{ "meta": { "attribution": "Anchor Terminal (https://www.anchorterminal.com)", "attributionRequired": true, "credit": "CC BY 4.0, credit Anchor Terminal and link the page or API address you took it from (https://www.anchorterminal.com/terms/#data)", "docs": "https://www.anchorterminal.com/docs/", "generatedAt": "2026-11-07", "license": "CC-BY-4.0", "method": "https://www.anchorterminal.com/benchmark/", "methodology": "0.7", "openapi": "https://www.anchorterminal.com/openapi.json", "preview": false, "run": "2026-10-01", "runLabel": "October 2026 research run", "terms": "https://www.anchorterminal.com/terms/#data" }, "tool": { "slug": "privategpt", "name": "PrivateGPT", "vendor": "Zylon (PriBAI Technology Spain S.L.)", "vendorUrl": "https://docs.privategpt.dev", "kind": "http-api", "category": "local-ai", "summary": "PrivateGPT is Zylon's open-source server that puts an Anthropic-style messages API, document ingestion, retrieval with citations, built-in tools and MCP connectors in front of any OpenAI-compatible local model server. The owner runs it.", "url": "https://www.anchorterminal.com/tools/privategpt", "markdownUrl": "https://www.anchorterminal.com/tools/privategpt.md", "slimMarkdownUrl": "https://www.anchorterminal.com/tools/privategpt.min.md", "jsonUrl": "https://www.anchorterminal.com/api/v1/tools/privategpt.json", "dns": "privategpt.grade.anchorterminal.com", "repo": "https://github.com/zylon-ai/private-gpt", "license": "Apache-2.0", "transports": [ "http" ], "packages": [ { "registry": "oci", "name": "zylonai/private-gpt" } ], "auth": "none", "authNotes": "Authentication is off by default. When `server.auth.enabled` is set, every request must carry one static secret in the `Authorization` header, compared with the whole header value. There are no per-user keys, scopes or rotation, and the docs show it as a Bearer token, a Basic value and an Anthropic API key in different places (checked 2026-11-06).", "pricing": "free", "pricingNotes": "Free under Apache-2.0 with no account or card. The cost is the owner's hardware and model server. Zylon sells a separate enterprise platform built on PrivateGPT through demos, with no public price (checked 2026-11-06).", "priceSummary": "Free · OSS", "where": "local", "x402": { "level": "no", "evidence": "No x402, MPP or L402 in the source, the OpenAPI file or the docs (checked 2026-11-06).", "endpoints": [] }, "toolCount": null, "popularity": { "githubStars": 57600, "npmWeekly": null, "pypiWeekly": null, "asOf": "2026-11-06" }, "docsUrl": "https://docs.privategpt.dev/introduction", "llmsTxt": "https://docs.privategpt.dev/llms.txt", "openapi": "https://raw.githubusercontent.com/zylon-ai/private-gpt/main/fern/openapi/openapi.json", "capabilities": [ "inference.local", "memory.search", "agent.mcp-client" ], "tags": [ "open-source", "local", "self-hosted", "docker", "openapi", "llms-txt", "rag", "mcp-client", "anthropic-compatible", "python", "free" ], "lastRelease": "2026-06-18", "graded": true, "anchor": { "graded": true, "score": 53.2, "grade": "D", "agentReady": false, "rank": 954, "ranked": true, "rankOf": 1486, "categoryRank": 11, "methodology": "0.7", "run": "2026-10-01", "scores": { "ergonomics": 64, "maintenance": 41, "payments": 60, "reliability": 70, "schema": 83, "security": 32, "transparency": 64 }, "pending": [ "performance", "tasks" ], "breakdown": [ { "key": "reliability", "name": "Reliability", "weight": 16, "effectiveWeight": 20, "score": 70, "points": 14, "reason": "Read with the local-software lines, since PrivateGPT runs on the owner's hardware with no hosted service behind it. Homebrew tap, `uv tool install` from Zylon's own wheel index (not PyPI) and Docker Hub images `zylonai/private-gpt` 1.0.1 of 18 June 2026. Python 3.11 only, stated in pyproject.toml, and it needs a separate OpenAI-compatible model server (17 of 20). tests.yml runs format, lint, typecheck and the tests affected by each push on main, with the full suite of 217 test files on release pull requests. We couldn't see run results because the GitHub API refused us, and issue #2441 of 1 November reports the Claude spec update workflow failing (15 of 25). GitHub shows 3 open issues of about 1,250, because a stale bot closes quiet issues, two security reports among them, with no maintainer reply (12 of 25). release-please keeps a changelog with breaking changes marked, but no release has been cut since 1.0.1 while main carries 51 commits since 8 August, among them a breaking observability change of 23 October (11 of 15). Version 1.0.1 (15). 