
Security News
pnpm 11.5 Adds Support for Recognizing npm Staged Publishes
pnpm 11.5 now recognizes npm staged publish approvals in release metadata, preventing those releases from being mistaken for lower-trust package publishes.
Open source workflow automation platform with AI agents, React Flow, and n8n-inspired architecture
Your own AI assistant that does real work. Drag, drop, and connect AI agents to your email, calendar, messages, phone, and 50+ other services. Runs on your own machine — your data stays with you.
No code required. No subscription. No usage limits. Bring your own API keys (or run models locally with Ollama / LM Studio for free).
Prerequisites: Node.js 22+, Python 3.12+
npm install -g machinaos
machina start
Open http://localhost:3000 and click Credentials to connect your first AI provider.
npm install -g pnpm
git clone https://github.com/zeenie-ai/MachinaOS.git
cd MachinaOS
pnpm run build
pnpm run dev
The dev task starts the Python backend, Vite client, WhatsApp service, and Temporal in parallel. See SETUP.md and SCRIPTS.md for details, and CONTRIBUTING.md for the codebase map and contribution recipes.
https://github.com/user-attachments/assets/5ee81bb3-12cf-4755-8532-7470c6f1d841
https://github.com/user-attachments/assets/5798fe61-8d26-4d3a-90aa-189bf4eec79f
Pick nodes from the palette, drag them onto a canvas, connect them with lines, give your AI agent some memory and skills, and hit Play. Or deploy the workflow so it runs forever in the background — waiting for emails, responding to messages, checking in on a schedule, doing the work you'd rather not.
The first time you open MachinaOS, three example workflows load automatically. Open them on the canvas to see exactly how the pieces fit together, then edit any node and save your own version.
Build a chat assistant that knows your calendar, reads your inbox, and follows up on tasks. Conversations are saved as readable markdown so you can edit what your agent remembers. Long-term memory uses vector search so years of conversation stay accessible.
Hire an AI Employee as a team lead. Connect specialized agents — a Coding Agent, a Web Agent, a Productivity Agent — and the team lead automatically figures out who to delegate which subtask to. Each agent has its own memory, tools, and skills.
Schedule recurring jobs ("every weekday at 9 AM, summarize my unread emails"), respond to incoming events ("when a customer texts on WhatsApp, draft a reply"), or build complex multi-step pipelines that run in the background. Workflows run reliably even if your computer restarts.
Send and receive on WhatsApp (with newsletter channels, groups, contacts), Telegram (with bot owner detection), Twitter/X (post, reply, search, look up users), and a unified social node that abstracts over Discord, Slack, Signal, SMS, Matrix, Teams, and more.
Pair your Android phone via QR code and control it from any agent: read battery + network status, launch apps, toggle WiFi / Bluetooth / airplane mode, take photos, read environmental sensors, manage media playback. 16 device services available.
Run Python, JavaScript, and TypeScript code from any workflow. Each workflow gets its own isolated workspace folder — no chance of an agent touching files outside its sandbox. The Process Manager node owns long-running tasks like dev servers, builds, and watchers, with live output streaming to a Terminal tab in the UI.
Stripe integration with action node (charge customers, manage subscriptions) and webhook receiver (react to payment events in real time). Same pattern works for any service with a CLI.
RAG pipeline out of the box: parse PDFs and HTML, chunk into searchable pieces, embed locally or via OpenAI, store in ChromaDB / Qdrant / Pinecone, and query from any agent.
| Provider | Notes |
|---|---|
| OpenAI | GPT-5 family, GPT-4.1, o-series reasoning models, GPT-4o |
| Anthropic | Claude Opus 4.x, Sonnet 4.x, Haiku 4.5 — with extended thinking |
| Gemini 3 Pro/Flash, 2.5 Pro/Flash — with reasoning budgets | |
| DeepSeek | DeepSeek V3, DeepSeek Reasoner |
| Kimi | Kimi K2.5, Kimi K2 Thinking |
| Mistral | Mistral Large/Small, Codestral |
| Groq | Llama 3/4, Qwen3, GPT-OSS (ultra-fast inference) |
| Cerebras | Llama 3.1, Qwen-3-235b (custom AI hardware) |
| OpenRouter | 200+ models via one unified API |
| Ollama | Run any local model on your machine — free, private, offline |
| LM Studio | Run any local model with a desktop app — free, private, offline |
Local providers (Ollama, LM Studio) are first-class — context length, vision support, and tool-use capability are detected automatically from your running server. No paid API needed.
Pick the right agent for the job:
| Agent | Specialized for |
|---|---|
| AI Employee / Orchestrator | Team leads that coordinate other agents |
| Android Agent | Phone control |
| Web Agent | Browser automation, scraping, search |
| Coding Agent | Writing and running code (Python / JS / TS) |
| Productivity Agent | Gmail, Calendar, Drive, Sheets, Tasks, Contacts |
| Social Agent | WhatsApp, Telegram, Twitter messaging |
| Task Agent | Scheduling, reminders, cron jobs |
| Travel Agent | Maps, location lookup, planning |
| Payments Agent | Stripe + financial workflows |
| Consumer Agent | Customer support, order management |
| Claude Code Agent | Anthropic's Claude Code CLI for advanced coding sessions |
| Codex Agent | OpenAI Codex CLI integration |
| RLM Agent | Recursive Language Model — write code that calls itself recursively |
| Autonomous Agent | Code-mode loops that reduce token usage 80-98% |
| Tool Agent | General-purpose tool orchestration |
Team leads automatically expose every connected agent as a delegate_to_* tool — the AI decides who to hand work off to based on the task.
Skills are short markdown files that teach an agent how to do something well — when to use which tool, what arguments to pass, common mistakes to avoid. Edit them in the UI; the changes apply immediately. Built-in skills cover Android control, Google Workspace, social messaging, web research, coding, terminal use (Bash, PowerShell, WSL, Nushell), and more.
Agents track token usage and automatically compact long conversations when you hit half your model's context limit. Compaction summarizes in five sections — Task Overview, Current State, Important Discoveries, Next Steps, Context to Preserve — so the agent picks up exactly where it left off. For Anthropic and OpenAI, native API compaction is used; everywhere else, the agent summarizes itself.
Every LLM call and API request is tracked with USD cost. See per-provider spend in the Credentials panel. Configure your own pricing in pricing.json if you switch providers mid-flight.
npm install -g machinaos (or run from source)machina start — opens at http://localhost:3000If anything goes wrong, the Discord community is the fastest way to get help.
Want to add a node, LLM provider, skill, or integration? One Python file = one node. The backend owns all the schemas; the frontend renders from them automatically. No frontend code required for most extensions.
Discord — help, feature requests, and design discussions.
MIT
FAQs
Open source workflow automation platform with AI agents, React Flow, and n8n-inspired architecture
We found that machinaos demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
pnpm 11.5 now recognizes npm staged publish approvals in release metadata, preventing those releases from being mistaken for lower-trust package publishes.

Security News
Federal audit finds NIST lacked a plan to clear the NVD backlog, wasted funds on duplicate work, and delayed use of CISA data.

Research
/Security News
A mini Shai-Hulud campaign compromised Red Hat Cloud Services npm packages to steal developer and CI/CD secrets during installation.