archestra

Hi HN, Matvey from Archestra here. Recently, OpenAI shipped "Sites", a mini-apps AI builder. It's similar to "Databricks Apps" or Loveable. We worked on this concept for the last few months, and tried to approach it from the most "open source friendly" and interconnectable way, providing the ability to build mini apps re-using the MCP data layer, re-using MCP authentication while accessing those apps, and also exposing those apps as MCP servers themselves so they could be utilized through the 3'rd party clients like Claude Code. We'd love for you to take a look at the repo, try it out, and give us your feedback! GitHub: https://github.com/archestra-ai/archestra

Hey, Ildar here, CTO at Archestra Archestra is an open-source AI gateway and MCP orchestrator. It runs MCP servers in sandboxed environments, applies deterministic context-aware policy at the tool-call level, and handles the auth, audit, cost tracking, and observability, so an in-house AI team can let business users connect to real internal data. Now we are raising next round to expand. We’re strong believers that there should be an independent, battle-tested, cloud-native, open-source platform that's free from big players and takes care of all that boring stuff. Something like GitLab, Grafana, or Clickhouse. Repo is here: https://github.com/archestra-ai/archestra Matvey (CEO), Joey (Co-founder), and I are all in the thread. Ask us anything, including the unflattering stuff.

Hi HN, Matvey, Ildar, Joey, and Dominik here. If you're building LLM agents that use tools, you're probably worried about prompt injection attacks that can hijack those tools. We were too, and found that solutions like prompt-based filtering or secondary "guard" LLMs can be unreliable. Our thesis is that agent security should be handled at the network level between the agent and the LLM, just like a traditional web application firewall. So we built Archestra Platform: an open-source gateway that acts as a secure proxy for your AI agents. It's designed to be a deterministic firewall against common attacks. The two core features right now are: 1) Dynamic Tool Engine: This is the key idea. Archestra restricts which tools an agent can even see or call based on the context source. If the context comes from an untrusted tool, the agent won't ha

Hi Hacker News! Matvey, Ildar, Joey, and Dominik here. Anthropic introduced the Model Context Protocol (MCP) almost a year ago, and the community has built thousands of open-source MCP servers, but there are a few issues. Local MCP servers are executables, and running straight from GitHub is quite dangerous. Also, to start the local MCP server and connect it to, for example, Gmail, one needs to register a Google Cloud account, issue a file with OAuth tokens, place it in a specific directory, and set the environment variable. We built Archestra, a simple desktop orchestrator for open source MCP servers, enabling you to install and use self-hosted & remote MCP servers with just a few clicks. It's running local MCP servers in a Podman sandbox to prevent access to the host, dynamically adjusts the set of enabled tools, and maintains permanent