17 + 15 + 12 + 11 + 15 = 70.", "checked": "2026-11-06" }, { "key": "performance", "name": "Performance", "weight": 10, "effectiveWeight": 0, "pending": true, "points": 0, "reason": "Pending. Latency is measured per call by our probes, which haven't run yet, so this run doesn't score it. Its weight is shared across the assessed categories until the first probe window closes." }, { "key": "schema", "name": "Schema \u0026 documentation", "weight": 13, "effectiveWeight": 16.25, "score": 83, "points": 13.49, "reason": "An OpenAPI file of 38 paths in the repository (fern/openapi/openapi.json, version 1.0.1), also served by each instance at /openapi.json, with the messages API modelled on Anthropic's (25). docs.privategpt.dev serves llms.txt, a Markdown copy of every page and a docs MCP server (10). The docs explain each endpoint group, startup and model discovery, and a compatibility table says which parts of the Claude API are supported, partial or missing, such as prompt caching and OAuth (15 of 20). Pydantic models with literal type discriminators and required fields, while settings and tool context are wide objects (12 of 15). curl examples for each guide and a `/v1/messages/validate` route, with error shapes not documented as a list (9 of 15). `/v1` paths and a dated changelog, though releases trail main by more than four months (12 of 15). 25 + 10 + 15 + 12 + 9 + 12 = 83.", "checked": "2026-11-06" }, { "key": "ergonomics", "name": "Agent ergonomics", "weight": 13, "effectiveWeight": 16.25, "score": 64, "points": 10.4, "reason": "Read for an HTTP API an agent calls on a local instance. Token counting, `top_k` style retrieval settings, citation output and response byte caps let a caller size context (18 of 25). Artifact listing by namespace and retrieval filters, with no documented cursor pagination (12 of 20). FastAPI validation errors name the field and the validate route checks a request before running it, but there is no error catalogue (12 of 20). Async messages and ingestion return task ids with status, cancel and delete routes. No idempotency keys were found (10 of 20). Anthropic SDKs and Claude Code work by pointing `ANTHROPIC_BASE_URL` at the server, but a model server and an embedding server have to be configured first (12 of 15). 18 + 12 + 12 + 10 + 12 = 64.", "checked": "2026-11-06" }, { "key": "security", "name": "Security \u0026 auth", "weight": 14, "effectiveWeight": 17.5, "score": 32, "points": 5.6, "reason": "Read with the tool checklist. Authentication is off by default, and when on it is one static secret compared with the whole `Authorization` header, with a sample `secret:key` value in settings.yaml. There are no per-user keys or scopes, `private-gpt serve` binds 0.0.0.0 by default and CORS allows every origin, so a default start answers anyone on the network. The docs disagree on the header (Bearer, Basic or an Anthropic key) (6 of 30). Tools are chosen per request and code execution has internet off by default, but bash runs as a host subprocess with resource limits, not in a container, and nothing asks for approval (6 of 20). Web fetch, web search, documents and MCP servers bring untrusted text to the model. A public prompt-injection report (#2270) was closed by the stale bot, and no guidance was found beyond a 19 October change that bounds tool output (3 of 15). OpenTelemetry traces cover every request, model call, tool and sandbox step, off by default, with local JSON lines exporters (10 of 15). SECURITY.md since 23 July 2026 asks for private reports through GitHub or Discord. No bounty, no certification, and the June and July security reports in issues were closed by a bot with no reply (7 of 20). 