Pan-Agent
Pan-Agent is a free, open-source AI assistant designed to run on your own machine.
What Pan-Agent is
Pan-Agent is a free, open-source AI assistant designed to run on your own machine. It can take screenshots, interpret the screen, type, click, manage windows, run commands, and browse the web. It supports OpenAI-compatible providers including OpenAI, Anthropic, Regolo, OpenRouter, Groq, Ollama, LM Studio, vLLM, and llama.cpp. The project lists more than 20 built-in tools, including terminal, filesystem, browser, web search, keyboard, mouse, vision, memory, and cron. Separate profiles can hold distinct API keys, model settings, persona, memory, and skills; cron expressions can schedule agent runs. Telegram, Discord, and Slack bot support works without a public URL, and the assistant can also run headlessly as a local HTTP API on localhost:8642. A command approval system classifies actions and blocks catastrophic commands by default. The project says it has no telemetry. Its API lacks authentication and is intended for a single-user desktop app. Linux control requires X11 or XWayland; Windows installers are unsigned, and the macOS app is not notarized.
Good
- Runs locally and has no telemetry, according to the project.
- Supports a range of OpenAI-compatible providers.
- Includes more than 20 built-in tools.
- Catastrophic commands are blocked by default.
- Telegram, Discord, and Slack bots need no public URL.
Watch out
- The HTTP API has no authentication.
- Linux control requires X11 or XWayland.
- Windows installers are unsigned.
- The macOS app is not notarized.
Who it suits
Pan-Agent suits people who want to run and control an AI agent locally, with multiple provider choices and separate profiles. It may also suit users who want desktop control, scheduled runs, or messaging bot integrations.
Verdict
Pan-Agent offers local desktop control, provider flexibility, and scheduling, with command approval built in. Consider its unauthenticated API and platform-specific setup caveats before using it.
The facts
Each one read from Pan-Agent's own pages, with the date it was checked.
What it does
- API
- The headless HTTP API binds to localhost at port 8642 and is scriptable from any language.checked 1 Oct 2001
- API security
- The HTTP API binds to 127.0.0.1 and has no authentication; the project says defending against arbitrary local code execution is out of scope.checked 30 Sep 2001
- Automation
- Cron expressions can trigger scheduled agent runs such as daily briefings and periodic checks.checked 1 Oct 2001
- Auto-update
- The Tauri updater verifies Ed25519 signatures before installing updates.checked 1 Oct 2001
- License
- Pan-Agent is open source under the MIT license.checked 1 Oct 2001
- License and audience
- Pan-Agent is MIT-licensed and describes itself as built for people who want control of their AI agent without vendor lock-in.checked 30 Sep 2001
- LLM integrations
- It supports OpenAI-compatible providers including OpenAI, Anthropic, Regolo, OpenRouter, Groq, Ollama, LM Studio, vLLM, and llama.cpp.checked 1 Oct 2001
- LLM support
- It supports OpenAI-compatible providers including OpenAI, Anthropic, OpenRouter, Groq, Ollama, LM Studio, vLLM, and llama.cpp.checked 30 Sep 2001
- Memory and profiles
- Persistent memory and isolated profiles store separate API keys, model configuration, persona, memory, and skills.checked 1 Oct 2001
- Messaging integrations
- Built-in bots connect to Telegram, Discord, and Slack.checked 1 Oct 2001
- PC control
- It can take screenshots, type, click, manage windows, run commands, and browse the web.checked 1 Oct 2001
- Privacy
- The project states that it has no telemetry and zero phone-home behavior.checked 1 Oct 2001
- Product
- Pan-Agent is an open-source, self-hosted AI assistant that runs on the user’s own machine.checked 30 Sep 2001
- Safety controls
- A 103-pattern approval system asks before dangerous commands and blocks catastrophic commands by default.checked 30 Sep 2001
- Security limitation
- The HTTP API has no authentication and is intended for a single-user desktop app.checked 1 Oct 2001
- Storage and memory
- Sessions are stored in SQLite, and persistent memory and persona files are maintained per profile.checked 30 Sep 2001
- Target users
- The project is built for people who want to own their AI agent with full control and no vendor lock-in.checked 1 Oct 2001
- Tools
- The project lists 20+ built-in tools, including terminal, filesystem, browser, web search, screenshot, keyboard, mouse, vision, memory, and cron.checked 30 Sep 2001
- Updates
- The Tauri updater verifies Ed25519 signatures before installing updates.checked 30 Sep 2001
- What it does
- Pan-Agent is a self-hosted AI assistant that runs on the user's own machine.checked 1 Oct 2001
Where it runs
- Approval security
- A 103-pattern system classifies commands as Safe, Dangerous, or Catastrophic; catastrophic commands are blocked by default.checked 1 Oct 2001
- Platform limitation
- PC-control tools require X11 or XWayland on Linux; pure Wayland is unsupported.checked 1 Oct 2001
- Platform security caveats
- The project says Windows installers are unsigned and the macOS app is not notarized, so first launch may require manual steps.checked 30 Sep 2001
- Windows distribution
- Windows installers are unsigned and may trigger SmartScreen or Defender warnings.checked 1 Oct 2001
Alternatives to Pan-Agent
- 1
Claude Code
Free planAndroidiOSWebWindows7.4From $17 a month - 2
Gemini
Free planAndroidiOSWebWindows6.9Free plan - 3
Computer Use OOTB
Free planWebmacOSSelf-hostedWindows6.8Free plan - 4
Lapu AI
Free planmacOSWindows6.7From €16 a month - 5
QuickDesk
Free planAndroidWebAPImacOS6.5Free plan - 6
Contop
AndroidiOSLinuxmacOS6.4