every agent then reports back to its superior.
  • In the case of the first agent in the chain (Agent 0), the superior is the human user; the agent sees no difference.
  • Every agent can create its subordinate agent to help break down and solve subtasks. This helps all agents keep their context clean and focused.

Multi-agent

Browser Agent

  • Browser automation is provided by the built-in _browser_agent plugin.
  • It uses the effective Main Model resolved by _model_config; there is no separate browser model slot.
  • Browser vision follows the Main Model's vision setting.
  • Playwright Chromium: Docker images ship the headless shell preinstalled. Local development installs it on first Browser Agent use via ensure_playwright_binary() in plugins/_browser_agent/helpers/playwright.py (into tmp/playwright); you can pre-install manually (see Development Setup) to skip the wait.
  1. Completely Customizable and Extensible
  • Almost nothing in this framework is hard-coded. Nothing is hidden. Everything can be extended or changed by the user.
  • The whole behavior is defined by a system prompt in the prompts/default/agent.system.md file. Change this prompt and change the framework dramatically.
  • The framework does not guide or limit the agent in any way. There are no hard-coded rails that agents have to follow.
  • Every prompt, every small message template sent to the agent in its communication loop can be found in the prompts/ folder and changed.
  • Built-in tools live in the core tools/ folder or in built-in plugins under plugins/ and can be adapted or extended.
  • Automated configuration via A0_SET_ environment variables for deployment automation and easy setup.

Prompts

  1. Communication is Key
  • Give your agent a proper system prompt and instructions, and it can do miracles.
  • Agents can communicate with their superiors and subordinates, asking questions, giving instructions, and providing guidance. Instruct your agents in the system prompt on how to communicate effectively.
  • The terminal interface is real-time streamed and interactive. You can stop and intervene at any point. If you see your agent heading in the wrong direction, just stop and tell it right away.
  • There is a lot of freedom in this framework. You can instruct your agents to regularly report back to superiors asking for permission to continue. You can instruct them to use point-scoring systems when deciding when to delegate subtasks. Superiors can double-check subordinates' results and dispute. The possibilities are endless.

🚀 Real-world use cases

  • Financial Analysis & Charting - "Find last month's Bitcoin/USD price trend, correlate with major cryptocurrency news events, generate annotated chart with highlighted key dates"

  • Excel Automation Pipeline - "Scan incoming directory for financial spreadsheets, validate and clean data, consolidate from multiple sources, generate executive reports with flagged anomalies"

  • API Integration Without Code - "Use this Google Gemini API snippet to generate product images, remember the integration for future use" - agent learns and stores the solution in memory

  • Automated Server Monitoring - "Check server status every 30 minutes: CPU usage, disk space, memory. Alert if metrics exceed thresholds" (scheduled task with project-scoped credentials)

  • Multi-Client Project Isolation - Separate projects for each client with isolated memory, custom instructions, and dedicated secrets - prevents context bleed across sensitive work

đŸŗ Fully Dockerized, with Speech-to-Text and TTS

Settings

  • Customizable settings allow users to tailor the agent's behavior and responses to their needs.
  • The Web UI output is very clean, fluid, colorful, readable, and interactive; nothing is hidden.
  • You can load or save chats directly within the Web UI.
  • The same output you see in the terminal is automatically saved to an HTML file in logs/ folder for every session.

Time example

  • Agent output is streamed in real-time, allowing users to read along and intervene at any time.
  • No coding is required; only prompting and communication skills are necessary.
  • With a solid system prompt, the framework is reliable even with small models, including precise tool usage.

👀 Keep in Mind

  1. Agent Zero Can Be Dangerous!
  • With proper instruction, Agent Zero is capable of many things, even potentially dangerous actions concerning your computer, data, or accounts. Always run Agent Zero in an isolated environment (like Docker) and be careful what you wish for.
  1. Agent Zero Is Prompt-based.
  • The whole framework is guided by the prompts/ folder. Agent guidelines, tool instructions, messages, utility AI functions, it's all there.