6 + 6 + 3 + 10 + 7 = 32.", "checked": "2026-11-06" }, { "key": "payments", "name": "Payments \u0026 pricing", "weight": 10, "effectiveWeight": 12.5, "score": 60, "points": 7.5, "reason": "Read with the self-hosted rule. PrivateGPT is Apache-2.0 with nothing to buy. Zylon, the company's enterprise platform built on it, is a separate product sold through demos, and is not the surface graded. No payment protocol (0). Free with no account and no card, so 20, 20 and 20 on the last three lines.", "checked": "2026-11-06" }, { "key": "tasks", "name": "Task success", "weight": 10, "effectiveWeight": 0, "pending": true, "points": 0, "reason": "Pending. Task success needs the category task suites run through each tool, which haven't run yet, so this run doesn't score it. Its weight is shared across the assessed categories until then. A data provider's data-quality score is published on its listing now and becomes half of this category when it's scored." }, { "key": "maintenance", "name": "Maintenance \u0026 community", "weight": 7, "effectiveWeight": 8.75, "score": 41, "points": 3.59, "reason": "The last release is 1.0.1, dated 16 June 2026 in the changelog and tagged 18 June, 141 days before the check (10 of 30). No release or dated changelog entry in the 90 days since 8 August (0 of 20). Maintainers commit most days and outside pull requests merged in October, but 23 pull requests are open and the stale bot closes issues, including two security reports, with no maintainer reply (13 of 25). Homebrew tap, wheel index and Docker images ship with releases, and Anthropic SDKs work against it. No product MCP server of its own, though it connects to remote MCP servers (10 of 15). Dependabot, uv.lock, actions pinned by commit since 19 October and dependency CVE upgrades in June, July and August (8 of 10). 10 + 0 + 13 + 10 + 8 = 41.", "checked": "2026-11-06" }, { "key": "transparency", "name": "Transparency \u0026 trust", "weight": 7, "effectiveWeight": 8.75, "score": 64, "points": 5.6, "note": "editorial 67, provenance 61", "reason": "Apache-2.0 (30). The OpenAPI description says no data leaves the execution environment, but the docs list cloud gateways as model providers and web search goes to outside services when enabled, and no privacy statement covers the software. Zylon's privacy policy covers its website (15 of 30). The 1.0 rewrite was marked as a breaking change in the changelog, and there is no deprecation policy (6 of 20). No telemetry to Zylon found in the source. OpenTelemetry tracing is off by default and its exporters write local files or to the owner's collector, documented on the observability page (16 of 20). 30 + 15 + 6 + 16 = 67.", "checked": "2026-11-06" } ], "assessment": { "date": "2026-11-06", "basis": "public evidence", "confidence": "medium", "notes": { "ergonomics": "Read for an HTTP API an agent calls on a local instance. Token counting, `top_k` style retrieval settings, citation output and response byte caps let a caller size context (18 of 25). Artifact listing by namespace and retrieval filters, with no documented cursor pagination (12 of 20). FastAPI validation errors name the field and the validate route checks a request before running it, but there is no error catalogue (12 of 20). Async messages and ingestion return task ids with status, cancel and delete routes. No idempotency keys were found (10 of 20). Anthropic SDKs and Claude Code work by pointing `ANTHROPIC_BASE_URL` at the server, but a model server and an embedding server have to be configured first (12 of 15). 18 + 12 + 12 + 10 + 12 = 64.", "maintenance": "The last release is 1.0.1, dated 16 June 2026 in the changelog and tagged 18 June, 141 days before the check (10 of 30). No release or dated changelog entry in the 90 days since 8 August (0 of 20). Maintainers commit most days and outside pull requests merged in October, but 23 pull requests are open and the stale bot closes issues, including two security reports, with no maintainer reply (13 of 25). Homebrew tap, wheel index and Docker images ship with releases, and Anthropic SDKs work against it. No product MCP server of its own, though it connects to remote MCP servers (10 of 15). Dependabot, uv.lock, actions pinned by commit since 19 October and dependency CVE upgrades in June, July and August (8 of 10). 10 + 0 + 13 + 10 + 8 = 41.", "payments": "Read with the self-hosted rule. PrivateGPT is Apache-2.0 with nothing to buy. Zylon, the company's enterprise platform built on it, is a separate product sold through demos, and is not the surface graded. No payment protocol (0). Free with no account and no card, so 20, 20 and 20 on the last three lines.", "reliability": "Read with the local-software lines, since PrivateGPT runs on the owner's hardware with no hosted service behind it. Homebrew tap, `uv tool install` from Zylon's own wheel index (not PyPI) and Docker Hub images `zylonai/private-gpt` 1.0.1 of 18 June 2026. Python 3.11 only, stated in pyproject.toml, and it needs a separate