OpenBot: A Governed Runtime for AI Coworkers — Policy-Checked Browser, File, and Tool Access, One Agent Framework at a Time

OpenBot is an open-source, self-hostable template for turning agents into governed "AI coworkers" that can actually operate a computer. Each Bot gets its own container, Chromium profile, /workspace, and logins, so agents do not share files or browser sessions. Browser actions, file operations, shell commands, MCP calls, and component use all go through a central gateway that resolves the target, evaluates a CEL policy, records an audit entry, and only then executes or refuses the action.
Because a Bot is simply an AG-UI endpoint, agents built with frameworks such as LangGraph, CrewAI, Mastra, Pydantic AI, Google ADK, or custom code can be connected without making OpenBot dependent on one agent framework. Humans can watch the Bot’s live screen, take control for things like login or 2FA, and hand control back afterward.
GitHub Repo: https://lnkd.in/gEx8_Aue

OpenBot is an open-source, self-hostable framework for running AI agents as governed "coworkers" that can operate a real computer. Each Bot runs in its own container with a dedicated Chromium profile, /workspace directory, and credentials, so agents don't share files or browser sessions with each other.

Every browser action, file operation, and MCP or component call passes through a central gateway. The gateway resolves the target, evaluates a CEL-based policy (deny rules checked before allow rules, failing closed by default), logs an audit entry, and only then executes — or refuses — the action.

Because each Bot is just an AG-UI endpoint, it's framework-agnostic: agents built with LangGraph, CrewAI, Mastra, Pydantic AI, Google ADK, or custom code can all plug in the same way. Humans can also watch a Bot's live screen and take manual control for steps like login or 2FA, then hand control back to the agent.

GitHub: github.com/CopilotKit/OpenBot