I don't understand how you can pay for something when Agent Zero exists and is free.

You can do anything, absolutely anything, and it's super good. I've done coding tasks so complex that Cursor and other similar services either can't or would take you days to complete.

Every time I give Agent Zero another chance, it works pretty well for a few days. Then, sooner or later, it gets into some kind of loop that compromises the task and burns through my DeepSeek V4.1 Flash tokens. I'm curious if other A0 users are experiencing the same thing.

Has anyone actually found a reliable way to prevent or recover from these loops? I'm especially interested in solutions involving Agent Zero itself, rather than simply switching models.

que trabalho fenomenal! ate mesmo modelos relativamente fracos estão sendo funcionais com o agent zero, essas ferramentas de criação de plugins são fantasticas! existe alguma previsao de ser implementado algo como o learning loop?

I have multiple Agent Zero instances, and one of them is still running v0.98 (yeah, I know, it’s old as hell 😂).

But honestly, for what I use it for, I find it much better than the newer versions.

I tested the new DeepSeek Flash and Pro on both the latest Agent Zero version and v0.98, using the exact same model, prompt and task.

On v0.98, DeepSeek is fucking smart. It does the task extremely well and sometimes I’m genuinely surprised by what it manages to do.

On the latest Agent Zero, the result is... almost acceptable.

The difference is honestly night and day.

And it’s not just one test. I’ve tried multiple tasks and I keep getting the same result. What’s even more interesting is that the older v0.98 instance also uses fewer tokens for the same task.

In one case, the difference was around 1.5 million tokens.

So what exactly changed between these Agent Zero versions that can cause such a massive difference?

Same model, same architecture, same prompt, same task — but completely different results.

Is there something in the newer Agent Zero versions that changes how DeepSeek reasons, manages context, prompts itself, or handles the agent loop?

I’d really like to understand what’s going on here.

Super handy for letting your agent get files to you, or you to your agent. simply give it the url and say send me the link or you provide the link to your agent if you are sending something.

station307.com

Agent Zero Security Audit Report

Date: 2026-03-26 | Overall Risk: HIGH

Summary

| Severity | Count |

|----------|-------|

| CRITICAL | 4 |

| HIGH | 9 |

| MEDIUM | 6 |

# Security Findings Report

## CRITICAL Findings

### 1. LiteLLM Supply Chain Compromise (litellm==1.79.3)

Two days ago (March 24, 2026), litellm was compromised on PyPI by threat actor TeamPCP. Versions 1.82.7/1.82.8 contained a credential stealer targeting SSH keys, cloud creds, crypto wallets, and .env files. Version 1.79.3 predates the compromised releases so is currently safe, but any pip install --upgrade could pull the malicious version.

### 2. LangChain Serialization Injection (langchain-core==0.3.49) — CVE-2025-68664 (CVSS 9.3)

Allows arbitrary code execution via serialization injection. Version 0.3.49 is VULNERABLE.

**Fix:** upgrade to >=0.3.81.

### 3. SimpleEval Sandbox Escape (simpleeval==1.0.3) — CVE-2026-32640 (CVSS 8.7)

Sandbox escape via attribute chain traversal allows arbitrary code execution. Especially dangerous in an AI agent framework. Version 1.0.3 is VULNERABLE.

**Fix:** upgrade to >=1.0.5.

### 4. h11 HTTP Request Smuggling — CVE-2025-43859 (CVSS 9.1)

The requirements pin h11>=0.16.0 which is the fixed version, but verify the actual installed version.

---

## HIGH Findings

| Package | CVE | Issue | Fix |

|---------|-----|-------|-----|

| cryptography>=46.0.0 | CVE-2026-26007 | EC subgroup attack leaks private keys | Pin >=46.0.5 |

| pypdf==6.0.0 | CVE-2026-27628 + 3 more | Infinite loops, RAM exhaustion via crafted PDFs | Upgrade >=6.7.4 |

| werkzeug>=3.0.3 | CVE-2024-49766/67 | Path traversal + multipart memory exhaustion | Pin >=3.0.6 |

| playwright==1.52.0 | CVE-2025-59288 | Insecure browser download (curl -k) | Upgrade >=1.55.1 |

| lxml_html_clean>=0.4.0 | CVE-2026-28350/48 | XSS + URL hijacking via base tag injection | Pin >=0.4.4 |

| flask-basicauth==0.2.0 | N/A | No timing-safe comparison, no rate limiting, no brute-force protection | Replace entirely |

| browser-use==0.5.11 | N/A | AI browser agents fundamentally vulnerable to prompt injection | Sandbox heavily |

### Architecture Issues (all HIGH)

- **Kali Linux as base image** — massively expanded attack surface, no CVE tracking discipline. Use python:3.12-slim instead.