OpenAI-compatible model server (17 of 20). tests.yml runs format, lint, typecheck and the tests affected by each push on main, with the full suite of 217 test files on release pull requests. We couldn't see run results because the GitHub API refused us, and issue #2441 of 1 November reports the Claude spec update workflow failing (15 of 25). GitHub shows 3 open issues of about 1,250, because a stale bot closes quiet issues, two security reports among them, with no maintainer reply (12 of 25). release-please keeps a changelog with breaking changes marked, but no release has been cut since 1.0.1 while main carries 51 commits since 8 August, among them a breaking observability change of 23 October (11 of 15). Version 1.0.1 (15). 17 + 15 + 12 + 11 + 15 = 70.", "schema": "An OpenAPI file of 38 paths in the repository (fern/openapi/openapi.json, version 1.0.1), also served by each instance at /openapi.json, with the messages API modelled on Anthropic's (25). docs.privategpt.dev serves llms.txt, a Markdown copy of every page and a docs MCP server (10). The docs explain each endpoint group, startup and model discovery, and a compatibility table says which parts of the Claude API are supported, partial or missing, such as prompt caching and OAuth (15 of 20). Pydantic models with literal type discriminators and required fields, while settings and tool context are wide objects (12 of 15). curl examples for each guide and a `/v1/messages/validate` route, with error shapes not documented as a list (9 of 15). `/v1` paths and a dated changelog, though releases trail main by more than four months (12 of 15). 25 + 10 + 15 + 12 + 9 + 12 = 83.", "security": "Read with the tool checklist. Authentication is off by default, and when on it is one static secret compared with the whole `Authorization` header, with a sample `secret:key` value in settings.yaml. There are no per-user keys or scopes, `private-gpt serve` binds 0.0.0.0 by default and CORS allows every origin, so a default start answers anyone on the network. The docs disagree on the header (Bearer, Basic or an Anthropic key) (6 of 30). Tools are chosen per request and code execution has internet off by default, but bash runs as a host subprocess with resource limits, not in a container, and nothing asks for approval (6 of 20). Web fetch, web search, documents and MCP servers bring untrusted text to the model. A public prompt-injection report (#2270) was closed by the stale bot, and no guidance was found beyond a 19 October change that bounds tool output (3 of 15). OpenTelemetry traces cover every request, model call, tool and sandbox step, off by default, with local JSON lines exporters (10 of 15). SECURITY.md since 23 July 2026 asks for private reports through GitHub or Discord. No bounty, no certification, and the June and July security reports in issues were closed by a bot with no reply (7 of 20). 6 + 6 + 3 + 10 + 7 = 32.", "transparency": "Apache-2.0 (30). The OpenAPI description says no data leaves the execution environment, but the docs list cloud gateways as model providers and web search goes to outside services when enabled, and no privacy statement covers the software. Zylon's privacy policy covers its website (15 of 30). The 1.0 rewrite was marked as a breaking change in the changelog, and there is no deprecation policy (6 of 20). No telemetry to Zylon found in the source. OpenTelemetry tracing is off by default and its exporters write local files or to the owner's collector, documented on the observability page (16 of 20). 30 + 15 + 6 + 16 = 67." }, "sources": [ { "what": "repository, cloned (README, settings.yaml, auth and URI loader source, CI, CHANGELOG, SECURITY.md)", "url": "https://github.com/zylon-ai/private-gpt", "seen": "2026-11-06" }, { "what": "OpenAPI file", "url": "https://github.com/zylon-ai/private-gpt/blob/main/fern/openapi/openapi.json", "seen": "2026-11-06" }, { "what": "docs index for agents", "url": "https://docs.privategpt.dev/llms.txt", "seen": "2026-11-06" }, { "what": "repository page, stars and counts", "url": "https://github.com/zylon-ai/private-gpt", "seen": "2026-11-06" }, { "what": "issue list, newest first", "url": "https://github.com/zylon-ai/private-gpt/issues?q=is%3Aissue+sort%3Acreated-desc", "seen": "2026-11-06" }, { "what": "issue 2269, local file read report", "url": "https://github.com/zylon-ai/private-gpt/issues/2269", "seen": "2026-11-06" }, { "what": "issue 