Open source · Apache-2.0 · Self-hosted

Building blocks for AI products that you run yourself

Five open-source projects that fit together: one gateway for every model, one sign-in for every product, and the platforms you build on top of them — agents, content and knowledge.

The projects

Use one on its own, or run them together. Each is a complete product with its own repository, documentation and Docker setup — and pacod-demo runs all five as one platform.

AI gateway

pacod-gw

One gateway in front of every model — with the keys, prices, quotas and usage your applications should not have to hold.

  • Proxy and managed modes on one Rust core
  • OpenAI, Anthropic and Gemini dialects
  • Quotas, cost and analytics per workspace
  • Rust
  • PostgreSQL
  • ClickHouse
  • SvelteKit

Content management

pacod-cms

One stack, many editorial websites — articles, advertising and statistics, with AI translation built in.

  • Many websites on one stack
  • Articles, ads and statistics in one studio
  • AI translation through the gateway
  • Java 25
  • Spring Boot 4.1
  • Thymeleaf
  • MongoDB

Agent-building platform

pacod-ap

Host any number of AI agents on one deployment — each with its own knowledge, prompts and rules, behind one sign-in.

  • Many self-contained agents, one deployment
  • RAG, MCP tools and a visual agent editor
  • A review loop that improves every agent
  • FastAPI
  • LangGraph
  • MCP
  • SvelteKit

Identity and access

pacod-id

One place where people and machines sign in — and where it is recorded what they may do, across all your products.

  • OpenID Connect, tested for conformance
  • One rules engine in Rust, TypeScript and Python
  • Branded sign-in pages, light and dark
  • Rust
  • axum
  • PostgreSQL
  • OpenID Connect

RAG knowledge base

pacod-kb

Turn files and web pages into versioned, searchable knowledge — with a stable contract for the models that read it.

  • Hybrid search with BGE-M3 and BM25
  • Every version kept, point-in-time queries
  • Prompt-injection defence built in
  • FastAPI
  • Qdrant
  • BGE-M3
  • BM25

The whole stack

pacod-demo

All five projects working as one platform — one address, one sign-in, one gateway. Try it at demo.pacod.io.

  • All five projects behind one address
  • One sign-in, one gateway, one network
  • One configuration file, one make
  • Docker Compose
  • Caddy
  • PostgreSQL
  • Qdrant

How they fit together

Every LLM call goes through the gateway. Every person signs in through the identity provider. The products on top stay simple — and never hold a provider's key. Run together, they share one of each common component: one edge, one database server, one vector store, one set of dashboards.

Diagram: how the pacod projects fit together LLM calls Tap a project to see what it connects to.

Built on a few firm ideas

  • Open source

    Apache-2.0 licensed, with the source, the tests and the threat models in the open.

  • Self-hosted

    Docker Compose for a laptop, Helm charts where it matters. Your data stays on your machines.

  • One sign-in

    pacod-id signs people in to every product and records what they may do.

  • One gateway

    pacod-gw holds the keys, prices the calls and enforces the quotas — for every product.

See them running together

The live demo runs all five projects as one platform, behind one sign-in. On your own machine, pacod-demo starts the same stack with one make, and each project also runs alone with a mock model provider, so nothing leaves your machine until you want it to.

Open the live demo