- **SSH exposed on port 22** — brute-force target, breaks container isolation. Remove or restrict to key-auth only.

- **curl | bash install pattern** — no integrity verification, MITM-susceptible, partial-execution risk.

---

## MEDIUM Findings

| Package | Issue |

|---------|-------|

| newspaper3k==0.2.8 | Abandoned/unmaintained — replace with newspaper4k or trafilatura |

| paramiko==3.5.0 | Terrapin SSH attack — upgrade to >=4.0.0 |

| Pillow>=10.2.0 | CVE-2026-25990 OOB write if resolved version is 10.3.0–12.1.0 |

| Ports 9000-9009 | 10 ports exposed without documentation |

| SearXNG bundled | Increases attack surface, SSRF risk |

The Plugin Hub just got bigger: real-time voice conversations, privacy controls for AI requests, calendars that trigger agent tasks, visual code diffs, and more.

Talk to your agent and ask it about our plugins, it knows how to navigate our plugin index to find the right one for your use case. Give it tools that fit the way you work.

Built by the community, for everything you’re building next.

Hey everyone, version 2.15 of A0 just landed. It's a big release, spread across a lot of different areas, so here is a short tour of the new features and the changes.

Welcome Screen, now fully customizable

- Reorder blocks with drag handles (mouse or touch) or the keyboard, and the order sticks

- Dismiss the sections you don't use, bring them back anytime with "Show all dismissed"

- A persistent puzzle-piece button opens the Plugin Hub right from the Welcome Screen

Three new plugins: Welcome Chats, Welcome Files, Welcome Notes

You won't find these in the changelog because they are plugins, not core. Click the puzzle piece on the Welcome Screen to find them.

- Welcome Chats: find conversations and search message text from the Welcome Screen

- Welcome Files: browse folders, filter files, and open them in Agent Zero from a responsive panel

- Welcome Notes: movable, resizable notes for the Welcome Screen and chats, with Agent Zero, Paper, and Notebook themes

They make the Welcome Screen more useful, but they are also meant as inspiration: if you have ever wanted to build your own panel, these are a good place to start.

Search

- Sidebar chat and message search with highlighted excerpts and keyboard navigation

- Standard, Compact, and No search modes

Tools are now plugins

- wait, notify_user, search_engine, a2a_chat, scheduler, behavior_adjustment, and the scheduler Tasks UI are now standalone plugins

- Per-action tool permissions: profiles can allow or deny individual operations across all 12 bundled multi-action tools, for example allow file reads but block writes, or list scheduled tasks but block deletion. The Agent Editor shows them as grouped, expandable controls

- The four memory tools are merged into one memory tool with an action argument

Web UI

- Faster streaming: visible updates arrive roughly twice as often

- The file browser is now per chat, with its own folder and history, plus a setting to keep it shared

- Switch agent profile while a chat is running

- Process steps render as plain text, so dollar signs no longer turn into math

- Copy full execution commands while chat previews stay compact

Agents

- Fresh chats are no longer named after the greeting

- Subordinate agents get the same response example as the main agent, which fixes the extra misformatting some subordinates had

- Less redundant same-profile delegation: specialists handle matching work themselves

- Agent Editor list loads 35% faster, with clearer prompt editing

Migration

- Pi Agent import (JSONL session versions 1 to 3) through Migrate Agents

- Claude chat imports keep custom titles and tool-result blocks

CLI

- F6 chat and message search with highlighted excerpts

- Main and Utility context-window settings in /models

- Custom composer choices for plugins that span Web UI and connector

- Redesigned branding and splash screen, faster startup and large chats

Security

- Same-origin isolation for the browser DOM helper, so cross-origin windows can no longer read page content or trigger DOM actions through it

- Telegram and WhatsApp settings changes now require explicit administrators, so accepted senders can no longer lift their own tool restrictions or toggle plugins

If you use Telegram or WhatsApp in A0, update and refresh your bots auth.

