{
 "slug": "anythingllm",
 "name": "AnythingLLM",
 "tagline": "Private ChatGPT-style workspace that answers questions over your own documents with RAG",
 "category": "ai-llm",
 "use_cases": [
  "rag",
  "document-qa",
  "private-llm"
 ],
 "aliases": [
  "anything llm"
 ],
 "status": "live",
 "upstream": {
  "vendor": "Mintplex Labs",
  "url": "https://anythingllm.com",
  "license": "MIT",
  "license_url": "https://github.com/Mintplex-Labs/anything-llm/blob/master/LICENSE"
 },
 "image": {
  "os": "Ubuntu 24.04 LTS",
  "cis_level": 1,
  "ports": [
   80,
   443
  ],
  "artifacts": [
   "/etc/lynxroute/sbom.json",
   "/etc/lynxroute/cis-report.html",
   "/usr/share/doc/lynxroute/CIS_TAILORED_PROFILE.md"
  ]
 },
 "clouds": {
  "aws": {
   "status": "live",
   "version": "1.18.0",
   "last_build": "2026-10-23",
   "entity_id": "prod-jdgh7celwrac6",
   "ami_alias": "/aws/service/marketplace/prod-jdgh7celwrac6/latest",
   "listing_url": "https://aws.amazon.com/marketplace/pp/prodview-qvbyduvnoxwi4",
   "recommended_instance_type": "t3.medium",
   "price_usd_per_hour": 0.05,
   "free_trial_days": 5,
   "unit": "instance-hour"
  },
  "azure": {
   "status": "live",
   "version": "1.17.0",
   "last_build": "2026-10-03",
   "offer_id": "anythingllm",
   "plan_id": "payg-gen2",
   "image_urn": "lynxroute:anythingllm:payg-gen2:latest",
   "listing_url": "https://azuremarketplace.microsoft.com/en-us/marketplace/apps/lynxroute.anythingllm?tab=Overview",
   "recommended_vm_size": "Standard_D2s_v3",
   "price_usd_per_vcpu_hour": 0.028,
   "unit": "vcpu-hour"
  },
  "alicloud": {
   "status": "not_offered"
  }
 },
 "urls": {
  "page": "https://lynxroute.com/products/anythingllm/",
  "json": "https://lynxroute.com/products/anythingllm/product.json"
 },
 "release_notes": [
  {
   "version": "1.18.0",
   "title": "AnythingLLM 1.18.0",
   "notes": "* AnythingLLM updated 1.17.0 -> 1.18.0, a bugfix release with no database migrations. MIT unchanged\n* About 50 fixes across attachments, scheduled jobs, data connectors and AstraDB embeddings\n* Security: login no longer reveals whether a username exists, and the embed allowlist is matched by origin\n* Rebuilt on the latest CIS Level 1 hardened Ubuntu 24.04 LTS base, picking up every operating-system security update published since the previous build\n",
   "source": "backfill-aws-listing",
   "live": {
    "aws": "2026-10-23"
   }
  },
  {
   "version": "1.17.0",
   "title": "AnythingLLM 1.17.0",
   "notes": "* AnythingLLM 1.17.0 on Ubuntu 24.04 LTS - update from 1.16.1, including the 1.16.2 release. MIT unchanged; self-hosted feature set unaffected\n* Security: fixes a path traversal through stored document paths, stops anonymous embed-widget visitors receiving the owner's private memories, closes a stored XSS in page metadata and scopes memory extraction to the right user\n* Agent web browsing is now enabled by default, using the You.com keyless search tier with a DuckDuckGo fallback; admins can choose another search provider or disable the skill\n* New providers: Google Vertex AI for chat, Gemini and llmman image generation, LocalAI image editing from reference images, a generate-image agent skill and reasoning-effort controls\n* Document ingestion fixes: every sheet of a multi-sheet XLSX is kept, spreadsheet dates and text encodings are read correctly, and scraped tables and PDF page boundaries are preserved\n* Certbot pre-installed - enable a trusted HTTPS certificate with one command: sudo certbot --nginx -d yourdomain.com\n* Rebuilt on the current CIS Level 1 hardened Ubuntu 24.04 LTS base for the latest Ubuntu security updates\n",
   "source": "backfill-aws-listing",
   "live": {
    "aws": "2026-10-02",
    "azure": "2026-10-03"
   }
  },
  {
   "version": "1.16.1",
   "title": "AnythingLLM 1.16.1",
