appteleporter_lite
AI Powered Infrastructure Automation Platform
1.1K
The self-hosted AI platform for network and infrastructure automation — powered by your choice of LLM.
Website · GitHub · Report an Issue
Built by Network Evolution
AppTelePorter is a container-native AI platform that gives network and DevOps teams a conversational AI agent capable of executing real infrastructure operations — with every credential encrypted in a vault that never leaves your server.
Think of it as your own ChatAI App that can actually SSH into your switches, query your APIs, and run your automation scripts — with credentials never exposed to any LLM, local or cloud.
It ships in two editions:
Important: In both editions, your device credentials, passwords, and API keys are stored in an encrypted vault and are never serialised into prompts or sent to any LLM. Credentials are resolved locally at execution time — the handler function receives the actual value; the LLM never sees it. Only the tool's output (e.g., a VLAN list) becomes part of the conversation.
How it works in practice:
Key capabilities:
| Feature | Description |
|---|---|
| Private AI Chat | Conversational interface backed by your choice of OpenAI, Claude, or Gemini |
| Credentials Never Exposed | Argon2id + Fernet encrypted vault; credentials are injected at execution time and never sent to any LLM |
| Plugin System | Extend the AI with custom tools — just two files (tool.yaml + handler.py) dropped into a directory |
| MCP Support | Native MCP client over stdio transport — drop any Python MCP server into your volume mount and it auto-discovers. HTTP streamable and TypeScript MCP support coming soon. |
| Standard AI Model Compatible API | Standard /v1/chat/completions API — compatible with any n8n workflow, LangChain app, or HTTP client |
| Tool Studio | Browser-based IDE for creating, editing, and live-testing plugins without rebuilding the container |
| Container-Native Deployment | Single Docker container; one volume mount for persistence |
For full product documentation and deployment guides, visit appteleporter.ai.
Tool Studio is AppTelePorter's built-in browser IDE for building and testing your own plugins and MCP servers — no SSH, no text editor, no container rebuild needed.
From your browser at /tool-studio you can:
tool.yaml + handler.py instantlyThe edit-run loop drops from "edit file → rebuild container → test" to "edit in browser → click Run."
Getting AppTelePorter running is as simple as a single docker run command — no configuration files, no build steps, no dependencies to install on your host machine.
docker pull networkevolution/appteleporter_lite:latest
Before starting the container, create a directory on your host machine. This is where AppTelePorter stores all its persistent data — plugins, MCP servers, the encrypted vault, chat history, and configuration.
No terminal required on Windows, macOS, or Linux desktop: You can create this folder anywhere on your machine using your system's file manager — just create a new folder and name it
appteleporter-data. The terminal commands below are an alternative if you prefer them.
# Linux / macOS
mkdir -p ~/appteleporter-data
# Windows (Command Prompt)
mkdir %USERPROFILE%\appteleporter-data
# Windows (PowerShell)
New-Item -ItemType Directory -Path "$env:USERPROFILE\appteleporter-data"
The Lite edition requires an external volume mount. The directory will be auto-populated with the correct folder structure on first run.
Ports:
3000 — AppTelePorter web UI (required)1514/tcp and 1514/udp — Syslog receiver for Device Beacon (optional)Device Beacon is a built-in add-on that listens on port 1514 for syslog messages, maintains a live device inventory in the UI, and can be disabled at any time from Settings → Add-On Settings → Device Beacon.
Without syslog receiver:
docker run -d --name appteleporter \
-v ~/appteleporter-data:/app/backend/appteleporter-data \
-p 3000:3000 \
--restart unless-stopped \
networkevolution/appteleporter_lite:latest
With syslog receiver (Device Beacon):
docker run -d --name appteleporter \
-v ~/appteleporter-data:/app/backend/appteleporter-data \
-p 3000:3000 \
-p 1514:1514/tcp \
-p 1514:1514/udp \
--restart unless-stopped \
networkevolution/appteleporter_lite:latest
networkevolution/appteleporter_lite in the Search bar.appteleporter3000 → Container port 3000 (required)1514 → Container port 1514 (optional — TCP and UDP)/app/backend/appteleporter-data
⚠️ Do not change the container path. Enter it exactly as shown.
Open your browser and navigate to http://localhost:3000.
SSL / HTTPS: The standard container serves on HTTP. Custom SSL-enabled builds are available from Network Evolution — contact appteleporter.ai for details.
The first screen asks you to create the vault master password. This password encrypts everything AppTelePorter stores, including:
⚠️ This password cannot be recovered — ever. Store it somewhere safe.
