
Security News
GitHub Actions Checkout Now Blocks Risky pull_request_target Checkouts
GitHub Actions checkout now blocks risky pull_request_target checkouts by default to help prevent pwn request supply chain attacks.
@connectai/selfhost
Advanced tools
One-command self-host installer for ConnectAI. Takes a clean machine (only Docker + Node) to a running, health-checked company-brain in one command, with no source clone and no local image build: `npx @connectai/selfhost run`. Bundles the image-based dock
One command takes a clean machine (only Docker + Node) to a health-checked ConnectAI company-brain. No source clone, no local image build.
npx @connectai/selfhost run
Docker + Node
│ npx @connectai/selfhost run
▼
ConnectAI stack (local): api · worker · console · database · vault
│ open /setup, paste your token
▼
Your company brain, served to any agent over MCP
Boot the stack (pulls prebuilt images, writes a hardened .env, waits for health):
npx @connectai/selfhost run
Quiet by default; add --verbose for the full docker output.
Copy the one-time setup token:
npx @connectai/selfhost token
Open http://localhost:5273/setup, paste the token, create the first
administrator, confirm inference, and connect a source.
That is the whole happy path. Full operator guide (remote origins, day-2 operations, model right-sizing): https://connai.dev/docs/self-hosting.
| Command | What it does |
|---|---|
run (default) | pre-flight, materialize assets, write .env, boot the stack, print the next step |
token | print the one-time first-run setup token (or report the instance is already configured) |
logs | tail stack logs (e.g. connectai logs api) |
down | stop the stack (down -v also removes volumes and wipes the brain) |
help / version | usage / version |
| Flag | Meaning |
|---|---|
--dir <path> | working directory (default ~/.connectai-selfhost) |
--verbose | stream the full docker output during boot (default: quiet spinner) |
--yes, -y | non-interactive (already the default; accepted for CI) |
--tag <tag> | run a specific release tag (advanced; also CONNECTAI_IMAGE_TAG) |
npx).@connectai/selfhost. After npm i -g @connectai/selfhost the connectai and selfhost binaries are aliases; do
not run npx connectai.chmod 600, never logged and
never transmitted. A second run is idempotent and never overwrites your values.--dir is also the compose-project boundary, so a non-default dir gets its own
isolated project and down --dir <that-dir> tears down only that install.http://localhost:4000, which is correct for a same-box eval.
Serving it on a real domain needs extra setup: see
https://connai.dev/docs/self-hosting first.BUSL-1.1. Development, testing, and evaluation use need no license; production use requires a commercial license. The self-host runtime guard fail-closes at run time, so a published image gives away nothing licensed.
FAQs
One-command self-host installer for ConnectAI. Takes a clean machine (only Docker + Node) to a running, health-checked company-brain in one command, with no source clone and no local image build: `npx @connectai/selfhost run`. Bundles the image-based dock
The npm package @connectai/selfhost receives a total of 1,896 weekly downloads. As such, @connectai/selfhost popularity was classified as popular.
We found that @connectai/selfhost demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 2 open source maintainers collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
GitHub Actions checkout now blocks risky pull_request_target checkouts by default to help prevent pwn request supply chain attacks.

Product
Socket now supports Custom Roles and Repository Access Permissions so organizations can control who can access specific repositories and actions.

Product
Socket MCP now lets AI assistants review org alerts, investigate threats using the Socket threat feed, and inspect package files in addition to dependency scoring.