
Executor is an open-source gateway connecting AI agents to any service through one MCP endpoint.
Executor is the open-source integration layer for AI agents: one catalog for every tool, shared across every agent a user or team operates. Connectors cover MCP servers, OpenAPI-described REST APIs, and GraphQL endpoints behind a single endpoint, with authentication, per-tool permissions, audit-ready policies, and a sandboxed JavaScript execution surface that keeps secrets host-side.
It ships in four forms from one codebase — a hosted Executor Cloud with a free tier for small teams, a native desktop app for macOS, Windows, and Linux, a local CLI that runs a background service, and self-hosted Docker and Cloudflare deployments — so individuals, startups, and regulated teams can adopt the same catalog at different levels of control.
Executor positions itself as an open, self-hostable alternative to hosted integration gateways: teams can run the gateway in a single Docker container with SQLite or on Cloudflare Workers with D1, keeping credentials and tool policies inside their own infrastructure. The same catalog serves every client through one MCP endpoint, so Claude Code, Codex, and Cursor-like agents share one set of authorized connections.
The project's stated economics emphasize token efficiency — replacing roughly 280,000 tokens of tool definitions with an approximately 1,000-token surface — and per-tool allow/ask/block policies plus sandboxed execution rather than raw tool exposure. Independent developer write-ups corroborate hands-on breadth across the CLI, desktop, cloud, and self-hosted surfaces.
Executor monetizes through its hosted cloud tier: a free plan supports up to three members and 100,000 executions, a Team plan runs 15 dollars per member per month after a 14-day trial, and an Enterprise tier adds SSO/SAML, SCIM, audit logs, and SOC 2 on request. The open-source core itself stays MIT-licensed and self-hostable at no charge.
This free-tier-plus-seats model matches a developer-first motion: individuals adopt the CLI and desktop app without a paywall, while teams and enterprises pay for the managed gateway and compliance features. Because self-hosting remains free, hosted pricing competes on operational convenience rather than on access.