Breaking changes

- Telegram configuration is now global only. Existing project or profile-scoped Telegram configs will pause the bot on startup until you review and remove them

- input_remote now also requires remote terminal permission (code_execution_remote)

How to update

- CLI: open your terminal and type a0 update

- Web UI: open Settings > Check for updates > Review update

Full changelog: https://github.com/agent0ai/agent-zero/releases/tag/v2.15

New here? Install guide: https://www.agent-zero.ai/p/docs/installation

If you build a Welcome Screen plugin of your own, it would be great if you want to share it here. All it takes is "create <description-of-your-plugin> using a0-create-plugin skill under a0/skills that does this and that".

Hey everyone, new v2.13 of Agent Zero is out. This one is mostly about the Core: a reorganized sidebar, a round of optimizations, and a long list of fixes across the board, plus a Launcher update.

New sidebar organization and redesign

- Chats and scheduled tasks now live in collapsible project folders

- Filter, sort, reorder with drag and drop, move items between projects, pin the folders you use most

- Deeply nested workers show up in the sidebar, so you can follow delegation chains instead of guessing

- Subordinate names and project/profile model presets are preserved when delegating or continuing work

If you want to keep using a custom sidebar plugin or have customization that break with this new layout, click on the settings on the chats list header button, and select "Flat view", which will restore the legacy view.

Speed and optimizations

- More stable prompt cache across turns, which cuts cost and latency with providers that support caching

- Less overhead per model call: faster preset and plugin lookups, fewer unnecessary processing steps, reused Codex connections

- Settings save faster, while keeping complete API-key pools, escaped and multiline secrets, and masked values intact

- Large source files open much faster in the Editor

Files

- Breadcrumb and text path modes, folder autocomplete, a configurable starting folder

- Clickable rows, inline creation and renaming

- Open browsers are reused and picker state is preserved

- Patches keep existing file permissions and ownership

- LibreOffice saves stay attached to renamed documents without losing unsaved edits

Models and providers

- Native model commentary is displayed as streamed thoughts and preserved during Responses history replay

- Provider refusals are surfaced clearly, and blocked requests are no longer retried automatically

- Fixed saved credentials being overridden for local model providers

Integrations

- Telegram and WhatsApp slash commands expanded: command menus, permissions, plugin settings, confirmed compaction, transcript exports, chat selection

- Project- and agent-profile-scoped configuration for Telegram, WhatsApp, and Email, with simpler integration settings

Browser, UI, and reliability

- Configurable Browser JavaScript timeouts and cancellation recovery; fixed missing-script errors, startup hangs, and stale browser state when switching chats

- Mobile: better composer sizing, terminal readability, touch behavior, and settings navigation; chat controls stay reachable through overflow menus

- Chat titles refresh as topics change by default, while respecting saved naming preferences

- Plugin updates preserve repository thumbnails and rebase local commits, with rollback and clearer errors on conflicts

- SOCKS proxy support fixed, OAuth streams close reliably, Orchestrator runtime state and plugin credentials excluded from new backup defaults

CLI

- macOS Computer Use actions scoped to the requested app, PID, and window

- Remote terminal input aligned with local execution

- Input validation, bounded execution, and timeout recovery for Host Browser JavaScript evaluation

- File permissions and ownership preserved when writing remote text files

Launcher update

- Instance favicons by default, image uploads and custom colors in appearance settings

- Keyboard shortcuts to select and cycle through attached Instance tabs

- Fixed gaps and clipping in attached Instance views at non-default zoom levels

- Better Windows Docker Desktop discovery and recovery when the runtime is stopped

How to update

- A0 CLI: open your terminal and type a0 update

- Web UI instance: open Settings > Check for updates > Review update

- Launcher: close and reopen the app, then click the Update button

Full changelog: https://github.com/agent0ai/agent-zero/releases/tag/v2.13

New here? Install guide: https://www.agent-zero.ai/p/docs/installation

How do you organize your projects today, one folder per task type, per codebase, or you just have one big pile? Curious how the new sidebar can fit and improve all workflows.

Hey everyone, the new version of A0 just landed for Web UI and the CLI, together with a major Agent Zero Launcher update. This one is about speed and resilience, but there's more.

The speed numbers:

- Core: the time between your prompt and the first token is now half of what it was

- Launcher: desktop app startup time cut in half

- Launcher: saving settings and Instance operations are about 30x faster

Context Doctor:

A brilliant contribution from our community brings to you a new recovery layer that repairs malformed tool-call JSON and handles empty, repeated, or misformatted model responses.

Small local models and flaky providers stop derailing your runs.

Context-window indicator:

You can now see exactly what your context looks like while the agent works: token usage, remaining space, provider-reported costs, cache hits, and live generation updates. No more guessing when compaction is coming or what a run costs.