📚 Read the Documentation

Page Description
Installation Installation, setup and configuration
Usage Basic and advanced usage
Guides Step-by-step guides: Usage, Projects, API Integration, MCP Setup, A2A Setup
Development Setup Development and customization
WebSocket Infrastructure Real-time WebSocket handlers, client APIs, filtering semantics, envelopes
Extensions Extending Agent Zero
Connectivity External API endpoints, MCP server connections, A2A protocol
Architecture System design and components
Contributing How to contribute
Troubleshooting Common issues and their solutions

🤝 Community and Support

Release History

VersionChangesUrgencyDate
v1.19# Agent Zero Release Notes ## Remote Control & Connectivity - **Renamed Remote Link to Remote Control** with a refactored tunnel provider system. Cloudflare Tunnel, Microsoft Dev Tunnels, Serveo, and Tailscale are available through the Remote Control selector. - **Advertise Agent Zero version in connector handshakes** so CLI clients can detect version mismatches with the connected server. - **Expose installed plugin toggles** via a protected API endpoint that lists installed plugins and High6/2/2026
v1.18## Release Notes - **Configurable skills cap** — The maximum number of active skills is now configurable via `max_active_skills` in the skills plugin config and the settings UI, replacing the previous hard-coded limit. - **Fix MCP multimodal content handling** — MCP image, audio, and resource tool results are now properly preserved instead of being collapsed into empty text responses. Images flow into history as data URL attachments; audio and non-image binary resources are saved as artifacts wHigh5/26/2026
v1.16## Release Notes ### Speech stack refactored into independent plugins The legacy core speech system has been split into two built-in plugins — **Kokoro TTS** and **Whisper STT** — that can be enabled or toggled independently. Browser-native TTS remains available as a fallback when Kokoro is off, and the Whisper mic UI only appears when its plugin is enabled. Legacy speech settings and APIs have been removed in favor of engine-agnostic service brokers. ### Timezone and time display preferencesHigh5/22/2026
v1.15## Release Notes - **Security: fixed XSS in chat markdown rendering** — Chat message markdown is now sanitized to prevent cross-site scripting attacks in the web UI. - **Dedicated Markdown Editor surface** — A new built-in `_editor` plugin provides a full-featured Markdown editing experience separate from the Desktop/Office surface. Includes ACE-powered source editing, safe rendered preview mode, browser-style tabs, toolbar and file actions, preview search, inline editing from preview, clickabHigh5/15/2026
v1.14# Agent Zero Release Notes ## Highlights This release introduces a redesigned first-run onboarding experience, separates Desktop and Office into focused plugins, adds host browser routing through the A0 CLI connector, and delivers significant prompt and tool contract improvements informed by cross-provider evidence sweeps. --- ## New Features - **Guided first-run onboarding** — A new wizard walks users through Cloud vs. Local provider selection, account connection, model picking, and a readHigh5/12/2026
v1.13# Agent Zero Release Notes ## Office & Document Handling - **ODF-first document defaults** — ODT, ODS, and ODP are now the primary formats for Writer, Spreadsheet, and Presentation artifacts. OOXML (DOCX, XLSX, PPTX) remains available as an explicit compatibility option. Includes full ODF package generation, validation, and read/edit support. - **Unified Office canvas controls** — Active-file header shown in both canvas and modal views with a shared "+ New" menu, inline Save, and Rename/Close High5/5/2026
v1.12## Release Notes - **Fixed PTY file descriptor leaks in code execution** — POSIX PTY master descriptors are now properly closed when terminal sessions end, preventing `/dev/ptmx` descriptor exhaustion under sustained use. Additionally, closed or exited PTY sessions are detected before writes, with automatic retry/recovery on failure, and double-close of reused file descriptors is prevented through idempotent shutdown handling. - **Browser runtime recovers from stale Playwright contexts** — CacHigh5/3/2026
v1.10# Agent Zero v1.10 ## Highlights - **New built-in Browser** — Replaces the legacy `browser-use` agent with a direct Playwright-powered browser, live WebUI viewer with CDP screencast streaming, floating/dockable canvas panel, tab management, Chrome extension support, annotation mode (Cmd/Ctrl+.), and persistent Chromium runtime. The old `_browser_agent` plugin has been extracted as a community plugin via the Plugin Index. - **ChatGPT/Codex Account OAuth** — Connect your existing OpenAI CHigh4/28/2026
v1.9# Agent Zero Release Notes ## Security Fixes - **Fix SSRF in `document_query` remote fetching (CVE-2026-4308)** — Remote document fetching now validates URLs before any network request, blocking localhost and non-public IP targets, validating redirect hops, disabling implicit proxy trust, and enforcing a strict size cap. Third-party loaders no longer receive attacker-controlled URLs directly; content is prefetched and parsed from trusted local bytes. A follow-up fix restores compatibility withHigh4/13/2026
v1.8## Agent Zero – Release Notes **Key highlights: skill selector UI, memory hardening, and tool-arg validation fixes.** - **Built-in Skills Selector** – A new plugin accessible from the chat input `+` menu lets you browse and activate available skills directly in the current context or project. Default configs now allow skills to be active from the start, saving time and tokens on setup. - **Memory hardening** – FAISS index integrity is now verified via a SHA-256 sidecar file (`index.faiss.sha2High4/8/2026
