FRENES

Chat interfaces · AI agent

PyGPT: review, pricing, security and alternatives

PyGPT is an open-source AI agent published by szczyglis-dev, in the chat interfaces family. A multimodel desktop assistant with agents, MCP tools, web search, RAG, voice features and computer control capabilities. Its repository has 2,002 stars and its last commit is from October 6, 2026.

Open sourceSelf-hostableActively maintainedHigh risk

What PyGPT does

PyGPT belongs to the chat interfaces family: multi-model chat interfaces, often self-hostable, with built-in tools, agents and MCP servers. On our grid it ranks #12 of the 17 projects of this family listed in the directory.

You use it from: desktop app. Usable models: GPT (OpenAI), Gemini (Google), Claude (Anthropic), Grok (xAI), local models (Ollama, llama.cpp, vLLM…), and DeepSeek. It can run on your own machine or server.

Who is PyGPT for?

It targets people who want a single chat interface for several models, often self-hosted, with tools and agents plugged in. Typical tasks people give it:

  • chat with several models from one window
  • share an internal assistant with a team
  • connect documents and tools to the chat

It is a good candidate if your data must stay on your machines and you want the option of a local model, with no API fees.

Access and human control

According to its documentation, PyGPT can:

  • drive a web browser
  • control the screen, keyboard and mouse

We could not establish whether it asks for human approval before sensitive actions: test it first on an unimportant account or folder.

Run commands in a terminalRun commands in a terminal : 6 %6 %Read and edit filesRead and edit files : 18 %18 %Drive a web browserDrive a web browser : 12 %12 %Call online services and APIsCall online services and APIs : 6 %6 %Read and send messagesRead and send messages : 12 %12 %Control the screen, keyboard and mControl the screen, keyboard and m : 6 %6 %
Share of the 17 agents in the family that have each access, according to their documentation. In orange, PyGPT's access.

PyGPT pricing

The code is public but the repository declares no licence: reuse is not formally allowed. The real cost comes from model calls: each loop step sends the whole context back to the model, and a task of several dozen steps can cost far more than a single question. The LLM price calculator estimates it for the chosen model.

Getting started with PyGPT

  1. Install it: the project ships as a Python package (install with pip or uv). The exact command is in the repository README.
  2. Pick the model: an API key from a provider, or a local model if your machine has enough graphics memory (the VRAM calculator tells you).
  3. Give it a first playground with nothing at stake: a test folder, a secondary account or a throwaway project. Only open your real accounts once you have seen how it behaves.
  4. Give it a short, checkable task, review the result and its action log, then raise the difficulty step by step.

Security: risk level

The interface stores your API keys and conversation history: protect its access and backups.

Points found for PyGPT:

  • Sensitive access: it can control the screen, keyboard and mouse, with no established default human approval.
  • Outside content: it reads web pages or API responses, which may contain booby-trapped instructions (prompt injection).
  • No licence: legally shaky for company use.

Three habits: least privilege (minimal rights, dedicated keys), human approval for irreversible actions, a sandbox for code execution. The AI agent security check reviews your setup in a few minutes.

Project activity and releases

Created on April 9, 2023, the szczyglis-dev/py-gpt repository has 2,002 stars, 353 forks and 48 open issues, with 5,438 commits in total. It received changes this month.

Over the last 52 weeks: 1,134 commits, an average of 21.8 per week.

Nov 2, : 0 · Nov 2, 2025Nov 2,Nov 9, : 0 · Nov 9, 2025Nov 16, : 0 · Nov 16, 2025Nov 23, : 0 · Nov 23, 2025Nov 30, : 0 · Nov 30, 2025Dec 7, : 0 · Dec 7, 2025Dec 14, : 0 · Dec 14, 2025Dec 21, : 0 · Dec 21, 2025Dec 28, : 31 · Dec 28, 2025Dec 28,Jan 4, : 71 · Jan 4, 2026Jan 11, : 22 · Jan 11, 2026Jan 18, : 0 · Jan 18, 2026Jan 25, : 30 · Jan 25, 2026Feb 1, : 0 · Feb 1, 2026Feb 8, : 12 · Feb 8, 2026Feb 15, : 0 · Feb 15, 2026Feb 22, : 0 · Feb 22, 2026Feb 22,Mar 1, : 1 · Mar 1, 2026Mar 8, : 0 · Mar 8, 2026Mar 15, : 1 · Mar 15, 2026Mar 22, : 0 · Mar 22, 2026Mar 29, : 0 · Mar 29, 2026Apr 5, : 0 · Apr 5, 2026Apr 12, : 0 · Apr 12, 2026Apr 19, : 0 · Apr 19, 2026Apr 19,Apr 26, : 1 · Apr 26, 2026May 3, : 0 · May 3, 2026May 10, : 1 · May 10, 2026May 17, : 0 · May 17, 2026May 24, : 1 · May 24, 2026May 31, : 0 · May 31, 2026Jun 7, : 0 · Jun 7, 2026Jun 14, : 0 · Jun 14, 2026Jun 14,Jun 21, : 0 · Jun 21, 2026Jun 28, : 1 · Jun 28, 2026Jul 5, : 0 · Jul 5, 2026Jul 12, : 1 · Jul 12, 2026Jul 19, : 0 · Jul 19, 2026Jul 26, : 1 · Jul 26, 2026Aug 2, : 0 · Aug 2, 2026Aug 9, : 0 · Aug 9, 2026Aug 9,Aug 16, : 41 · Aug 16, 2026Aug 23, : 33 · Aug 23, 2026Aug 30, : 0 · Aug 30, 2026Sep 6, : 76 · Sep 6, 2026Sep 13, : 155 · Sep 13, 2026Sep 20, : 216 · Sep 20, 2026Sep 27, : 178 · Sep 27, 2026Oct 4, : 198 · Oct 4, 2026Oct 4,Oct 11, : 63 · Oct 11, 2026Oct 18, : 0 · Oct 18, 2026Oct 25, : 0 · Oct 25, 2026Oct 25,
Commits per week on the main repository, last 52 weeks (GitHub API, checked October 25, 2026).

