AI coding agent with security interceptor - your prompts, your machine, your control.
pip install agentzero-cli
a0- Security First - Every command goes through approval. Dangerous patterns blocked automatically.
- Local LLM Support - Run with Ollama, LM Studio - your data never leaves your machine.
- Multi-Backend - Switch between Local LLM, OpenRouter, or deterministic mode.
- Real Tool Execution - Actually runs shell commands, reads/writes files.
Dangerous commands like rm -rf / and fork bombs are automatically blocked:
Generate code with syntax highlighting and file save approval:
Press [E] to ask AI to explain the risk before approving:
Use any model from your local LM Studio server:
Automatic fallback chain with Local LLM as the safest option:
| Priority | Backend | Data Location | Setup |
|---|---|---|---|
| 1 | Local LLM | Your machine | LOCAL_LLM_URL=http://localhost:1234/v1 |
| 2 | Agent Zero API | Your server | AGENTZERO_API_URL=http://... |
| 3 | OpenRouter | Cloud | OPENROUTER_API_KEY=sk-or-... |
| 4 | Deterministic | Local | No config needed |
# LM Studio
export LOCAL_LLM_URL=http://localhost:1234/v1
export LOCAL_LLM_MODEL=mistralai/ministral-3-3b # optional
# Ollama
export LOCAL_LLM_URL=http://localhost:11434/v1
export LOCAL_LLM_MODEL=llama3.2:3b
# Remote LM Studio (e.g., on another machine)
export LOCAL_LLM_URL=http://192.168.1.100:1234/v1
a0Your prompts never leave your network.
export OPENROUTER_API_KEY=sk-or-...
a0| Mode | Read-only | Write ops | Dangerous |
|---|---|---|---|
paranoid |
Confirm | Confirm | BLOCKED |
balanced |
Auto-approve | Confirm | BLOCKED |
god_mode |
Auto | Auto | BLOCKED |
Dangerous patterns are always blocked, regardless of mode:
rm -rf /,rm -rf ~- Fork bombs
:(){ :|:& };: mkfs.*,dd if=/dev/- Download and execute (
curl | sh)
| Key | Action |
|---|---|
| F1 | Help |
| F2 | Menu |
| F3 | Mini-game |
| F10 | Quit |
| Enter | Send |
| Shift+Enter | New line |
git clone https://github.com/vizi2000/agentzero-cli
cd agentzero-cli
python -m venv venv
source venv/bin/activate
pip install -e ".[dev]"
# Run tests
pytest tests/ -v- TUI Interface (Textual)
- Security interceptor with blocklist
- Local LLM support (Ollama, LM Studio)
- OpenRouter integration
- Real tool execution
- Risk explanation
- PyPI package
- MCP protocol support
- VS Code extension
MIT License - see LICENSE
Developed by Wojciech Wiesner | wojciech@theones.io
TheOnes - Cutting edge tech powered by Neurodivergent minds
Neurodivergent? If you thrive on patterns, hyperfocus, and rapid iteration - let's build together.





