Skip to content
Open Source · MIT

Open-Source AI Agents with honest encryption

Privacy, open source and realtime voice

Run smart bots on Telegram, WhatsApp and Avito, or embed a chat widget straight into your own website. Make calls with voice cloning and plug in your own API keys.

$1 per month pays for server resources and the developer's work — not for AI tokens: those you pay the provider directly with your own keys.

Deploy Open Source
No credit card requiredSource code is open — verify it yourself

GitHub statistics

    Why you can trust us

    0%
    markup on AI provider tokens
    0%
    access to your data
    100%
    open source, MIT licensed
    $1
    per month — infrastructure only
    30
    days free, no card

    The encryption key is derived from your MasterKey password and available only to you. We never store it and cannot recover your data.

    Channels and integrations
    • Telegram
    • WhatsApp
    • Avito
    • Widget
    • Google Calendar
    • Google Sheets
    • Bybit
    • MinIO
    • MariaDB
    AI providers
    • OpenAI
    • Google Gemini
    • Mistral

    You connect your own API keys. Tokens are paid to the provider directly — we add no markup.

    Features

    Four reasons to run your agents on AiR

    Privacy, real-time voice, customers from messengers and from your own website, and full control over what you spend on AI.

    • AES-GCM

      MasterKey encryption

      The encryption key is derived from your MasterKey password and available only to you. We do not store that key and cannot recover your data.

      • Every stored record — keys, tokens, conversations
      • In production the services never log your data
      • Only you know the password — there is no “reset via support”
    • air_tguserbot · air_whatsbot

      Real-time voice and cloning

      Inbound and outbound calls right inside the messengers. Voice agents answer with minimal latency.

      • Telegram calls — air_tguserbot
      • WhatsApp without GraphAPI — air_whatsbot
      • Voice cloning that matches your brand
    • air_lead-hunter

      Automated lead discovery

      The agent searches for clients on a schedule across Telegram and WhatsApp, then qualifies them by voice or text. The inbound flow comes straight from your website.

      • Runs on a schedule, no manual trigger
      • Chat widget for any website — air_widget
      • Handover to a human — air_operator
    • OpenAI · Gemini · Mistral

      Bring your own API keys (BYOK)

      You pay the AI provider directly with your own keys. The $1 per month covers infrastructure only.

      • No token markup — and it is structurally impossible
      • Switch providers without migration
      • Limits and billing stay on your side
    Security

    Privacy you can verify

    We are not asking you to take our word for it. The encryption scheme is described below, and its implementation lives in a public repository — read the code and check it yourself.

    air-common · cryptoAES-GCM

    How the data flows

    1. MasterKey passwordYou choose it yourself. We never store it in plain form and cannot look it up.
    2. KDF · key derivationThe encryption key is derived from the password deterministically. The password cannot be reconstructed back from it.
    3. AES-GCMSymmetric encryption with integrity protection: tampered data will not silently decrypt.
    4. StorageOnly ciphertext reaches the database. Without your key it is just a blob of bytes.

    What exactly gets encrypted

    Nothing reaches the database in plain form: every piece of user data we store is encrypted, not just a hand-picked set of fields.

    For example
    • API keys of AI providers
    • Channel and integration tokens
    • Conversation history with your clients
    • Two-factor authentication keys

    Logs without your data

    In production the services never write user data to the logs — not even for debugging.

    Goes to the log
    Events and technical errors: service start and stop, response codes, timeouts, connection failures. That is exactly what air-logger handles.
    Never goes there
    Conversation content, message bodies and call transcripts, customer contacts, API keys and tokens.

    Erase everything — in one click

    The decision is yours and yours alone. You can wipe everything from your dashboard at any time — after that nothing of yours is left in the database.

    What gets erased
    • Models and all their settings
    • Communication channels and integrations
    • Conversations and the entire message history
    • Personal details, subscriptions and preferences

    Erasure is irreversible: the data cannot be restored afterwards — not even by us.

    Trust that is verifiable, not declared

    Open source is not marketing here, it is a control mechanism: there is simply nowhere to hide data access or a hidden markup inside a repository anyone can read.

    Read the code on GitHub

    The flip side of an honest scheme: if you forget your MasterKey password, access to the encrypted data is lost. Neither we nor anyone else can restore it.

    Demo scenarios

    See the agents in action

    Five scenarios show the platform through real examples: a customer chat with external tool calls, inbound and outbound voice calls, lead hunting, and a chat widget on your own site.