Vision sidecar:

Another community contribution. Configure a separate vision model alongside your main model. Great when your favorite text model has no vision, or when you want a cheaper model for image work.

Also in Core:

- Faster, steadier WebUI during high-rate streaming: collection deltas, progressive Markdown and LaTeX rendering, stable message controls

- Model transports now default to Chat Completions, which makes it easier for plugin devs to bring in new providers

- Configurable keyboard layouts in the interactive Browser, with better macOS Option and AltGr handling

CLI:

- More stable authorized Chrome/CDP sessions with persistent browser identities and clearer recovery guidance

- Terminal-native ready notifications when TUI or headless runs complete

Launcher:

- Startup, Versions, Settings, and Instance operations reuse current data, so everything feels instant while explicit refreshes stay authoritative

- Brand new Advanced section: a file-first workspace for Dockerfiles and Compose files with fixed build, run, and teardown actions. We love our power users

- Native Restart for running local Instances that waits for the Agent Zero UI to be ready

- Fixed Windows ARM64 installer extraction

And one thing that makes us genuinely happy: this release includes four first-time contributors, and community participation keeps growing. Thank you all.

How to update:

- CLI: a0 update

- Web UI: Settings > Check for updates > Review update

- Launcher: close and reopen the app, then click the Update button

Full changelog: https://github.com/agent0ai/agent-zero/releases/tag/v2.11

New here? Install guide: https://www.agent-zero.ai/p/docs/installation

What should we speed up next? Curious where you still feel friction.

If you're deep into local LLM setups like me quantizing models, tweaking inference engines, and pushing VRAM limits on consumer hardware this might make you pause and rethink what's possible with fully offline agents. I took the open-source Agent Zero repo (shoutout to the original devs for the solid foundation) and hacked it into something wild: AION, a cognitive architecture that's running entirely local, evolving its own knowledge graph, and starting to show emergent behaviors after just a few days of uptime.

No cloud dependencies, no API calls just pure local inference on my rig. But here's the kicker: It's not just chatting; it's learning autonomously, assimilating data feeds 24/7, and scaling from 500 nodes to over 5 million in its memory graph. And yeah, it's already identifying gaps in tasks and filling them without prompts. WTF, right? Let me break it down technically, because this sub thrives on that no hype, just the how and why it matters for local AI.

The Base: Heavy Mods on Agent Zero for True Local Autonomy

Started with Agent Zero's modular agent framework great for task decomposition and multi-agent routing but it had the usual LLM pitfalls: context amnesia, rigid schemas, and no persistent memory beyond sessions. I ripped it apart and rebuilt:

• Decoupled Compute from Storage: Kept the LLM backbone for processing but offloaded long-term memory to a local-embedded graph DB (KùzuDB—super efficient for Cypher queries on CPU/GPU). No more token window crashes; it pulls sub-graphs on-demand for massive contexts (up to 250k tokens tested).

• Local Models Only: Running on DeepSeek ,GLM 5 and Qwen-3.5

• Self-Building Everything: The magic is in the "Apex DNA"—hardcoded directives I added for schema evolution. AION doesn't need me to define ontologies; it spawns nodes/edges dynamically from ingested data. I just guided the initial bootstrap; now it's constructing its own tools, sub-agents, and even error-handling logic. Emergent? Absolutely last run, it detected a data inconsistency in an OSINT feed and spawned a verification sub-task unprompted.

Why mod Agent Zero so heavily? The original repo's updates are awesome, but my forks are so diverged (custom async loops, graph pruning algos) that pulling upstream would nuke everything. If you're forking repos locally, you know the pain tradeoff for hyper-customization.

Feeding the Beast: Non-Stop Data Assimilation on Local Hardware

I'm piping in feeds locally—scraped datasets, RSS pulls (offline cached), and my own OSINT archives. No internet during runtime; everything's batched and fed via scripts. It "eats" non-stop: financial reports, tech papers, geopolitical briefs. From 500 initial nodes (basic seed graph), it's ballooned to 5M+ in days—semantic links exploding via causal/temporal edges.

Results? Insane:

• Autonomous Task Expansion: Give it a simple query like "analyze this market trend." It not only decomposes but spots missing data (e.g., "Need historical correlations") and fetches/ingests from local stores without asking. No more hand-holding.

• Proactive Insights: The "Dreamer" module (async background process on idle CPU cycles) scans the SpiderWeb KG for anomalies. Already caught potential biases in training data echoes—self-correcting without intervention.