2282, Gradio SSRF report", "url": "https://github.com/zylon-ai/private-gpt/issues/2282", "seen": "2026-11-06" }, { "what": "wheel index", "url": "https://wheels.privategpt.dev/packages/", "seen": "2026-11-06" }, { "what": "Docker Hub tags", "url": "https://hub.docker.com/r/zylonai/private-gpt", "seen": "2026-11-06" }, { "what": "Zylon terms and conditions", "url": "https://www.zylon.ai/legal/terms-and-conditions", "seen": "2026-11-06" }, { "what": "Zylon pre-seed announcement", "url": "https://www.zylon.ai/resources/blog/announcing-zylon-s-3.2m-pre-seed-funding-round", "seen": "2026-11-06" }, { "what": "RDAP record for privategpt.dev", "url": "https://rdap.org/domain/privategpt.dev", "seen": "2026-11-06" } ], "openQuestions": [ "unchecked: CI results on main, open issue and pull request reply times and GitHub security advisories, because the GitHub API answered with a rate limit. The repository page showed 57.6k stars, 3 open issues and 23 open pull requests", "We did not run PrivateGPT. The local file read is read from `private_gpt/server/ingest/uri_loader.py` and its callers, not reproduced, and a guard elsewhere could exist that we did not find", "Issue #2282 concerns the 0.6.2 Gradio image, superseded by 1.0, so it carries no deduction", "The README's install line for Linux and Windows pipes Astral's uv installer into a shell. The PrivateGPT wheels come from wheels.privategpt.dev, not PyPI", "Zylon's terms forbid accessing its services through bots or scripts. We read its public pages for the legal entity and funding only", "The lead said the API is Claude API-compatible. It follows the Anthropic messages shape for the routes in its compatibility table; prompt caching and OAuth are listed as unsupported" ] }, "negative": -7, "negativeNotes": [ "Issue #2269, opened 11 June 2026, reports that the async ingestion API reads any local path given as a URI artifact. The stale bot closed it as not planned on 5 July with no maintainer reply, and `load_file_from_uri` in the source of 29 October 2026 still falls back to reading a local file for any value that isn't a URL, s3 or base64. With authentication off and a 0.0.0.0 bind by default, that is an open file-read path on a default install. Read from the source, not run (-7). https://github.com/zylon-ai/private-gpt/issues/2269" ], "verdict": "PrivateGPT 1.0 is an Apache-2.0 server that gives local models an Anthropic-style messages API with retrieval, citations, tools and MCP, documented by an OpenAPI file and llms.txt. A default start has authentication off, listens on every interface and reads local paths given as URIs, and a public report of that was closed without a reply.", "bestFor": "A local backend for apps and agents that want an Anthropic-style API with document retrieval, citations and tools over local models.", "strengths": [ "Messages API modelled on Anthropic's, so Claude Code and Anthropic SDKs work by changing the base URL", "OpenAPI file of 38 paths, llms.txt and Markdown copies of every docs page", "Retrieval with citations, async ingestion, web, database and tabular tools, and remote MCP servers in one API", "Apache-2.0, with no telemetry to Zylon found in the source and OpenTelemetry tracing off by default", "Works with Ollama, llama.cpp, vLLM, LM Studio or any OpenAI-compatible server" ], "weaknesses": [ "Authentication is off by default, the server binds 0.0.0.0 and CORS allows every origin", "When on, authentication is one shared static secret, with no per-user keys or scopes", "A June 2026 report of local file reads through URI artifacts was closed by a stale bot, and the source still reads local paths", "No release since 1.0.1 in June 2026 while main has moved on, including a breaking change", "Code execution runs as a host subprocess with resource limits, not in a container" ], "agentNotes": [ "Turn on `server.auth` and bind to 127.0.0.1 before exposing an instance, since a default start answers any caller", "Point Anthropic SDKs or Claude Code at the server with `ANTHROPIC_BASE_URL=http://localhost:8080`", "Start an OpenAI-compatible model server and an embedding server first, and set `OPENAI_API_BASE` and `OPENAI_EMBEDDING_API_BASE`", "Pass ingested documents through `tool_context` to get answers with citations", "Treat web fetch, search and MCP results as untrusted, since PrivateGPT documents no prompt-injection