    Real recordings

    How the agent actually works

    The tabs above are an interactive scenario simulation. Below are real recordings of the agent in a live conversation: voice cloning and an outbound call.

    Cloned voiceA real-time voice model: replies are spoken with a cloned voice. The recording contains the model's real cloned voice.
    Outbound callThe agent dials the contact itself and runs the conversation. The recording has no real agent voice — the caller is the only one who hears it. Replies from the agent and the caller's speech appear as live transcriptions.

    Videos never start on their own — press ▶ to watch.

    Architecture · Open Source

    13 microservices you can run yourself

    AiR is not a monolith — it is a family of independent Go services. Each one lives in its own MIT-licensed repository, so you can read the code, replace any component, or deploy the whole platform on your own hardware.

    Self-hosting is straightforward

    The self-hosted build is not a stripped-down edition: same MasterKey encryption, same channels, same calls. The only difference is whose hardware carries the load.

    Requires Docker and your own AI provider API keys.

    Every service has its own set of commands and environment variables. The up-to-date instructions live in the README of that specific repository.

    Browse the repositories on GitHub
    Quick start · Examplebash
    docker network create air_shareddocker compose -f dev.yml up -d
    Honest economics

    What exactly your dollar pays for

    We make no money on your AI requests. The subscription covers infrastructure and work on the project only — tokens are paid to the provider directly, with your own keys.

    $1/ mo

    Included in $1 per month

    Server resources and developer time

    • Server resources

      CPU time and memory for your bots, the orchestrator and task queues.

    • Traffic and connections

      Persistent messenger connections, webhooks and real-time voice sessions.

    • Storage and database

      MinIO for media files, MariaDB for conversations, regular backups.

    • Developer time

      Updates, new channels and integrations, bug fixes and answers to your questions.

    Paid to the provider directly

    With your keys — bypassing our account

    • Bring your own API keys

      OpenAI, Google Gemini, Mistral — you connect your own keys under the BYOK model.

    • Tokens and requests

      Charged to your provider account at their rate. Our commission is zero.

    • Choice of models

      Switch model or provider whenever you like: we never lock you to a single vendor.

    • Your limits

      You set quotas and monthly budgets yourself in the provider's console.

    How it adds up

    $1 / mo = server + traffic + storage + development

    AI tokens = your provider bill, 0% markup

    Pricing

    Simple and honest terms

    The very same open source code in every option. The only difference is who provides the hardware.

    Self-Hosted

    Deploy it yourself. Full control over your data and your hardware.

    $0forever

    • Full source code, MIT license
    • Unlimited trial period
    • MasterKey encryption
    • Your own API keys (BYOK)
    • Every bot type and voice calls
    • Hosting — your own hardware
    Deploy from GitHub
    Recommended

    Cloud Standard

    We take care of servers, updates and backups.

    $1per month

    • Everything from Self-Hosted
    • 30 days free, no card required
    • Hosting and support on our hardware
    • Updates without your own DevOps
    • Backups and monitoring
    • 0% markup on AI provider tokens

    Support the project

    A voluntary contribution to open source development.

    Any amountvoluntary

    • Any amount you choose
    • PayPal, cryptocurrency
    • Grants no additional features
    • Speeds up open source development
    Support the project

    The price is fixed and does not depend on the number of bots, conversations or calls. AI provider tokens are always paid directly with your own keys.

    Project support

    Support the development

    AiR is built as an open project. Your support helps pay for servers, add new channels and keep the code free.

    PayPal

    One-time payment in US dollars.

    $

    The PayPal form loads once this block appears on screen.

    The PayPal form runs in a secure frame and always uses a light appearance.

    Cryptocurrency

    Any amount through our own air_payment service.

    This is a voluntary donation. It grants no additional features, does not affect your plan and is not a subscription payment.

    FAQ

    Frequently asked questions

    The short answers to what people ask most: how the encryption works, what you actually pay for, and what you can run on your own hardware.

    Question not covered here?Ask in the community chat

    The encryption key is derived from your MasterKey password and is available only to you — we never store it and cannot restore your data. API keys, channel tokens and conversation history reach the database already encrypted with AES-GCM, so without your key they are just a blob of bytes. The flip side of an honest scheme: if you forget your MasterKey password, access to the encrypted data is lost for good.

    AiR — open-source AI agent platform with privacy and realtime voice