Self-host safepilot
v0.2.0Security-first AI assistant for Telegram with approval
- Stars
- 190
- RAM
- ~6MB RSS
- Requires
- SQLite
ghcr.io/3dcf-labs/safepilot
What is safepilot?
SafePilot is a self-hosted AI assistant that operates through Telegram, turning messages into durable, checkpointed automation runs. It uses a risk-tiered execution model where every task is classified by risk level, with explicit checkpoints before high-risk actions run. The system persists context in SQLite with optional compression, supports both direct LLM API calls and an agent mode with tool-calling loops, and integrates with many third-party services. It runs as a single Rust binary with no external database server, deployed via Docker Compose or cargo build. Security features include SSRF-protected fetch, allowlisted shell commands with bash/sh refusal, cleared subprocess environments, optional bubblewrap sandboxing, and at-rest encryption of sensitive database fields. The project is in early development (v0.2.0) with a security-first design philosophy.
Should you self-host safepilot?
safepilot scores 42/100 on selfhost.directory (how scoring works) and ranks #80 of 120 in AI Assistant. It has 190 GitHub stars.
It shipped 2 stable releases in the past year. The latest, v0.2.0, came out on 4 March 2026. New versions land roughly every 7 days.
Setup is advanced: plan for several services and some ongoing maintenance. An official Docker image is available. It is Apache-2.0-licensed and written mostly in Rust.
Its closest alternative on selfhost.directory is hermes-agent (89/100, 258 015 stars). It scores higher overall, so compare the two before you pick. See safepilot vs hermes-agent side by side.
Features
- 3DCF context compression
- Allowlisted shell commands
- At-rest encryption
- Explicit approval checkpoints
- Multiple LLM modes
- Optional bubblewrap sandboxing
- Public runtime bindings
- Risk-tiered task execution
- SSRF-protected fetch
- Subprocess isolation
- Telegram bot interface
- Third-party Integrations
- Workspace Isolation
safepilot README
More in Chat
sama-serverSelf-hosted open-source chat server providing real-time messaging, horizontal clustering, push alerts, and multi-device sync for teams and developers.
Sarahah-plus-plusSelf-hosted open-source anonymous messaging tool that uses sentiment analysis to filter abusive content and deliver only constructive feedback.
searcharrSearcharr is a self-hosted Telegram bot for adding movies, series, and books to Radarr, Sonarr, and Readarr via chat.
sharkordOpen-source, self-hosted chat with voice, video, and screen sharing for small groups. Runs as a single binary or Docker container, no external database needed.
SimpleX ChatOpen-source messenger without user IDs: E2E encrypted chats, groups, calls and files, with mobile, desktop and terminal clients and self-hosted relay servers.
socialstream.ninjaFree, open-source tool that consolidates chat from 100+ streaming platforms into one dashboard with OBS overlays, TTS, AI cohosts, and automation.
SongbirdA self-hosted, open-source chat platform with direct messages, groups, channels, media support, push notifications, and Telegram channel mirroring.
SoulFlow-OrchestratorSelf-hosted AI agent runtime with 9 LLM backends, 141-node workflow engine, HITL gates, AES-256-GCM vault, Slack/Telegram/Discord/web chat. All data on your server.
SourceWeftOpen-source, self-hostable AI workstation with multi-agent collaboration, skill library, MCP integrations, and cited knowledge — an alternative to ChatGPT and NotebookLM.
SpacebarSpacebar Server is a self-hosted, open-source Discord backend reimplementation (AGPL-3.0) with API, gateway, CDN, and experimental WebRTC voice.
SpacebotSpacebot is a self-hosted AI agent system for teams. Its multi-threaded architecture handles concurrent conversations across Discord, Slack, Telegram without blocking.
Spectrum 2Spectrum 2 is a self-hosted, open-source XMPP transport gateway letting XMPP users chat with contacts on IRC, Slack, Facebook, MSN, Yahoo, and other legacy IM networks.
0 comments