selfhost.directory

The index of self-hostable projects — ranked, categorized and served with live updates.
Own your data and stop giving it to big tech.

Jentic One logo

Self-host Jentic One

v0.44.0

Execution layer securing AI agent API calls

BetaOpen SourceApache-2.0
Updated9 hours ago
LanguagePython
Setup difficultyModerate
Stars
216
Port
8000 (control plane (UI + APIs))
Docker
ghcr.io/jentic/jentic-one-app
Install with Docker

What is Jentic One?

Jentic One is a self-hosted platform that sits between AI agents and external APIs. Instead of giving agents API keys directly, operators register APIs and store credentials once in Jentic One. Agents then make calls through the Jentic Broker, which checks permissions, injects the appropriate credential at execution time, and records every request. The system deploys as two peer services — an App (control plane with UI, registry, auth, and admin) and a Broker (data plane that injects credentials) — backed by PostgreSQL or SQLite. It integrates with coding agents like Claude Code, Codex, and Cursor via a local MCP server or CLI, and supports OIDC for single sign-on. The project is in public beta (0.x releases) with schemas and CLI commands subject to change.

Should you self-host Jentic One?

Jentic One scores 48/100 on selfhost.directory (how scoring works) and ranks #110 of 209 in AI Agents. It has 216 GitHub stars.

It shipped 5 stable releases in the past year. The latest, v0.44.0, came out on 27 October 2026. New versions land roughly every 1 days.

Setup is moderate: expect some configuration beyond a single command. An official Docker image is available. It is Apache-2.0-licensed and written mostly in Python.

Its closest alternative on selfhost.directory is Orca (91/100, 108 446 stars). It scores higher overall, so compare the two before you pick. See Jentic One vs Orca side by side.

Features

  • Agent CLI
  • Anonymous Telemetry (Opt-in)Enabled by default in quickstart config; can be set to false.
  • API AI-Readiness Scoring
  • API Catalog with 10,000+ APIs
  • Arazzo Workflow Engine
  • Credential Broker
  • Credential Rotation & Revocation
  • Default-Deny Policy Engine
  • Execution Logging & Observability
  • MCP Server
  • Multi-database Support
  • OIDC Authentication
  • Operator CLI
  • Require-Approval Workflows

Jentic One README

How to install Jentic One

Install Jentic One with Docker

docker pull ghcr.io/jentic/jentic-one-app:latest docker volume create jentic-data curl -fsSLO https://raw.githubusercontent.com/jentic/jentic-one/main/config/quickstart.env docker run --rm --env-file quickstart.env -v jentic-data:/data
ghcr.io/jentic/jentic-one-app:latest python -m jentic_one.migrations.run docker run -d --name jentic-app --env-file quickstart.env -v jentic-data:/data
-p 127.0.0.1:8000:8000 ghcr.io/jentic/jentic-one-app:latest docker run -d --name jentic-broker --env-file quickstart.env -e JENTIC__APPS=broker -v jentic-data:/data
-p 127.0.0.1:8100:8000 ghcr.io/jentic/jentic-one-app:latest

Quickstart uses SQLite on a single volume with development-mode secrets. Production shape uses external Postgres, pinned image digest, real secrets, and TLS.

Jentic One releases & version history

FAQ

Does Jentic store execution logs?

Yes, for observability. Every brokered call writes an execution record, visible under Monitor → Executions in your instance.

Can I rotate credentials?

Yes — credentials and agent tokens can be revoked and regenerated at any time from your Jentic One dashboard.

Is my data secure?

Yes. API credentials are stored encrypted in your Jentic One Broker and injected at execution time — never sent to the LLM or returned to a caller. Access is default-deny.

Do you support MCP?

Yes. Search the public API directory over the hosted MCP server, and connect your own Jentic One instance as a custom connector for the full search → inspect → execute loop in tools like Claude, Windsurf, Cursor, and ChatGPT.

How do agents call Jentic?

Through your self-hosted Jentic One instance via the jentic CLI (search → inspect → execute) or over MCP.

How can I contribute an API or workflow?

Post your OpenAPI spec link in the #api-requests Discord channel or open an issue at jentic/jentic-public-apis using the import template.

Do I paste raw API secrets into prompts?

Never. Credentials are stored encrypted in your Jentic One Broker and injected at execution time — they never reach the agent, its prompts, or the response.

Can I browse APIs without an account?

Yes, the full catalog is the open-source Jentic Public APIs knowledge base, searchable in natural language over the hosted MCP directory with no account required.

What is API Search?

API Search is the in-app catalog of real-world capabilities from thousands of APIs, tens of thousands of operations, and multi-step workflows ready for agents to use.

Does Jentic lock me in?

No, Jentic is open-standards-first (OpenAPI, Arazzo, MCP). Your API definitions, workflows, and integrations remain portable.

Can I bring my own private APIs?

Yes, you can import private APIs and workflows, then control access at the agent level. Self-hosted deployment support is on the roadmap.

Do I need Jentic to build a Business Agent?

No, you can build agents without Jentic, but it handles the undifferentiated heavy lifting like auth, cataloging, workflows, and observability aligned to open standards.

What is a Business Agent?

A Business Agent is an AI system that plans and executes real-world tasks by calling external APIs and workflows securely, observably, and under your organization's controls.

More in API Gateway

Rate this project

Click to rate — no account needed.

0 comments

Posting as guest
Loading comments…