v1.7## Agent Zero – Release Notes ### Prompt & Model Guidance Overhaul - Adopted compact default prompts across the core stack, plugin-owned prompts, and the agent0 overlay — default assembled prompt now sits under ~3 000 tokens while retaining all key guardrails - Restored essential tool-call JSON examples, communication/solving/tips guidance, and the agent0 profile after earlier over-aggressive trimming caused regressions with frontier models - Added strict JSON guidance to steer models toward tMedium4/3/2026
v1.6- **WhatsApp integration plugin** — New plugin connecting Agent Zero to WhatsApp via a Baileys JS bridge with QR/pairing-code setup. Supports self-chat and dedicated (bot account) modes, group chat with mention detection, quoted replies, media/attachment handling, typing indicators, Markdown-to-WhatsApp formatting, and account disconnect/switch. - **WhatsApp: self-chat is now the default mode** — Default changed from dedicated to self-chat; a warning banner is shown when `allowed_numbers` is empMedium3/31/2026
v1.5## WebSocket System Rework & General Improvements - **WebSocket architecture rewrite** — New `WsHandler` base class, `WsManager` for connection tracking, event routing, and buffering; reduces WebSocket init from ~170 lines to ~10. Frontend adapter updated with exponential backoff, envelope validation, 50 MB cap, and improved handler registration. - **WebSocket security fix** — `dispatch_to_all_sids` snapshot now taken inside the lock to prevent security check bypass during concurrent disconnectMedium3/30/2026
v1.4## Agent Zero – Release Notes **Onboarding, plugin hub improvements, and model config enhancements** - **Onboarding flow for missing API keys** – A new onboarding experience guides users when no API key is configured. A banner in the chat composer surfaces the missing-key status directly, replacing a dedicated backend status endpoint. - **Model config presets** – A model switcher component is now available in the chat input area, with support for active preset/model retrieval from the model coMedium3/30/2026
v1.3## Agent Zero – Release Notes - **Chat compaction plugin**: New built-in plugin that compacts chat history, helping manage long conversations and context window usage. Includes plugin thumbnail. - **WebUI `page-head` extension point**: Plugins can now inject `<script>` and `<link>` tags directly into `<head>` via a new `x-extension` injection point in `index.html`, enabling cleaner loading of vendor libraries (e.g. mermaid.js, custom fonts) without DOM manipulation hacks. - **Plugin index fetchMedium3/27/2026
v1.2- **Plugin installer**: Added force-refresh support with cache-busting headers and request sequence tracking to prevent race conditions during concurrent index loads. New `openIndexView` and `reloadIndex` store methods enable explicit refresh control. - **Model config**: Moved models summary state from component into the store, with loading and caching support. Added `refreshModelsSummary` and `ensureModelsSummaryLoaded` helpers. - **Docker publish workflow**: Release notes are now generated dynMedium3/26/2026
v1.1# v1.1 Covers changes from the `v0.9.8` series through the current `v1.5` state, including the `v0.9.9` work that landed along the way. - Agent Zero now has a real plugin platform: developers can build and ship functionality independently of the core, with a large refactor that makes more of the framework extensible through plugins, hooks, and user-side development instead of core-only changes. - The new Plugin Hub brings an app-store-like workflow for discovery, installation, configuration, vMedium3/26/2026
v0.9.8.3### v0.9.8.3 - Improved chatbox expansion ### v0.9.8.2 - Bugfix - skills loading ### v0.9.8.1 - Caching, context optimization, error handling... - improved caching for anthropic models - improved context window optimimization - fixed retry on critical error counter - load up to 5 skills at a time - default chat model is now Sonnet 4.6 ### v0.9.8 - Skills, UI Redesign & Git projects [Release video](https://youtu.be/NV7s78yn6DY) - Skills - Skills System replacing the legacMedium3/24/2026
v0.9.8.2### v0.9.8.2 - Bugfix - skills loading ### v0.9.8.1 - Caching, context optimization, error handling... - improved caching for anthropic models - improved context window optimimization - fixed retry on critical error counter - load up to 5 skills at a time - default chat model is now Sonnet 4.6 ### v0.9.8 - Skills, UI Redesign & Git projects [Release video](https://youtu.be/NV7s78yn6DY) - Skills - Skills System replacing the legacy Instruments with a new `SKILL.md` standard Low2/24/2026
v0.9.8.1### v0.9.8.1 - Caching, context optimization, error handling... - improved caching for anthropic models - improved context window optimimization - fixed retry on critical error counter - load up to 5 skills at a time - default chat model is now Sonnet 4.6 ### v0.9.8 - Skills, UI Redesign & Git projects [Release video](https://youtu.be/NV7s78yn6DY) - Skills - Skills System replacing the legacy Instruments with a new `SKILL.md` standard for structured, portable agent capabilitieLow2/18/2026
v0.9.8### v0.9.8 - Skills, UI Redesign & Git projects [Release video](https://youtu.be/NV7s78yn6DY) - Skills - Skills System replacing the legacy Instruments with a new `SKILL.md` standard for structured, portable agent capabilities. - Built-in skills, and UI support for importing and listing skills - Real-time WebSocket infrastructure replacing the polling-based approach for UI state synchronization - UI Redesign - Process groups to visually group agent actions with expand/collapLow2/10/2026
v0.9.7### v0.9.7 - Projects [Release video](https://youtu.be/RrTDp_v9V1c) - Projects management - Support for custom instructions - Integration with memory, knowledge, files - Project specific secrets - New Welcome screen/Dashboard - New Wait tool - Subordinate agent configuration override support - Support for multiple documents at once in document_query_tool - Improved context on interventions - Openrouter embedding support - Frontend components refactor and polishing -Low11/19/2025
v0.9.6# v0.9.6 - Memory Dashboard [Release video](https://youtu.be/sizjAq2-d9s) - Memory Management Dashboard - Kali update - Python update + dual installation - Browser Use update - New login screen - LiteLLM retry on temporary errors - Github Copilot provider supportLow10/2/2025
