networkevolution/appteleporter_lite

By networkevolution

Updated about 2 months ago

AI Powered Infrastructure Automation Platform

Image
Networking
Security
Languages & frameworks
0

1.1K

networkevolution/appteleporter_lite repository overview

AppTelePorter Lite

The self-hosted AI platform for network and infrastructure automation — powered by your choice of LLM.

Website  ·  GitHub  ·  Report an Issue

Built by Network Evolution


What is AppTelePorter?

AppTelePorter is a container-native AI platform that gives network and DevOps teams a conversational AI agent capable of executing real infrastructure operations — with every credential encrypted in a vault that never leaves your server.

Think of it as your own ChatAI App that can actually SSH into your switches, query your APIs, and run your automation scripts — with credentials never exposed to any LLM, local or cloud.

It ships in two editions:

  • Lite edition (this image) — bring your own LLM (OpenAI, Claude, or Gemini). The platform and all credentials remain on your server; conversation context is sent to your chosen cloud LLM provider for inference only. Your credentials never leave the container. Choose this when you want frontier-model quality without hosting your own GPU.
  • Max edition — includes a bundled local AI model. No data of any kind ever leaves your network. Runs fully offline. GPU-enabled host recommended. → Docker Hub

Important: In both editions, your device credentials, passwords, and API keys are stored in an encrypted vault and are never serialised into prompts or sent to any LLM. Credentials are resolved locally at execution time — the handler function receives the actual value; the LLM never sees it. Only the tool's output (e.g., a VLAN list) becomes part of the conversation.

How it works in practice:

  1. You ask a question in plain English: "What VLANs are configured on switch1?"
  2. AppTelePorter figures out which tool to run and presents an approval card.
  3. You approve — credentials are resolved from the vault at execution time (never serialised into prompts), the tool executes, and the answer streams back.
  4. Tool execution stayed local; only the conversation context passed through your chosen LLM provider for synthesis — your credentials stayed in the vault the entire time.

Key capabilities:

FeatureDescription
Private AI ChatConversational interface backed by your choice of OpenAI, Claude, or Gemini
Credentials Never ExposedArgon2id + Fernet encrypted vault; credentials are injected at execution time and never sent to any LLM
Plugin SystemExtend the AI with custom tools — just two files (tool.yaml + handler.py) dropped into a directory
MCP SupportNative MCP client over stdio transport — drop any Python MCP server into your volume mount and it auto-discovers. HTTP streamable and TypeScript MCP support coming soon.
Standard AI Model Compatible APIStandard /v1/chat/completions API — compatible with any n8n workflow, LangChain app, or HTTP client
Tool StudioBrowser-based IDE for creating, editing, and live-testing plugins without rebuilding the container
Container-Native DeploymentSingle Docker container; one volume mount for persistence

For full product documentation and deployment guides, visit appteleporter.ai.


What is Tool Studio?

Tool Studio is AppTelePorter's built-in browser IDE for building and testing your own plugins and MCP servers — no SSH, no text editor, no container rebuild needed.

From your browser at /tool-studio you can:

  • Create a new plugin — generates a skeleton tool.yaml + handler.py instantly
  • Edit any file in the plugin or MCP server directory with a Monaco editor (the same editor that powers VS Code)
  • Install Python packages with a single click — no container rebuild required
  • Run a tool live and watch output stream in real time via the built-in console
  • Hot-reload — changes take effect immediately; the model sees your updated tool on the next request
  • Test MCP servers — trigger dependency installation and validate tool discovery without leaving the browser

The edit-run loop drops from "edit file → rebuild container → test" to "edit in browser → click Run."


How to Install AppTelePorter Lite

Getting AppTelePorter running is as simple as a single docker run command — no configuration files, no build steps, no dependencies to install on your host machine.

Step 1 — Pull the image
docker pull networkevolution/appteleporter_lite:latest

Step 2 — Create a local data directory

Before starting the container, create a directory on your host machine. This is where AppTelePorter stores all its persistent data — plugins, MCP servers, the encrypted vault, chat history, and configuration.

No terminal required on Windows, macOS, or Linux desktop: You can create this folder anywhere on your machine using your system's file manager — just create a new folder and name it appteleporter-data. The terminal commands below are an alternative if you prefer them.

