How is MultiAgent different from Agent?
Xedant Agent works with one project in an isolated container. MultiAgent is the central control panel over a fleet of Agent instances on any number of servers: deployment, updates, monitoring, analytics and backups — all from one window. Agent does the work; MultiAgent runs the army of agents.
What does a managed server need?
Linux (Ubuntu/Debian) with SSH access and root/sudo rights. MultiAgent installs Docker and all the dependencies itself — with one button, right from the interface. Nothing needs to be installed by hand.
Where is the data stored?
MultiAgent itself keeps everything in the /data volume: the SQLite database (or PostgreSQL when MULTIAGENT_DATABASE is set), the encryption keys and the license. Data on the managed servers lives in configurable folders — agents, data, projects and tools, by default under /root.
How is security handled?
SSH keys, agent passwords and API keys are encrypted in the database — the encryption keys live in /data/keys and never leave the server. Machine access (Agent API) is guarded by an X-API-Key key and works only when it is explicitly set with the MULTIAGENT_API_KEY environment variable; human login and machine access are kept separate. User login sessions are JWT tokens valid for 90 days.
Can it manage agents that already run?
Yes. MultiAgent can import agents: it scans the server, finds the existing agent containers and registers them without recreating anything. All chats, projects and data stay in place.
Does every agent need its own domain?
No. On each server MultiAgent installs its own Nginx container (agents-nginx), which serves all the apps from subfolders of one domain: every agent, product and tool gets an address like https://your-domain/name/. The domain and SSL certificate are configured once — nothing extra is needed for the subfolders — and at the root / nginx serves the server home page with app cards. Details are on the Nginx Routing page.
How does Nginx routing work, and do I need my own certificate?
Three kinds of certificates are issued on the Nginx tab of the server page: self-signed (the default), your own PEM pair, or Let’s Encrypt via ACME — the last one needs your own domain. Without a domain, the self-signed one is enough: the browser asks you to confirm it once, and the connection is encrypted from there on. With a domain, Let’s Encrypt is more convenient: it is issued by the webroot method through nginx itself, and renews automatically when the route configuration is updated. If the HTTPS port is not set yet, a successful Let’s Encrypt request turns it on (443) by itself — the certificate starts serving right away. When secure mode is enabled locally, all HTTP — including the route subfolders — is redirected to HTTPS (the only exception is the ACME check path); behind an upper reverse proxy that terminates TLS, the subfolders keep being served over HTTP too, since the browser already talks HTTPS to the proxy.
What is central login (single sign-on to a server’s apps)?
Central login is single sign-on for the apps of one server (Authelia). It is installed on the Authelia tab of the server page, and it has its own address — {serverHost}/auth/. While it is active, agents and products are closed behind the central login by default, and tools with a web interface and custom routes — by your choice: a visitor signs in once and then opens any protected app of the server without logging in again. The login needs HTTPS — a certificate and port on the Nginx tab, or the https://{serverHost}/{slug} address template when an upper reverse proxy terminates TLS. Reaching an app directly by host:port, bypassing nginx, keeps the app’s own login. Details are on the Servers and Nginx Routing pages.
Can I log into Forgejo without a separate password?
Yes. Forgejo connects to the central login — the switch is on the Forgejo tab of the server page. Then the Forgejo login page gets a button for signing in through the central login, and new users register automatically from its identity. Forgejo’s own accounts keep working, and the central-login sign-in can be turned off the same way — with the switch.
How do I sign out of all apps at once?
The server home page has a Logout card — the last one on the board. It leads to a confirmation page, after which you are signed out of the central login, of all agents and products (their tokens are deleted) and of the home page itself.
What does the check button on the server page show?
The Check and fix button on the server page opens a service health checklist: the SSH connection, Docker, the folders on the server, the agent user, Nginx, the SSL certificate, the home page, central login, the database (Postgres), the Git service (Forgejo) and the backup service. Rows with a problem that can be fixed automatically carry a “Click here to install it” link (or “create it” / “start it” / request a certificate): it is the same one-step install as on the tab, and after a successful fix the checks re-run themselves.
What is server handover?
Server handover is a one-time operation that gives control of the server to its own MultiAgent: a separate MultiAgent is deployed on the server, and the records move to it — agents, apps, tools, routes and access keys. The running apps are not touched, and you keep the server itself: SSH access, checks, folders and Docker cleanup. After the handover, you can peek into the client’s instance with the “Manage” button — the login happens by itself, with no password. Details are on the Server Handover page.
Can MultiAgent live in a subfolder?
Yes. The same image works both at the domain root and in any subfolder — for example, your-domain/multiagent. Nothing needs rebuilding: MultiAgent detects the subfolder from the request address. It is enough to either set the MULTIAGENT_BASE_PATH variable, or to have the upper proxy pass the X-Forwarded-Prefix header. On a managed server, MultiAgent configures this itself during deployment. Details are on the Nginx Routing page.
What is the own agent (Own Agent)?
The own agent is an external Xedant Agent that MultiAgent connects with the AGENT_API_URL and AGENT_API_KEY environment variables. Its interface is built into every page: a sidebar block with a chat summary, a global chat panel, a prompt queue and voice input. The reverse direction — the agent controlling MultiAgent — works through the machine interface with the MULTIAGENT_API_KEY key. Details are on the Own Agent page.
What is the Agent API?
Agent API is the machine interface /api/agent/* for automated clients, guarded by an X-API-Key key (the MULTIAGENT_API_KEY variable stores its SHA-256 fingerprint). Through it, an external agent manages servers, agents, tools and products; the GET /api/agent request returns a catalog of all the operations with descriptions. Without the variable, the interface answers 503 Agent API is disabled (“the API is off”). Details are on the Agent API page.
What is the server home page?
The server home page is the single bookmark from which all of a server’s apps open. It is a static board of cards: MultiAgent builds it from its own database and uploads it to the server, and nginx serves it at the root /. It needs no separate container and no own login, and the cards (agents, apps, tools, Git, the Logout button) appear automatically. Details are on the Server Home Page page.
How are tasks and bots different from the old triggers and managers?
The old managers and triggers (cron, webhooks, email, Telegram) have been removed from the product. Instead, the agents’ chats now hold scheduled tasks, bots and the prompt queue — plus MCP servers and skills. These are the agent’s own entities: MultiAgent passes them through instead of reinventing them — the dialogs open from the agent page and work through its own API. Details are on the Tasks and Bots page.
How do I install MultiAgent on Windows?
With the XedantMultiAgent-Setup-<version>.exe setup wizard: the app runs locally at http://localhost:3990 with the data folder %LOCALAPPDATA%\Xedant\MultiAgent\data — Docker, WSL and .NET are not needed. The managed servers stay Linux machines connected over SSH. Details are on the Windows Installation page.
Does MultiAgent work without the internet?
MultiAgent is fully self-hosted: the server, the database, the Forgejo Git server and the files are all inside your infrastructure. Outbound, it only needs access to the model APIs and — when updating — to the Docker registry.
Why is it not open-source?
We already tried running and supporting free products — more than 20 years ago. It is not worth it: the support load is much higher, while there are no resources left for further development. We prefer to have far fewer users who genuinely love the products and are ready to pay for them. One more important reason is control: we like keeping the products simple and minimalist. With open source, we would expect tons of AI-generated PRs with features we deliberately avoided for their complexity and poor design decisions.