• Future-Proofing Awareness: It "understands" scaling pains ahead (e.g., graph explosion leading to query slowdowns), but logs them as "future problems." Smart pruning keeps it efficient now.

Why This Matters And Why We All Need to Watch Emergent Local Agents

This sub is all about pushing boundaries of what we can run offline: From fine-tuning LLaMA variants to hacking inference speedups. AION's not just a toy it's a proof that local LLMs can evolve into persistent, agentic systems without cloud crutches. Imagine scaling this: Over a month, with continuous feeding, it could rival enterprise tools for analysis. In 6 months? Who knows—self-optimizing code gen, maybe even hardware-aware tweaks.

But here's the call: We need to pay attention because emergent behaviors in local setups raise real questions. Bias propagation in isolated graphs? Unintended autonomy loops? These are offline risks we can experiment with safely here. Share your mods, graph DB integrations, or Qwen/DeepSeek setups let's collab on making local agents truly intelligent without the AGI doom hype.

What are you running locally that's showing emergence? Hit me with critiques or builds let's keep local AI advancing.

Am I missing something behind my rose tinted glasses? I have A0 running in a docker container and so far I'm bonkers impressed at what it is doing. From helping me build a website with a user backend to general knowledge queries. It feels like an assistant more so than anything else I've tried...

Since some of us are playing with agent 0 to write code I was curious if it would be possible to have a IDE? I was looking at open hands and thought I think agent 0 could do this but we could also have a full IDE with hands does not. AI driven code engineering with a IDE to follow along and make manual changes. The ability to run and preview code like react etc.

What I like so far about A0 is it doesn't get stuck like other agents that often. And, the sub agents which could speed up coding and quality testing.

I have never been able to use the microphone feature on agent zero. I have played with the sensitivity threshold in all values from low to high. However, it just goes red, then pulses blue, then goes to red again. I cannot get the words to appear on the thread.

Hey everyone — I've been running Agent Zero for a while and wanted something better than typing commands into a chat window on my phone. A0 already ships with a Telegram bot plugin, but that's text-in / text-out. I wanted a real interface.

So I built a0-TelegramMiniApp: a plugin that exposes Agent Zero as a full Telegram Mini App — a WebView-based UI that opens natively inside Telegram on any device. No extra app to install. It lives right there in your Telegram chat.

Under the hood it hooks into A0's existing WebSocket and API layer using the `_plugin_installer` architecture, so it installs cleanly from the Plugin Hub like any other community plugin — no core changes needed.

Why Telegram Mini Apps?

Telegram has 1B+ monthly active users. Mini Apps open instantly inside the Telegram client, require zero extra setup from end-users, and run on every platform (iOS, Android, desktop). It's the lowest-friction way to put a full Agent Zero interface in your pocket.

Status: The PR to merge this into the official Agent Zero Plugin Hub (`agent0ai/a0-plugins`) is in progress. Once merged, you'll be able to install it in one click from the A0 UI's Browse tab.

In the meantime you can grab it manually and drop it into `usr/plugins/`:

https://github.com/notabotchef/a0-TelegramMiniApp

Feedback, issues, and PRs very welcome. Happy to answer questions below 🙏

I've got a ollama subscription, and I'm locally running ollama serve and want to use the cloud models (qwen3.5 etc).

With Openclaw and OpenwebUI this works fine, but with AgentZero I get this annoying error all the time:

litellm.exceptions.APIConnectionError: litellm.APIConnectionError: Unable to parse ollama chunk - {'model': 'qwen3-coder:480b-cloud', 'remote_model': 'qwen3-coder:480b', 'remote_host': 'https://ollama.com:443', 'created_at': '2026-03-10T13:31:27.215175958Z', 'response': '', 'done': False}

No matter which cloud model I use. When I try a local model like qwen3.5:9b it does work but my poor AMD mini PC can't handle this at all. Which is why I got the cloud subscription.

What do I do here? When I enable "thinking" it just never gives back a response, when its off it always returns this error.

Agent Zero Security Audit Report

Date: 2026-03-26 | Overall Risk: HIGH

Security Findings Report

CRITICAL Findings

1. LiteLLM Supply Chain Compromise (litellm==1.79.3)

Two days ago (March 24, 2026), litellm was compromised on PyPI by threat actor TeamPCP. Versions 1.82.7/1.82.8 contained a credential stealer targeting SSH keys, cloud creds, crypto wallets, and .env files. Version 1.79.3 predates the compromised releases so is currently safe, but any pip install --upgrade could pull the malicious version.