AppTelePorter never stores your master password anywhere. There is no password reset, no recovery email, and no backdoor. If you lose it, the encrypted vault cannot be decrypted — all stored credentials and accounts will need to be recreated from scratch.
After setting the vault password, create the first admin user — the account you will use to log in. Additional users can be added later from Settings → Users.
The AI cannot process requests until you connect it to an LLM provider. Go to:
Settings → LLM Settings
Select the model provider you want to use:
After entering the API key, click Test Connection to verify it is working.
If you need support for a specific model or provider not listed, reach out to [email protected] — we will treat it as a feature enhancement request.
These plugins are ready to drop into your AppTelePorter instance. Each one is a self-contained directory with tool.yaml and handler.py. Example scripts include detailed inline comments explaining every step of the logic.
| Plugin | Tool Name | Description |
|---|---|---|
| Cisco Interface Diagnostics | cisco_interface_detail | SSH into a Cisco IOS device and run a comprehensive per-interface diagnostic: counters, errors, CRC, speed/duplex, traffic rates. |
| Cisco Switch Health Check | cisco_switch_check | Multi-mode Cisco switch checker via SSH: VLANs, interfaces, version, ARP table, MAC table, inventory, and combined health overview. |
| Config Backup (All Devices) | config_backup_all | Bulk running/startup configuration backup across all devices in the vault. Saves timestamped backups to the server. |
| Plugin | Tool Name | Description |
|---|---|---|
| Interface Status (Simulated) | get_interface_status | Returns simulated interface up/down status. Great starter template. |
| VLAN Details (Simulated) | get_vlan_details | Returns a simulated VLAN list for a named switch. The "hello world" tool for AppTelePorter. |
| Plugin | Tool Name | Description |
|---|---|---|
| Vault Access Test | test_vault_access | Verifies a named credential exists in the vault and displays its fields. Password always masked. |
MCP (Model Context Protocol) servers allow richer integrations. AppTelePorter auto-discovers and launches them; their tools appear in the same chat interface as native plugins. Tool names are prefixed: {server-name}__{tool-name}.
Current transport support: stdio (Python-based MCP servers). HTTP streamable MCP and TypeScript MCP support coming soon.
| Server | Tools | Description |
|---|---|---|
example-dns-ping | ping_host, dns_lookup | ICMP ping and DNS hostname resolution. |
example-ip-time | public_ip, current_time | Returns the container's public IP and current date/time. |
mcp-test-vault-access | test_vault_access | Demonstrates how MCP servers read credentials from the vault. |
docker cp ./plugins/cisco_switch_check \
appteleporter:/app/backend/appteleporter-data/plugins/cisco_switch_check
curl -X GET http://localhost:3000/api/tools/reload \
-H "Authorization: Bearer <your-api-key>"
cp -r ./plugins/cisco_switch_check \
./appteleporter-data/plugins/cisco_switch_check
Tools are discovered automatically on next container start.
tool.yaml and handler.py are created instantly.requirements.txt to the plugin directory. AppTelePorter installs it automatically on container startup.A plugin is two files (tool.yaml + handler.py) — drop them into your data directory and the AI picks them up immediately, no rebuild needed. An MCP server is a Python process for richer integrations (persistent connections, multi-tool servers). Full guides, templates, and examples with detailed inline comments are in the GitHub repository.
requirements.txt or one click in Tool Studio; no rebuild, no restartget_vault_cred() is the only credential API; no hardcoded passwords, no risk of leakage| Use Case | Recommended Approach |
|---|---|
| Simple stateless operation (ping, query, lookup) | Plugin (tool.yaml + handler.py) |
| Needs device credentials from the vault | Plugin — use get_vault_cred() |
| Multiple related tools sharing a connection pool | MCP Server |
| Long-lived SSH or API session between calls | MCP Server |
| Wrapping an existing MCP-compliant server | MCP Server |
| Fastest authoring loop | Plugin via Tool Studio |
Star the GitHub repository to be notified of new additions.
| Resource | Link |
|---|---|
| AppTelePorter Website | appteleporter.ai |
| GitHub (plugins, MCP servers, docs) | github.com/network-evolution/appteleporter |
| Max Edition (local model, fully offline) | Docker Hub |
| Report an Issue | GitHub Issues |
AppTelePorter Community Edition Lite is proprietary software provided free of charge. © 2026 NetworkEvolution. Redistribution, resale, sublicensing, or repackaging of this container image without prior written permission from NetworkEvolution is strictly prohibited.
Built with care by Network Evolution
Your network. Your AI. Your data.
Content type
Image
Digest
sha256:bf0dc39f9…
Size
308.9 MB
Last updated
about 2 months ago
docker pull networkevolution/appteleporter_lite