The permission model comes first
An AI employee holds a job such as support triage, sales ops or a Monday report, and its tool permissions decide whether you can deploy it. Kortix is the open-source version: the role, tools and memory are files in a repo you own, and a call set to Ask waits for a person.
Approval gates you set. Off until you set them.
Self-host free · Any model provider, your own keys · Slack and Microsoft Teams are live
The open-source AI Operating System
# kortix.yamlagents: support-triage: file: agents/support-triage.md # what it does, in plain markdown connectors: all # what it may reachEach card shows what the employee hands back, and the line where a person has to say yes.
What comes back
The agent reads each new ticket, tags it and drafts a reply in the customer's language; a refund above the limit opens an Ask instead of sending.
The draft is finished; the refund waits for a person.
It reads a new lead from the inbox, writes the fields back to the record and stages the follow-up as a draft that needs a person's yes.
Every field change is a line in the request a person reviews.
It gathers the week's releases and competitor notes, writes the brief and links each claim to the page it came from.
| Source | Change | Date |
|---|---|---|
| Northwind | pricing page rewritten | 2026-10-12 |
| Globex | new EU region | 2026-10-13 |
Every line traces to a page someone can open.
Vendors sell 24/7 autonomy; the row that decides your rollout is who can read and change what the agent may do.
20,000+
GitHub stars
An open-source AI employee is a role an agent holds, with its job description, tools, memory and permissions in files your company owns. You can read the config, diff a change and host the whole thing yourself instead of renting a seat inside a vendor's dashboard.
Yes. Kortix gives an agent the same role-based job, then puts the role, tool permissions and memory in a git repo you own rather than a dashboard you log into. Self-host it, or run it on Kortix Cloud with your own keys.
Yes. Add the Kortix app to Slack or Teams, invite the bot to a channel and mention it with a task; the message starts a session and the reply lands in the thread. Slack and Microsoft Teams are live.
No, not unless you allow it. Kortix sets each tool to Allow, Ask or Block, down to the arguments of the call, and an Ask holds it until a person approves. Approval gates are off until you set them.
Self-host it for free, or run it on Kortix Cloud.