   "notes": "* AnythingLLM 1.16.1 on Ubuntu 24.04 LTS - patch update from 1.16.0. MIT unchanged; self-hosted feature set unaffected\n* Chain-of-thought and agent activity now roll up into a single collapsible element, so a long agentic run stays readable\n* Navigating away from a chat now warns before it cancels an in-flight response\n* AWS Bedrock cross-region inference profiles (us., eu. and global. prefixes) appear in the model list and route correctly, with manual region entry for regions outside the preset list\n* LocalAI added as an image-generation provider, listing only image-capable models, with per-model context-window auto-detection\n* Certbot pre-installed - enable a trusted HTTPS certificate with one command: sudo certbot --nginx -d yourdomain.com\n* Rebuilt on the latest CIS Level 1 hardened Ubuntu 24.04 LTS base\n",
   "source": "backfill-aws-listing",
   "live": {
    "aws": "2026-09-01",
    "azure": "2026-09-02"
   }
  },
  {
   "version": "1.16.0",
   "title": "AnythingLLM 1.16.0",
   "notes": "* AnythingLLM 1.16.0 on Ubuntu 24.04 LTS - minor update (from 1.15.0). MIT unchanged; self-hosted feature set unaffected\n* Image generation via /img when a supported provider is configured, including image attachments for edits, follow-ups and combination prompts where the provider supports editing\n* Improved file-picker experience\n* Certbot pre-installed - enable a trusted HTTPS certificate with one command: sudo certbot --nginx -d yourdomain.com\n* Rebuilt on the latest CIS Level 1 hardened Ubuntu 24.04 LTS base\n",
   "source": "backfill-git",
   "live": {
    "aws": "2026-08-18",
    "azure": "2026-08-19"
   }
  },
  {
   "version": "1.15.0",
   "title": "AnythingLLM 1.15.0",
   "notes": "* AnythingLLM 1.15.0 on Ubuntu 24.04 LTS - minor update (from 1.14.1): unlocked chat-history cap, ToolReranker (intelligent tool selection) enabled by default, GenericOpenAI embedder prefix env vars, and assorted fixes. MIT unchanged; self-hosted feature set unaffected.\n* Certbot pre-installed - enable a trusted HTTPS certificate with one command: sudo certbot --nginx -d yourdomain.com\n* Rebuilt on the latest CIS Level 1 hardened Ubuntu 24.04 LTS base\n",
   "source": "backfill-git",
   "live": {
    "aws": "2026-07-11",
    "azure": "2026-07-11"
   }
  },
  {
   "version": "1.14.1",
   "title": "AnythingLLM 1.14.1",
   "notes": "* AnythingLLM 1.14.1 on Ubuntu 24.04 LTS - maintenance release (patch from 1.14.0) with performance improvements and bugfixes: faster meeting-assistant processing, an embedder memory-leak fix, a new transcription API, and chat export (PDF/JSON/Markdown)\n* Certbot pre-installed - enable a trusted HTTPS certificate with one command: sudo certbot --nginx -d yourdomain.com\n* Rebuilt on the latest CIS Level 1 hardened Ubuntu 24.04 LTS base\n",
   "source": "backfill-git",
   "live": {
    "aws": "2026-06-25",
    "azure": "2026-06-21"
   }
  },
  {
   "version": "1.14.0",
   "title": "AnythingLLM 1.14.0",
   "notes": "* Updated AnythingLLM to 1.14.0\n* Certbot pre-installed - enable HTTPS with one command: sudo certbot --nginx -d yourdomain.com\n* Rebuilt on the latest CIS Level 1 hardened Ubuntu 24.04 LTS base\n",
   "source": "backfill-git",
   "live": {
    "aws": "2026-06-16"
   }
  },
  {
   "version": "1.12.1",
   "title": "AnythingLLM 1.12.1",
   "notes": "* AnythingLLM 1.12.1 single upstream Docker image (mintplexlabs/anythingllm:1.12.1) on Ubuntu 24.04 LTS\n* CIS Level 1 hardening applied (ansible-lockdown/UBUNTU24-CIS)\n* CVE-scanned before every release\n* Admin user with unique password (EC2 Instance ID) generated at first boot via POST /api/system/enable-multi-user\n* JWT signing key, encryption signing key, and salt (>=32 chars each) generated per instance\n* Container bound to 127.0.0.1:3001 and reachable only through Nginx with TLS\n* Embedded LanceDB vector store and native embedder pre-configured - RAG works out of the box\n* No provider API keys pre-configured - operator configures OpenAI, Anthropic, Bedrock, Ollama, etc. in the admin UI\n* Anonymous telemetry disabled by default\n* Persistent storage at /opt/anythingllm/storage (SQLite + LanceDB + documents) - can be moved to a dedicated EBS volume\n* UFW firewall pre-configured (TCP 22, 80, 443 only)\n* fail2ban, auditd, AppArmor pre-configured\n* SBOM (CycloneDX 1.6) at /etc/lynxroute/sbom.json\n* CIS Conformance Report (OpenSCAP) at /etc/lynxroute/cis-report.html\n* IMDSv2 enforced\n",