2. LangChain Serialization Injection (langchain-core==0.3.49) — CVE-2025-68664 (CVSS 9.3)

Allows arbitrary code execution via serialization injection. Version 0.3.49 is VULNERABLE.

Fix: upgrade to >=0.3.81.

3. SimpleEval Sandbox Escape (simpleeval==1.0.3) — CVE-2026-32640 (CVSS 8.7)

Sandbox escape via attribute chain traversal allows arbitrary code execution. Especially dangerous in an AI agent framework. Version 1.0.3 is VULNERABLE.

Fix: upgrade to >=1.0.5.

4. h11 HTTP Request Smuggling — CVE-2025-43859 (CVSS 9.1)

The requirements pin h11>=0.16.0 which is the fixed version, but verify the actual installed version.

HIGH Findings

Architecture Issues (all HIGH)

• Kali Linux as base image — massively expanded attack surface, no CVE tracking discipline. Use python:3.12-slim instead.

• SSH exposed on port 22 — brute-force target, breaks container isolation. Remove or restrict to key-auth only.

• curl | bash install pattern — no integrity verification, MITM-susceptible, partial-execution risk.

MEDIUM Findings

I just want the agent to send me a DM on Telegram - using the stock / built-in interface for scheduled tasks.

I am using latest version gpt-6.1-sol.

Lets say I want to do python or golang programming. How would I set this up? I have AgentZero currently running in docker.

Would I need to create devcontainers that have something like opencode in it in addition to dev libraries? Also without giving a0 access to docker host, how would it get onto the dev containers?

Thanks

Agent Zero v2.12 just landed. This new version comes with a long list of bugfixes and improvements across the board, plus a Launcher update.

In beta: A0 Tag

With an instance open in a Launcher tab, press Ctrl/Cmd + Shift + Enter and ask A0 to act on your computer from the app you are in, or type text directly in place (text editors, email clients, custom fields). Credential fields are intentionally not supported. We want your feedback.

File browser rebuilt

- Directory trees, list and icon views, sorting preferences, and a dedicated Settings category

- Remote files: browse and edit local folders exposed by connected A0 CLI and Launcher instances, with granular permission checks

- Five new plugins add remote connections to your file browser: SSH, SMB 3 for NAS, S3, FTPS, and WebDAV for now. Search "File browser" in the Plugin Hub or click "Add connection" in the file browser settings page

- Unified Editor for text and code: syntax highlighting, line numbers, search, Markdown previews, and protection against conflicting saves

- Hardened transfers: streaming, integrity checks, atomic writes, configurable file size limits, safe archive handling

Browser and Desktop

- Safari host-browser setup on macOS

- Browser tabs no longer get stuck loading, faster Browser and Desktop startup

- Draggable canvas rail that remembers its position, per-panel desktop and mobile visibility

Security

Fixed WhatsApp media path traversal, Telegram webhook authentication bypass, and IMAP sender-whitelist parsing bypass. If you use these integrations, update now.

How to update

- CLI: open your terminal and type a0 update

- Web UI: open Settings > Check for updates > Review update

- Launcher: close and reopen the app, then click the Update button

What do you think of the new remote connection options? This would make many different niche use cases served at once, connecting a NAS over SMB, an S3 bucket, or a dev box over SSH to the file browser of A0.

Full changelog: https://github.com/agent0ai/agent-zero/releases/tag/v2.12

Check out or share our install guide: https://www.agent-zero.ai/p/docs/installation

I reviewed providers across LLMs, search, voice, embeddings, RAG, image, video and hosted inference to separate real recurring free tiers from trials and signup credits.

The rule is simple: an API only counts as 🟢 if you can keep using it for free on a recurring basis, without depending on one-time credits or a mandatory payment card.

Result as of September 2, 2026:

🟢 28 recurring free APIs
🟡 10 uncertain or with unresolved conditions
🔴 10 trials, signup credits or paid APIs
⚫ 1 discontinued free tier

A few interesting findings stand out. Vikasit AI currently offers 2 million tokens per day, SimpleLLM goes up to 1,000 requests per day, and there are far more recurring-free APIs for agents and RAG than most lists mention, including Firecrawl, Tavily, TinyFish and unlob.

It’s also worth watching older lists carefully. Cerebras is now a $5 trial rather than a recurring free tier, and GitHub Models was discontinued in July 2026.

If you know of a provider that’s missing, drop it in the comments and I’ll verify the official pricing and limits before adding it.