# Linux / macOS
mkdir -p ~/appteleporter-data

# Windows (Command Prompt)
mkdir %USERPROFILE%\appteleporter-data

# Windows (PowerShell)
New-Item -ItemType Directory -Path "$env:USERPROFILE\appteleporter-data"

The Lite edition requires an external volume mount. The directory will be auto-populated with the correct folder structure on first run.


Step 3 — Start the container

Ports:

  • 3000 — AppTelePorter web UI (required)
  • 1514/tcp and 1514/udp — Syslog receiver for Device Beacon (optional)

Device Beacon is a built-in add-on that listens on port 1514 for syslog messages, maintains a live device inventory in the UI, and can be disabled at any time from Settings → Add-On Settings → Device Beacon.

Linux

Without syslog receiver:

docker run -d --name appteleporter \
  -v ~/appteleporter-data:/app/backend/appteleporter-data \
  -p 3000:3000 \
  --restart unless-stopped \
  networkevolution/appteleporter_lite:latest

With syslog receiver (Device Beacon):

docker run -d --name appteleporter \
  -v ~/appteleporter-data:/app/backend/appteleporter-data \
  -p 3000:3000 \
  -p 1514:1514/tcp \
  -p 1514:1514/udp \
  --restart unless-stopped \
  networkevolution/appteleporter_lite:latest
macOS / Windows (Docker Desktop)
  1. Open Docker Desktop and search for networkevolution/appteleporter_lite in the Search bar.
  2. Click Pull to download the image.
  3. Find the image under Images and click Run.
  4. Expand Optional settings and fill in:
    • Container name: appteleporter
    • Ports — Host port 3000 → Container port 3000 (required)
    • Ports — Host port 1514 → Container port 1514 (optional — TCP and UDP)
    • Volumes — Host path: the directory you created in Step 2
    • Volumes — Container path: /app/backend/appteleporter-data

      ⚠️ Do not change the container path. Enter it exactly as shown.

  5. Click Run.

Step 4 — Open the UI and complete first-time setup

Open your browser and navigate to http://localhost:3000.

SSL / HTTPS: The standard container serves on HTTP. Custom SSL-enabled builds are available from Network Evolution — contact appteleporter.ai for details.

4a — Set the vault master password

The first screen asks you to create the vault master password. This password encrypts everything AppTelePorter stores, including:

  • All device and API credentials (SSH usernames, passwords, API keys, host addresses)
  • User accounts and access tokens
  • LLM provider API keys and model settings
  • Application session signing secrets

⚠️ This password cannot be recovered — ever. Store it somewhere safe.

AppTelePorter never stores your master password anywhere. There is no password reset, no recovery email, and no backdoor. If you lose it, the encrypted vault cannot be decrypted — all stored credentials and accounts will need to be recreated from scratch.

4b — Create the first admin user

After setting the vault password, create the first admin user — the account you will use to log in. Additional users can be added later from Settings → Users.

4c — Configure your LLM provider

The AI cannot process requests until you connect it to an LLM provider. Go to:

Settings → LLM Settings

Select the model provider you want to use:

  • OpenAI (ChatGPT) — enter your OpenAI API key
  • Google Gemini — enter your Google AI Studio API key
  • Anthropic Claude — enter your Anthropic API key

After entering the API key, click Test Connection to verify it is working.

If you need support for a specific model or provider not listed, reach out to [email protected] — we will treat it as a feature enhancement request.


Available Plugins

These plugins are ready to drop into your AppTelePorter instance. Each one is a self-contained directory with tool.yaml and handler.py. Example scripts include detailed inline comments explaining every step of the logic.

Network — Cisco
PluginTool NameDescription
Cisco Interface Diagnosticscisco_interface_detailSSH into a Cisco IOS device and run a comprehensive per-interface diagnostic: counters, errors, CRC, speed/duplex, traffic rates.
Cisco Switch Health Checkcisco_switch_checkMulti-mode Cisco switch checker via SSH: VLANs, interfaces, version, ARP table, MAC table, inventory, and combined health overview.
Config Backup (All Devices)config_backup_allBulk running/startup configuration backup across all devices in the vault. Saves timestamped backups to the server.
Simulated / Demo Tools
PluginTool NameDescription
Interface Status (Simulated)get_interface_statusReturns simulated interface up/down status. Great starter template.
VLAN Details (Simulated)get_vlan_detailsReturns a simulated VLAN list for a named switch. The "hello world" tool for AppTelePorter.
Utilities
PluginTool NameDescription
Vault Access Testtest_vault_accessVerifies a named credential exists in the vault and displays its fields. Password always masked.