v0.9.5.1## 0.9.5.1 - added support for Agent Zero Venice provider - added support for xAI provider ## 0.9.5 - Secrets management - agent can use credentials without seeing them - Agent can copy paste messages and files without rewriting them - LiteLLM global configuration field - Custom HTTP headers field for browser agent - Progressive web app support - Extra model params support for JSON - Short IDs for files and memories to prevent LLM errors - Tunnel component frontend rework - Fix forLow9/19/2025
v0.9.5- Secrets management - agent can use credentials without seeing them - Agent can copy paste messages and files without rewriting them - LiteLLM global configuration field - Custom HTTP headers field for browser agent - Progressive web app support - Extra model params support for JSON - Short IDs for files and memories to prevent LLM errors - Tunnel component frontend rework - Fix for timezone change bug - Notifications z-index fixLow9/3/2025
v0.9.4# v0.9.4 - Connectivity, UI - External API endpoints - Streamable HTTP MCP A0 server - A2A (Agent to Agent) protocol - server+client - New notifications system - New local terminal interface for stability - Rate limiter integration to models - Delayed memory recall - Smarter autoscrolling in UI - Action buttons in messages - Multiple API keys support - Tunnel URL QR code - Download streaming - Internal fixes and optimizationsLow8/18/2025
v0.9.3- Faster startup/restart - Subordinate agents can have dedicated prompts, tools and system extensions - Streamable HTTP MCP server support - Memory loading enhanced by AI filter - Memory AI consolidation when saving memories - Auto memory system configuration in settings - LLM providers available are set by providers.yaml configuration file - Venice.ai LLM provider supported - Initial agent message for user + as example for LLM - Docker build support for local images - File browser fixLow8/4/2025
v0.9.2# v0.9.2 - Kokoro TTS, Attachments - Kokoro text-to-speech integration - New message attachments system - Minor updates: log truncation, hyperlink targets, component examples, api cleanupLow7/21/2025
v0.9.1.1# v0.9.1.1 - LLM API base URL field fix # v0.9.1 - LiteLLM, UI improvements - Langchain replaced with LiteLLM - Support for reasoning models streaming - Support for more providers - Openrouter set as default instead of OpenAI - UI improvements - New message grouping system - Communication smoother and more efficient - Collapsible messages by type - Code execution tool output improved - Tables and code blocks scrollable - More space efficient on Low7/9/2025
v0.9.1# v0.9.1 - LiteLLM, UI improvements - Langchain replaced with LiteLLM - Support for reasoning models streaming - Support for more providers - Openrouter set as default instead of OpenAI - UI improvements - New message grouping system - Communication smoother and more efficient - Collapsible messages by type - Code execution tool output improved - Tables and code blocks scrollable - More space efficient on mobile - Streamable HTTP MCP servers supporLow7/7/2025
v0.9.0# Starting 0.9 series of updates - backup and restore feature for easy upgradability - subordinate agent promp profiles (roles) - developer and researcher agent prototypes - security fixesLow6/26/2025
v0.8.7- markdown rendering in responses - live response rendering - document Q&A toolLow6/19/2025
v0.8.6- Merge with Hacking Edition - browser-use upgrade and integration re-work - tunnel provider switchLow6/12/2025
v0.8.5.1Improved initialization procedure, faster chat loading, longer restart timeout, smoother MCP loading.Low6/7/2025
v0.8.5Added support for both MCP Server and ClientLow6/6/2025
v0.8.4.2Code execution tool: improved timeout handling and added system messages More accurate memory and solutions retrieval Fixed browser agent reset issue Faster chat auto-renaming Documentation updated: installation video and reference links added Added app reference for OpenRouter leaderboards Fixed prompt issue affecting behavior adjustments Introduced dedicated search engine tool Default models set to gpt-4.1Low5/27/2025
v0.8.4.1- Various bugfixes related to context management - Message formatting improvements - Scheduler improvements - New model provider - Input tool fix - Compatibility and stability improvementsLow5/21/2025
v0.8.4Cloudflare tunnel, mobile fixesLow5/15/2025
v0.8.3.1Major update: Scheduler system Minor updates: Auto embeddingsLow5/6/2025
v0.8.3Scheduler systemLow5/4/2025
v0.8.2.1Bugfix - JSON lead message causing some models to misbehaveLow4/7/2025
v0.8.2- Vision capabilities for supported models - Code execution tool sessions (multitasking) - Chat auto namesLow4/5/2025
v0.8.1.2Fix for ChatOpenAI default temperature Fixed reasoning models supportLow2/8/2025
v0.8.1.1Deepseek R1 support Model temperature moved to additional argsLow1/21/2025
v0.8.1Browser Agent UX ImprovementsLow1/19/2025
v0.8- Docker runtime - History compression - Speech - UI improvements - SearXNG search engineLow12/21/2024
v0.7.1- Persistent chats - Preinstalled binaries - Documentation - BugfixesLow10/16/2024
v0.7- Automatic memory - UI improvements - Instrumets - Reflection prompts - BugfixesLow10/6/2024
v0.6.5Free & local models BugfixesLow9/13/2024
v0.6.4Fix for event loops in defer.pyLow9/13/2024
v0.6.3Bugfixes: Ollama context and chat model fix Endpoints in .env defer.py event loop fix Error logging for ui fixLow9/12/2024
v0.6.2Installation guide + run_cli.py bugfixLow9/8/2024
v0.6.1Fixes for v0.6 - intevention - terminal resetLow9/6/2024
v0.6- UI - Consext separation - Knowledge import - FAISS DB - Prompt subfoldersLow9/4/2024
v0.5Added models, bug fixes, hints...Low8/6/2024
v0.4Bugfixes and ux improvementsLow7/26/2024
v0.3Memory enhancement, gpt-4o-mini support, stability and compatibility improvementsLow7/19/2024
v0.2free JSON format, dirty parsing, tool superclass, memory injection, new rate limiter, agent paramsLow6/26/2024