   "source": "backfill-aws-api",
   "live": {
    "aws": "2026-05-14"
   }
  }
 ],
 "release_history": [
  {
   "version": "1.18.0",
   "aws": "2026-10-23"
  },
  {
   "version": "1.17.0",
   "aws": "2026-10-02",
   "azure": "2026-10-03"
  },
  {
   "version": "1.16.1",
   "aws": "2026-09-01",
   "azure": "2026-09-02"
  },
  {
   "version": "1.16.0",
   "aws": "2026-08-18",
   "azure": "2026-08-19"
  },
  {
   "version": "1.15.0",
   "aws": "2026-07-11",
   "azure": "2026-07-11"
  },
  {
   "version": "1.14.1",
   "aws": "2026-06-25",
   "azure": "2026-06-21"
  },
  {
   "version": "1.14.0",
   "aws": "2026-06-16"
  },
  {
   "version": "1.13.0",
   "aws": "2026-06-06",
   "azure": "2026-06-06"
  },
  {
   "version": "1.12.1",
   "aws": "2026-05-14"
  }
 ],
 "deploy": {
  "aws_cli": "# subscribe once on the AWS Marketplace listing, then:\naws ec2 run-instances \\\n  --image-id resolve:ssm:/aws/service/marketplace/prod-jdgh7celwrac6/latest \\\n  --instance-type t3.medium --key-name my-key --security-group-ids sg-xxxxxxxx",
  "azure_cli": "# accept the plan terms once, then:\naz vm image terms accept --publisher lynxroute --offer anythingllm --plan payg-gen2\naz vm create -g my-rg -n anythingllm --size Standard_D2s_v3 \\\n  --image lynxroute:anythingllm:payg-gen2:latest --admin-username azureuser --generate-ssh-keys"
 },
 "description": {
  "what_is": "AnythingLLM is an open-source, self-hosted ChatGPT-style application that turns any document collection into a private, queryable workspace. The server is a Node.js application that ingests PDFs, DOCX, HTML, plain text, audio transcripts, and code, chunks and embeds the content into a vector database, and serves a multi-user web UI for chat and AI agents. It supports any LLM provider through a single switch in the admin UI - OpenAI, Anthropic Claude, AWS Bedrock, Azure OpenAI, Google Gemini, Cohere, Mistral, Groq, OpenRouter, Ollama, LM Studio, vLLM, LiteLLM, and many more. AI agents can browse the web, run SQL, call tools, and execute multi-step workflows. Operators get team workspaces with per-workspace document scope, role-based access, public chat embeds, REST API for programmatic access, an OpenAI-compatible developer API, and a built-in admin UI. Persists users, workspaces, chats, documents, and vectors in embedded SQLite and LanceDB - no external database required. MIT license, no vendor lock-in.",
  "image_adds": "Security hardening:\n* Admin user with unique password (EC2 Instance ID) generated at first boot - never baked into the image\n* JWT signing key, encryption signing key, and salt (>=32 chars each) generated at first boot\n* AnythingLLM container bound to 127.0.0.1:3001 only - reachable only through the Nginx reverse proxy with TLS\n* Multi-user mode enabled at first boot - the bootstrap auth window closes immediately after admin creation\n* No provider API keys baked in - operator configures OpenAI, Anthropic, Bedrock, Ollama, etc. in the admin UI after login\n* Anonymous telemetry disabled by default\n* Nginx reverse proxy with TLS, HTTP-to-HTTPS redirect, WebSocket support for streaming chat, security headers\n* UFW firewall pre-configured - only TCP 22, 80, 443 are exposed\n* fail2ban, AppArmor\n* CVE scan - every image is scanned for vulnerabilities before release\n\nOut of the box, with no external services:\n* Embedded LanceDB vector database - file-based, no separate container or network call\n* Native embedder (Xenova/all-MiniLM-L6-v2) running inside the container - no external embedding API key required for RAG\n* SQLite storage for users, workspaces, chats - no external database to provision\n\nOS hardening (CIS Level 1):\n* CIS Ubuntu 24.04 LTS Level 1 benchmark applied via ansible-lockdown\n* auditd, SSH hardening, kernel hardening, IMDSv2 enforced\n\nCompliance artifacts:\n* SBOM - CycloneDX 1.6 at /etc/lynxroute/sbom.json\n* CIS Conformance Report at /etc/lynxroute/cis-report.html\n* CIS Tailored Profile at /usr/share/doc/lynxroute/CIS_TAILORED_PROFILE.md"
 },
 "generated_at": "2026-10-31T09:36:34Z"
}