Available MCP Servers

MCP (Model Context Protocol) servers allow richer integrations. AppTelePorter auto-discovers and launches them; their tools appear in the same chat interface as native plugins. Tool names are prefixed: {server-name}__{tool-name}.

Current transport support: stdio (Python-based MCP servers). HTTP streamable MCP and TypeScript MCP support coming soon.

ServerToolsDescription
example-dns-pingping_host, dns_lookupICMP ping and DNS hostname resolution.
example-ip-timepublic_ip, current_timeReturns the container's public IP and current date/time.
mcp-test-vault-accesstest_vault_accessDemonstrates how MCP servers read credentials from the vault.

How to Use These Tools in AppTelePorter

Option A — Copy into a running container
docker cp ./plugins/cisco_switch_check \
  appteleporter:/app/backend/appteleporter-data/plugins/cisco_switch_check

curl -X GET http://localhost:3000/api/tools/reload \
  -H "Authorization: Bearer <your-api-key>"
Option B — Place in your volume mount before starting
cp -r ./plugins/cisco_switch_check \
  ./appteleporter-data/plugins/cisco_switch_check

Tools are discovered automatically on next container start.

  1. Open AppTelePorter and navigate to Tool Studio.
  2. Click "New Plugin" — a skeleton tool.yaml and handler.py are created instantly.
  3. Paste in the plugin code from the GitHub repository.
  4. Click "Run" to test immediately — output streams live in the console.
Installing Python dependencies
  • Via Tool Studio: Click "Install Deps" — packages are installed instantly, no rebuild needed.
  • Via requirements.txt: Add a requirements.txt to the plugin directory. AppTelePorter installs it automatically on container startup.

Extending AppTelePorter

A plugin is two files (tool.yaml + handler.py) — drop them into your data directory and the AI picks them up immediately, no rebuild needed. An MCP server is a Python process for richer integrations (persistent connections, multi-tool servers). Full guides, templates, and examples with detailed inline comments are in the GitHub repository.


Why Build With AppTelePorter?

  • No dev environment setup — plugins run directly inside the container; no local Python environment, no build step
  • Install packages in secondsrequirements.txt or one click in Tool Studio; no rebuild, no restart
  • Test live from the browser — Tool Studio's run console executes against real devices while you write the code
  • The model handles parameter collection — you write the business logic; the AI collects values from the user's question
  • Credentials stay in the vaultget_vault_cred() is the only credential API; no hardcoded passwords, no risk of leakage
  • Very easy to implement and run — two files, a function that returns a string, exceptions caught inside; example scripts have detailed inline comments

Plugin vs. MCP Server — Quick Reference

Use CaseRecommended Approach
Simple stateless operation (ping, query, lookup)Plugin (tool.yaml + handler.py)
Needs device credentials from the vaultPlugin — use get_vault_cred()
Multiple related tools sharing a connection poolMCP Server
Long-lived SSH or API session between callsMCP Server
Wrapping an existing MCP-compliant serverMCP Server
Fastest authoring loopPlugin via Tool Studio

What's Coming

  • Network automation tools: BGP diagnostics, OSPF neighbour checks, route table queries, ACL audits
  • Cloud integrations: AWS, Azure, GCP resource queries via API
  • Monitoring integrations: Prometheus metrics, Grafana annotations, Zabbix host status
  • Infrastructure integrations: NetBox, Nautobot, ServiceNow CMDB lookups
  • Security tools: Certificate expiry checks, port scan summaries, CVE lookups
  • More MCP servers: Protocol-native clients, multi-tool servers for complex workflows

Star the GitHub repository to be notified of new additions.


Resources

ResourceLink
AppTelePorter Websiteappteleporter.ai
GitHub (plugins, MCP servers, docs)github.com/network-evolution/appteleporter
Max Edition (local model, fully offline)Docker Hub
Report an IssueGitHub Issues

License

AppTelePorter Community Edition Lite is proprietary software provided free of charge. © 2026 NetworkEvolution. Redistribution, resale, sublicensing, or repackaging of this container image without prior written permission from NetworkEvolution is strictly prohibited.


Built with care by Network Evolution

Your network. Your AI. Your data.

Tag summary

Content type

Image

Digest

sha256:bf0dc39f9

Size

308.9 MB

Last updated

about 2 months ago

docker pull networkevolution/appteleporter_lite