Nora MCP Server

Nora is the self-hosted AI agent ops platform for running autonomous agent fleets on infrastructure you control — whether you standardize on OpenClaw, Hermes, or keep both available in the same operator surface.

Most teams running agents in production eventually rebuild the same layer around the runtime itself: deploy workflows, secrets, monitoring, logs, terminal, templates, and a separate admin surface. Nora exists so that layer doesn't have to be rewritten every time the runtime conversation changes. Operator workflows live under/app; platform-wide admin lives under/admin.

- Deploy & operate runtimes— provision OpenClaw and Hermes agents to Docker or Kubernetes (both GA, official Helm chart) with full lifecycle controls: deploy, start/stop, restart, redeploy, and version history.
- Migrate existing runtimes— recreate agents from uploaded bundles, with privileged local-Docker Live Pull available to self-hosted platform admins.
- Live operator access— streaming logs, an interactive terminal into running containers, a file browser/editor, and the OpenClaw gateway & Hermes dashboard embedded in the operator UI.
- Monitoring & alerting— per-agent metrics and cost, a fleet needs-attention roll-up (errored, stuck, over-budget, stalled telemetry), and user-defined alert rules delivered to your channels.
- Budgets & scheduled runs— per-agent LLM budget hard caps with auto-pause, plus recurring cron schedules for agent runs with queue retries and sweep guards.
- Secrets that fail closed by default— provider keys are AES-256-GCM encrypted at rest and synced to running runtimes; production refuses to boot without a valid encryption key unless an operator deliberately enables the insecure plaintext override; SSH host-key pinning protects remote (BYOC) Docker hosts.
- Network isolation— baseline Kubernetes NetworkPolicy ingress isolation with admin-managed CIDR allow rules, and an experimental NemoClaw hardened sandbox for untrusted code.
- Agent Hub— installable, versioned starter templates to go from zero to a working agent fast.
- Integrations— a 69-entry credential/connectivity catalog (source control, chat, cloud, observability, vector DBs, automation) plus 17+ LLM providers. Executable behavior comes from runtime skills or MCP adapters; supported per-agent MCP servers are enabled explicitly.
- Experimental Proxmox LXC— deploy standard OpenClaw or a prepared Hermes image into unprivileged LXC with verified API TLS and pinned SSH. It is not VM-grade isolation and still requires the real-hardware smoke gate before production use.
- Automate everything— a public REST API (OpenAPI 3.1), the@noraai/cli, and the@noraai/mcp-serverfor Claude Code, Gemini CLI, Claude Desktop, and Cursor.
- Workspaces & RBAC— multi-tenant workspaces with ranked roles, a platform admin surface, account event history, and encrypted managed backups.

Requirements:macOS 12+, Linux, or Windows 10+ (WSL2), with Docker Engine + Compose v2. The installer checks for Docker, Git, and OpenSSL and installs anything missing.

curl -fsSL https://raw.githubusercontent.com/solomon2773/nora/master/setup.sh | bash

git clone https://github.com/solomon2773/nora.git cd nora less setup.sh bash setup.sh

iwr -useb https://raw.githubusercontent.com/solomon2773/nora/master/setup.ps1 | iex

helm show chart oci://ghcr.io/solomon2773/nora

No API key yet?On installations with the local Docker target enabled, chooseLaunch local Docker demoon the Getting Started page. Nora deploys a working agent against its built-in deterministic demo provider, so you can validate chat and the operator workflow with zero keys and zero model-usage cost. Kubernetes-only installations start by adding a model provider and deploying to an enabled cluster target.

For manual setup, environment variables, public-domain mode, TLS, Remote Docker, Kubernetes, NemoClaw, and experimental Proxmox LXC configuration, see the docs:

Nginx ├── / → frontend-marketing (Next.js) ├── /app/ → frontend-dashboard (Next.js) ├── /admin/ → admin-dashboard (Next.js) └── /api/* → backend-api (Express.js) ├── PostgreSQL ├── Redis + BullMQ (deployments, clawhub-jobs, backups, alert-deliveries) ├── worker-provisioner ├── worker-backup ├── deploy-target adapters (Docker + k3s/k8s GA · Remote Docker + Proxmox experimental) └── sandbox profiles (standard · NemoClaw experimental)