Manual installation
Deploy PentAGI by hand with Docker Compose — create the working directory, fill in the .env file, add an LLM provider and start the stack.
Use the manual path when you want full control over the configuration or cannot run the interactive installer.
1. Create a working directory
mkdir -p ~/pentagi && cd ~/pentagi2. Download the environment file
test -f .env || curl -fo .env.new https://raw.githubusercontent.com/vxcontrol/pentagi/main/.env.example
test -f .env.new && openssl rand -hex 32 | xargs -I VALUE sed -E -i.bak 's/^COOKIE_SIGNING_SALT=salt( .*)?$/COOKIE_SIGNING_SALT=VALUE/' .env.new
test -f .env.new && openssl rand -hex 16 | xargs -I VALUE sed -E -i.bak 's/^PENTAGI_POSTGRES_PASSWORD=postgres( .*)?$/PENTAGI_POSTGRES_PASSWORD=VALUE/' .env.new
test -f .env || mv .env.new .envThe compose file mounts three providerproviderA service or server that gives PentAGI its language models, such as OpenAI, Anthropic or a local Ollama. config files, so create them — empty files are fine:
touch example.custom.provider.yml example.ollama.provider.yml example.bedrock.provider.ymlIf you plan to use a custom OpenAI-compatible endpoint or Ollama, fetch the example configs instead of the empty files and point LLM_ or OLLAMA_ in .env at / or /. The custom example names OpenAI models, among them o3-mini, which OpenAI retires on 23 October 2026 — set each agentagentAn AI agent of PentAGI: a model with its own prompt, settings and tools that does one kind of work in a flow, such as testing, writing code or searching the web.'s model to one your endpoint serves:
curl -o example.custom.provider.yml https://raw.githubusercontent.com/vxcontrol/pentagi/main/examples/configs/custom-openai.provider.yml
curl -o example.ollama.provider.yml https://raw.githubusercontent.com/vxcontrol/pentagi/main/examples/configs/ollama-llama318b.provider.yml3. Add at least one LLM provider
Edit .env and set the key of at least one provider:
OPEN_AI_KEY=your_openai_key
ANTHROPIC_API_KEY=your_anthropic_key
GEMINI_API_KEY=your_gemini_keyOther providers — AWS Bedrock, Ollama, DeepSeek, GLM, Kimi, Qwen, MiniMax, Mistral, xAI and custom endpoints — are described in LLM providers. Search enginessearch engineA web search service that agents use to gather fresh information, such as DuckDuckGo, Google or Tavily. are optional; DuckDuckGo and Sploitus need no key:
DUCKDUCKGO_ENABLED=true
SPLOITUS_ENABLED=true
TAVILY_API_KEY=your_tavily_key4. Start the stack
curl -O https://raw.githubusercontent.com/vxcontrol/pentagi/main/docker-compose.yml
test -f .env && docker compose up -dThe web UI is served at https:/. Sign in with [email protected] / admin and change the password.
The web UI and the other services are bound to localhost, but each flowflowOne run of PentAGI: a goal, the tasks created from your messages, and everything the agents did along the way.'s sandboxsandboxThe isolated Docker container in which agents run their tools. The interface shows it as Terminal. publishes two callback ports, from 28000–29999 by default, on every interface of the Docker host, and ufw does not filter them. On a host others can reach, restrict that range first — see Network exposure. To update the installation later, follow Upgrading.
Optional stacks
Each optional service ships as its own compose file that you layer on top of the base one:
| Stack | Compose file | What it adds |
|---|---|---|
| LLM observability | docker-compose-langfuse.yml | Langfuse with ClickHouse, Redis and MinIO |
| Knowledge graphknowledge graphThe graph of hosts, services, vulnerabilities and the access between them that PentAGI builds during a test when this optional feature is enabled. It shows how findings connect. | docker-compose-graphiti.yml | Graphiti and Neo4j |
| System observability | docker-compose-observability.yml | Grafana, OpenTelemetry, VictoriaMetrics, Jaeger, Loki |
For production and any environment where untrusted code runs, isolate the tooltoolWhat an agent acts through: a built-in capability such as the terminal, the isolated browser or web search, or a program in the sandbox such as nmap, metasploit or sqlmap. containers on a dedicated worker node.
Last updated on
Quick start
Install PentAGI with the interactive installer — system requirements, download, a guided setup of providers and search engines, and the first sign-in.
Your first flow
Create your first flow, reuse prompts with templates, follow and steer the agents while they work, and download the report at the end.