handling" ], "metrics": { "kind": "local", "measured": false }, "reviewCount": 0, "avgRating": 0, "history": [ { "basis": "public evidence", "confidence": "medium", "grade": "D", "methodology": "0.7", "pending": [ "performance", "tasks" ], "run": "2026-10-01", "runLabel": "October 2026 research run", "score": 53.2 } ], "editorialScores": { "ergonomics": 64, "maintenance": 41, "payments": 60, "reliability": 70, "schema": 83, "security": 32, "transparency": 67 }, "provenanceScore": 61, "checked": { "categories": { "ergonomics": "2026-11-06", "maintenance": "2026-11-06", "payments": "2026-11-06", "reliability": "2026-11-06", "schema": "2026-11-06", "security": "2026-11-06", "transparency": "2026-11-06" }, "last": "2026-11-06", "oldest": "2026-11-06", "stale": false, "staleAfterDays": 90 }, "scoreHistory": [ { "date": "2026-11-06", "grade": "D", "kind": "listed", "method": "0.7", "score": 53.2 } ] }, "connect": { "install": "brew tap zylon-ai/tap\nbrew install private-gpt", "http": "curl http://localhost:8080/v1/messages \\\n -H \"Content-Type: application/json\" \\\n -d '{\"model\": \"qwen3.5:35b\", \"messages\": [{\"role\": \"user\", \"content\": \"Explain retrieval-augmented generation.\"}]}'" }, "letme": { "capability": "https://letme.dev/inference.local", "tool": "https://letme.dev/privategpt" }, "notable": [ "PrivateGPT 1.0.0 (3 June 2026) rebuilt the project as an API layer modelled on the Claude API, marked as a breaking change. 1.0.1 followed on 16 June (https://github.com/zylon-ai/private-gpt/blob/main/CHANGELOG.md)", "It doesn't run models. It connects to any server with `/v1/chat/completions` and `/v1/models`, set by `OPENAI_API_BASE` (https://github.com/zylon-ai/private-gpt/blob/main/README.md)", "The OpenAPI file has 38 paths for messages, async messages, token counting, models, artifacts, files, embeddings, skills and built-in tools (https://github.com/zylon-ai/private-gpt/blob/main/fern/openapi/openapi.json)", "Requests can name remote MCP servers in `mcp_servers`, and guides cover Claude Code, Claude Desktop, the Claude add-ins for Microsoft 365 and OpenCode (https://docs.privategpt.dev/llms.txt)", "settings.yaml ships with `auth.enabled: false`, CORS open to every origin, and `private-gpt serve` binds 0.0.0.0 (https://github.com/zylon-ai/private-gpt/blob/main/settings.yaml)", "Code execution runs bash as a host subprocess with setrlimit limits and per-session workspaces, with internet off by default; Windows gets no resource limits (https://docs.privategpt.dev/tools/code-execution.md)", "Issue #2269 (11 June 2026) on local file reads through the async ingestion API and #2282 (3 July 2026) on Gradio SSRF were closed by the stale bot as not planned with no maintainer reply (https://github.com/zylon-ai/private-gpt/issues/2269)", "SECURITY.md was added on 23 July 2026 and asks for private reports through GitHub or Discord (https://github.com/zylon-ai/private-gpt/blob/main/SECURITY.md)" ], "area": "models", "details": [ { "label": "Surface listed", "value": "The PrivateGPT 1.0 server and its REST API on the owner's machine, read from a clone of github.com/zylon-ai/private-gpt (newest commit 29 October 2026), docs.privategpt.dev and zylon.ai on 6 November 2026. Nothing was installed or run" }, { "label": "Which PrivateGPT", "value": "The zylon-ai/private-gpt project, first released in May 2023 per CITATION.cff. Zylon's enterprise platform on top of it is a separate, sales-led product" }, { "label": "Model servers", "value": "Ollama, LM Studio, llama.cpp's server, vLLM or any OpenAI-compatible endpoint, including cloud gateways listed in the docs. Embeddings come from a second endpoint" }, { "label": "API", "value": "`POST /v1/messages` with streaming, async jobs and token counting, `/v1/models`, `/v1/artifacts/*` ingestion, `/v1/files`, `/v1/embeddings`, `/v1/skills`, and tool routes for semantic search, web search, web fetch, database queries and tabular analysis" }, { "label": "Not supported", "value": "Prompt caching and OAuth or organisations, per the README's Claude API compatibility table. Skills are basic" }, { "label": "Install", "value": "Homebrew tap, `uv tool install` from wheels.privategpt.dev with Python 3.11, or Docker images `zylonai/private-gpt`" }, { "label": "Observability", "value": "OpenTelemetry traces of requests, model calls, tools, sandbox steps and ingestion, off by default (`PGPT_OBSERVABILITY=none`), written to local JSON