576 releases in total; 30 in the last twelve months. Latest release: v2.9.1, on October 6, 2026.

v2.8.22 · Sep 16, 2026v2.8.22Sep 16, 2026v2.8.21 · Sep 16, 2026v2.8.23 · Sep 17, 2026v2.8.24 · Sep 18, 20262.8.26 · Sep 19, 2026v2.8.25 · Sep 19, 2026v2.8.27 · Sep 20, 2026v2.8.29 · Sep 22, 2026v2.8.28 · Sep 22, 2026v2.8.31 · Sep 24, 2026v2.8.30 · Sep 24, 2026v2.8.32 · Sep 26, 2026v2.8.33 · Sep 27, 2026v2.8.34 · Sep 28, 2026v2.8.35 · Sep 29, 2026v2.8.37 · Oct 1, 2026v2.8.36 · Oct 1, 2026v2.8.38 · Oct 3, 2026v2.9.0 · Oct 5, 2026v2.9.1 · Oct 6, 2026v2.9.1Oct 6, 2026
The latest 20 releases published on GitHub (hover a point for details).

PyGPT vs other chat interfaces

GitHub stars of the best-rated open-source projects in the chat interfaces family. Stars measure attention, not quality: a heavily promoted project collects them fast, a specialised tool will have few.

AnythingLLMAnythingLLM : 67.5K67.5KCherry StudioCherry Studio : 52.9K52.9KAionUiAionUi : 33.7K33.7KHappyHappy : 24.3K24.3KOpen WebUIOpen WebUI : 156.6K156.6KCopilotKitCopilotKit : 38.2K38.2Kbig-AGIbig-AGI : 7.2K7.2KLocally UncensoredLocally Uncensored : 2.5K2.5KPyGPTPyGPT : 2K2K
Log scale; PyGPT in orange. Checked October 25, 2026.

PyGPT and other chat interfaces at a glance

The 7 best-ranked agents in the same family, 7 of them open source. The score out of 100 only applies to open-source projects; for proprietary services we show the published entry price. A dash marks information the documentation does not state.

Quick comparison: chat interfaces
AgentModelScoreStars or entry priceSelf-hostableHuman approval
PyGPTopen source612K ★yes–
AnythingLLMopen source8967.5K ★yes–
Cherry Studioopen source8852.9K ★yes–
AionUiopen source8533.7K ★yes–
Happyopen source8424.3K ★yes–
Open WebUIopen source83156.6K ★yes–
CopilotKitopen source8138.2K ★yes–
big-AGIopen source747.2K ★yes–

How we rated it

Score: 61/100, computed only from public, verifiable data, with no subjective testing or partnership:

  • Adoption 16/40: 2,002 stars on a log scale (40 points from about 200,000).
  • Activity 30/30: last commit less than a month ago, 30 releases in six months, 1,134 commits in a year.
  • Framework 15/30: licence, default human approval, self-hosting, model choice and documentation site.

The score does not say whether the agent will succeed at your tasks: it measures how solid the project is. The full grid is on the method page.

Verdict

PyGPT is a serious option; check the limitations below before granting it access.

Strengths

  • Very active development
  • Frequent releases (30 in a year)
  • Can run on your side: data under control
  • Free choice of model

Limitations

  • Broad access without default approval
  • No licence declared

Avoid if…

  • You cannot isolate it (container, virtual machine)

Frequently asked questions

Is PyGPT free?

The software is public, with no declared licence. You still pay for the model calls, unless you use a local model.

Is PyGPT safe?

Our risk level: high. Points found: sensitive access, outside content, and no licence. Give it minimum rights and approve irreversible actions.

Which models does PyGPT use?

According to its documentation: GPT (OpenAI), Gemini (Google), Claude (Anthropic), Grok (xAI), local models (Ollama, llama.cpp, vLLM…), and DeepSeek.

Can PyGPT be installed on your own server?

Yes, from the szczyglis-dev/py-gpt repository. Data then stays with you, but security and updates are your job.

What are the alternatives to PyGPT?

In the same family: AnythingLLM, Cherry Studio, AionUi, and Happy.

PyGPT or AnythingLLM: what is the difference?

Both belong to the chat interfaces family. PyGPT has 2K stars against 67.5K for AnythingLLM. The right choice mostly depends on the access you are willing to give it.

Related articles

Neutrality. No affiliate links. No vendor pays to be reviewed, rated or ranked. Reviews are directed by François Chollet, neutral and factual, and every data point is dated and sourced. How we score