Dependencies & License Audit

Loading dependencies...

Similar Packages

openakitaAn open-source AI assistant framework with skills and agent architecturev1.27.13
JoaniumYour smart, reliable, and friendly personal AI assistant.v2026.607.0
deer-flowAn open-source long-horizon SuperAgent harness that researches, codes, and creates. With the help of sandboxes, memories, tools, skill, subagents and message gateway, it handles different levels of tamain@2026-06-06
Auto-Pentest-LLM🔍 Automate penetration testing with an intelligent agent that organizes security assessments, leveraging local LLMs and Kali Linux for effective exploitation.main@2026-06-01
SimpleLLMFuncA simple and well-tailored LLM application framework that enables you to seamlessly integrate LLM capabilities in the most "Code-Centric" manner. LLM As Function, Prompt As Code. 一ä¸ĒįŽ€å•įš„æ°åˆ°v0.8.4

More in Frameworks

ctranslate2Fast inference engine for Transformer models
schemathesisProperty-based testing framework for Open API and GraphQL based apps
spec_driven_developSpec-Driven Develop is a platform-agnostic AI agent skill that automates the pre-development workflow for large-scale complex tasks. It is not a framework, not a runtime, not a package manager — it is
cadwynProduction-ready community-driven modern Stripe-like API versioning in FastAPI