lines or the owner's OTLP collector" }, { "label": "Legal entity", "value": "PriBAI Technology Spain S.L., trading as Zylon, Calle Antoñete 7, Valdemorillo, 28210 Madrid, per the zylon.ai terms" } ], "provenance": { "legalEntity": "PriBAI Technology Spain S.L.", "domain": "privategpt.dev", "domainRegistered": "2023-10-16", "endpointOnVendorDomain": null, "terms": "https://github.com/zylon-ai/private-gpt/blob/main/LICENSE", "privacy": "", "statusPage": "", "changelog": "https://github.com/zylon-ai/private-gpt/blob/main/CHANGELOG.md", "securityTxt": "none", "checked": "2026-11-06", "notes": [ "Self-hosted software with no hosted endpoint, so the Apache-2.0 licence stands in for terms and no privacy policy is scored.", "The zylon.ai terms name PriBAI Technology Spain S.L. (VAT ESB56550130) under Spanish law and cover the website and Zylon services. They forbid access through bots, scripts or scrapers, outside standard search engine or browser use. We read the terms and two public pages.", "RDAP gives privategpt.dev a registration date of 16 October 2023.", "docs.privategpt.dev/.well-known/security.txt and www.zylon.ai/.well-known/security.txt answer 404. SECURITY.md in the repository is the reporting route.", "docs.privategpt.dev and www.zylon.ai robots.txt allow our reader. wheels.privategpt.dev has no robots.txt (404)." ], "score": 61, "checks": [ { "check": "Legal entity named", "value": "PriBAI Technology Spain S.L.", "points": 20, "max": 20, "state": "ok" }, { "check": "Domain age", "value": "privategpt.dev, registered 2023-10-16 (3 years)", "points": 7, "max": 15, "state": "part" }, { "check": "Endpoint on the vendor's domain", "value": "no hosted endpoint", "points": 0, "max": 0, "state": "na" }, { "check": "Terms of service", "value": "read, states 2 of the 7 things a reader expects", "points": 5.7, "max": 10, "state": "part" }, { "check": "Privacy policy", "value": "nothing hosted, not scored", "points": 0, "max": 0, "state": "na" }, { "check": "Status page", "value": "not found", "points": 0, "max": 10, "state": "no" }, { "check": "Changelog", "value": "published", "points": 10, "max": 10, "state": "ok" }, { "check": "security.txt", "value": "not found", "points": 0, "max": 10, "state": "no" }, { "check": "People named", "value": "1 named with their role, none with a public profile", "points": 7, "max": 10, "state": "part" }, { "check": "Support route", "value": "a support address, help pages, a community", "points": 5, "max": 5, "state": "ok" } ], "policies": [ { "kind": "terms", "url": "https://github.com/zylon-ai/private-gpt/blob/main/LICENSE", "state": "read", "readAt": "2026-11-06", "words": 1581, "points": 5.7, "max": 10, "expected": [ { "key": "terms.date", "label": "Gives the date it was last updated", "found": false }, { "key": "terms.law", "label": "Names the governing law or courts", "found": false }, { "key": "terms.liability", "label": "States a limit on its liability", "found": true, "quote": "…arising as a result of this License or out of the use or inability to use the Work (including but not limited to damages for loss of goodwill, work stoppage, computer failure or malfunction, or any and all other commercial damages or losses), even if such Contributor has been advised of the possibility of such damages.", "says": "Rules out indirect and consequential losses, with no cap named in this sentence" }, { "key": "terms.termination", "label": "Says how the agreement or account can be ended", "found": false }, { "key": "terms.changes", "label": "Says how changes to the terms are announced", "found": false }, { "key": "terms.use", "label": "Lists what users may not do", "found": true, "quote": "you may not use this file except in compliance with the License." }, { "key": "terms.sla", "label": "Refers to a service level or uptime commitment", "found": false } ] }, { "kind": "privacy", "url": "", "state": "none-found", "points": 0, "max": 10 } ] }, "humans": { "slug": "privategpt", "checked": "2026-11-06", "company": "Zylon", "people": [ { "name": "Daniel Gallego Vico", "role": "Co-founder and co-CEO, Zylon", "founder": true, "page": "/people/daniel-gallego-vico/" } ], "peopleNote": "Zylon's pre-seed post of 1 February 2024 is signed by Daniel Gallego Vico as co-founder and CPTO, with an author bio calling him co-founder and co-CEO; the co-CEO title is used here as the later of the two on the same page. The post names