hecate

Hecate is an alpha-stage, MIT-licensed, self-hosted agent platform aimed at enterprises building intelligent applications. It pairs a Python API for engineers with a drag-and-drop visual canvas for business users, keeping both in sync through a shared JSON graph DSL. Core capabilities described in the README: - Execution engine: a self-built Pregel/BSP runtime with an event-sourced, append-only execution log, durable checkpoints and time-travel replay via a session replay endpoint. Long-running work supports retry, resume, controlled interruption and human-in-the-loop approval. - Protocols: bidirectional MCP (server and client), A2A server and client with signed AgentCards and JSON-RPC task lifecycle, plus an OpenAI-compatible /v1/chat/completions endpoint that existing OpenAI clients can use by changing base_url. - Multi-tenancy and security: Organization to Workspace to RBAC isolation, SSO via OIDC/SAML/LDAP, SCIM v2 provisioning, audit trail, PII redaction, and Docker-sandboxed tool execution with per-agent permission scopes. - Built-in tools: web search, file read/write/list, sandboxed Python execution, and headless Chromium browser tools (navigate, click, type, extract, screenshot, fill form) with per-environment domain allow-lists. - Orchestration: seven multi-agent collaboration patterns (sequential, parallel, handoff, broadcast, negotiation, debate, dynamic) shipped as graph templates. - Extensibility: multiple engine extension interfaces and plugin SPI types (tool, extension, trigger, model, channel, evaluator, auth, secret) with hot reload and versioned manifests. - Integrations: Feishu (Lark) and Slack inbound webhooks with a bound-identity model, plus generic webhooks for triggering workflows. Installation is via a one-command shell script or manual steps using Docker Compose for PostgreSQL, Qdrant, MinIO and Temporal, uv for Python dependencies, and Alembic migrations. A preflight command validates the environment. Three CLI entry points are provided: hecate, hecate-migrate and hecate-flag-audit. The project documents an OpenSpec workflow and a large set of ADRs, tutorials, how-to guides and reference material. It is explicitly labeled alpha, so APIs and config schemas may change before 1.0.