a second co-founder only as Iván, former CTO of OnTruck, with no surname, so he isn't listed. The about page and investors page on zylon.ai are drawn by script and showed no names on 6 November 2026. The legal entity is PriBAI Technology Spain S.L., from the zylon.ai terms. CITATION.cff lists the author as Zylon by PrivateGPT with hello@zylon.ai. Investors come from the pre-seed post; a search on 6 November 2026 found no later round.", "companySocial": { "linkedin": "https://www.linkedin.com/company/zylon-privategpt", "x": "https://x.com/ZylonPrivateGPT", "github": "https://github.com/zylon-ai" }, "support": { "emails": [ "hello@zylon.ai" ], "urls": [ "https://docs.privategpt.dev/introduction", "https://github.com/zylon-ai/private-gpt/blob/main/SECURITY.md" ], "community": [ { "label": "PrivateGPT Discord", "url": "https://discord.gg/F8KCFeZbkx", "kind": "discord" }, { "label": "PrivateGPT issues", "url": "https://github.com/zylon-ai/private-gpt/issues", "kind": "github" } ], "contactEmails": [ "hello@zylon.ai" ], "contactUrls": [ "https://cal.com/zylon/demo" ] }, "sources": [ "https://www.zylon.ai/resources/blog/announcing-zylon-s-3.2m-pre-seed-funding-round", "https://www.zylon.ai/legal/terms-and-conditions", "https://www.zylon.ai/company/about", "https://github.com/zylon-ai/private-gpt/blob/main/README.md", "https://github.com/zylon-ai/private-gpt/blob/main/CITATION.cff" ], "ownership": { "status": "private", "totalRaised": { "amount": "$3.2M", "asOf": "2024-02", "source": "https://www.zylon.ai/resources/blog/announcing-zylon-s-3.2m-pre-seed-funding-round" }, "checked": "2026-11-06", "sources": [ "https://www.zylon.ai/resources/blog/announcing-zylon-s-3.2m-pre-seed-funding-round", "https://www.zylon.ai/legal/terms-and-conditions" ] }, "investors": [ { "name": "Felicis", "kind": "vc", "rounds": [ "Pre-seed, February 2024" ], "lead": true, "url": "https://www.felicis.com", "source": "https://www.zylon.ai/resources/blog/announcing-zylon-s-3.2m-pre-seed-funding-round", "quote": "$3.2M Pre-Seed founding round", "page": "/investors/felicis/" }, { "name": "LifeX Ventures", "kind": "vc", "rounds": [ "Pre-seed, February 2024" ], "source": "https://www.zylon.ai/resources/blog/announcing-zylon-s-3.2m-pre-seed-funding-round", "quote": "LifeX Ventures", "page": "/investors/lifex-ventures/" }, { "name": "Zypsy", "kind": "vc", "rounds": [ "Pre-seed, February 2024" ], "source": "https://www.zylon.ai/resources/blog/announcing-zylon-s-3.2m-pre-seed-funding-round", "quote": "Zypsy", "page": "/investors/zypsy/" }, { "name": "Travis McPeak", "kind": "angel", "rounds": [ "Pre-seed, February 2024" ], "source": "https://www.zylon.ai/resources/blog/announcing-zylon-s-3.2m-pre-seed-funding-round", "quote": "Travis McPeak", "page": "/investors/travis-mcpeak/" }, { "name": "Kirill Tashilov", "kind": "angel", "rounds": [ "Pre-seed, February 2024" ], "source": "https://www.zylon.ai/resources/blog/announcing-zylon-s-3.2m-pre-seed-funding-round", "quote": "Kirill Tashilov", "page": "/investors/kirill-tashilov/" }, { "name": "Hans-Christian Zappel", "kind": "angel", "rounds": [ "Pre-seed, February 2024" ], "source": "https://www.zylon.ai/resources/blog/announcing-zylon-s-3.2m-pre-seed-funding-round", "quote": "Hans-Christian Zappel", "page": "/investors/hans-christian-zappel/" } ] }, "pageJsonUrl": "https://www.anchorterminal.com/tools/privategpt.json", "live": { "slug": "privategpt", "versions": [ { "registry": "github", "name": "zylon-ai/private-gpt", "version": "v1.0.1", "released": "2026-06-18", "seenAt": "2026-11-06T23:58:40.643071731Z" } ], "githubStars": 57632, "securityTxt": { "url": "https://privategpt.dev/.well-known/security.txt", "state": "none", "checkedAt": "2026-11-07T15:59:53.351491852Z" }, "llmsTxt": { "url": "https://docs.privategpt.dev/llms.txt", "ok": true, "status": 200, "checkedAt": "2026-11-07T15:33:41.730243326Z" }, "pages": [ { "url": "https://raw.githubusercontent.com/zylon-ai/private-gpt/main/CHANGELOG.md", "kind": "changelog", "status": 200, "checkedAt": "2026-11-07T14:24:15.016082629Z", "changedAt": "0001-01-01T00:00:00Z", "fingerprint": "767d5dd99544" }, { "url": "https://raw.githubusercontent.com/zylon-ai/private-gpt/main/LICENSE", "kind": "terms", "status": 200, "checkedAt": "2026-11-07T14:24:17.075442465Z", "changedAt": "0001-01-01T00:00:00Z", "fingerprint": "839fbbcddc72" } ], "updatedAt": "2026-11-07T15:59:53.351491852Z" } } }