启动前需先完成 Casdoor 私有初始化与密码迁移,否则认证网关校验不通过;需先按文档配置 .env 环境变量;Helm 部署仍在开发中,K8s 环境暂不可用
astron-agent
iflytekApache-2.0活跃维护科大讯飞出品的商用级智能体工作流平台,用低代码方式编排多智能体与 MCP 工具链,帮企业快速搭建可落地的 SuperAgent 应用。
Enterprise-grade, commercial-friendly agentic workflow platform for building next-generation SuperAgents.
git clone https://github.com/iflytek/astron-agent.git
cd docker/astronAgent
cp .env.example .env
vim .env
docker compose -f docker-compose-with-auth.yaml up -dREADME 未说明显存、CPU 或 GPU 型号等硬件要求
企业级可商用 Agentic 工作流平台,用于编排智能体、模型与工具并落地生产
科大讯飞出品的商用级智能体工作流平台,用低代码方式编排多智能体与 MCP 工具链,帮企业快速搭建可落地的 SuperAgent 应用。
核心能力
- 编排 AI 工作流并管理模型与 MCP 工具
- 原生集成智能 RPA,打通企业内外系统
- 提供高可用一键部署方案,含认证网关
- 接入讯飞开放平台海量即用工具生态
- 支持 API 快速接入或本地 MaaS 集群部署
容易踩的坑
- v1.1.2Astron Agent v1.1.2 — Security Release最新正式版2026-09-07 · 2026-09-07 06:43 UTC
Security Release
Astron Agent v1.1.2 is a security release. Operators running v1.1.1 or earlier should upgrade promptly, especially those running multi-tenant deployments.
Workflow code execution and tenant isolation
This release addresses unsafe workflow code-node execution that could allow an authenticated user with workflow creation permissions to execute code in the workflow service container and access or modify other tenants' data in affected deployments.
- Affected versions:
<= v1.1.1, when using the legacy unsandboxedlocalcode executor. Single-tenant deployments are also affected by the code-execution risk. - Patched version:
v1.1.2. - Related advisory: GHSA-mh3w-4q3f-2fg5. The security advisory is now public. A CVE identifier has been requested from GitHub and is awaiting assignment.
The release includes the executor migration in #1650, integrated into
mainthrough #1651, together with the preceding security hardening:- Reject unsafe local code execution and use the built-in isolated LangChain/Pyodide executor by default; E2B remains optional.
- Migrate untouched legacy executor configuration while preserving explicit process-level overrides, including intentional disabling of code nodes.
- Strengthen authentication on internal Workflow and Tenant service APIs, tenant checks, credential handling, and deployment isolation.
Additional security fixes
- Prevent server-side request forgery (SSRF) in outbound plugin requests (#1669).
- Harden XSS, artifact and sandbox boundaries, and scope CSRF exclusions (#1643).
Upgrade Notes
- Back up your databases, persistent data, and deployment configuration before upgrading.
- Update the deployment files and service images together. Use the Compose, service configuration, and gateway configuration shipped with this release, merging your site-specific settings. Updating only the source checkout or only the workflow image does not apply the complete fix.
- For Docker Compose deployments, set
ASTRON_AGENT_VERSION=v1.1.2indocker/astronAgent/.env, pull the updated service images, and recreate the stack. Then verify service health and workflow code-node execution. Automated vulnerability scanners may not flag this application-level issue; operators should verify the deployed image versions explicitly. - Review custom code-executor overrides.
CODE_EXEC_TYPE=localis no longer supported; use the default isolated executor or a supported remote executor. Code that depends on host filesystem, environment, subprocess, or network access may need adaptation to the isolated runtime.
Container images: The v1.1.2 release workflow successfully built and pushed all eight core service images, Console Hub, and Console Frontend to GHCR with the
v1.1.2tag forlinux/amd64andlinux/arm64. These images correspond to release commit189600dd691e8562bd0b9f7112727b107b8a2e10. Use the explicit release tag for this upgrade; record or pin image digests for reproducibility.See the release's deployment guide and configuration reference for deployment requirements and executor migration details.
Other Changes
- Affected versions:
- statistic-2026-092026-09-01 · 2026-09-01 00:32 UTC
查看更新说明
- payee: "@whyiug"
reward:
CNY RMB: 500
accounts:
-
issue: "#1575" payer: |- @FenjuFu
currency: CNY RMB reward: 500 source: ""
-
- payee: "@whyiug"
reward:
CNY RMB: 500
accounts:
- v1.1.1Astron Agent v1.1.12026-08-07 · 2026-08-07 09:31 UTC
查看更新说明
What's Changed
Based on PRs merged into
mainsincev1.1.0.New Features
- feat(console): Integrate workflow functionality into the Agent (#1487)
- feat(mcp): add Streamable HTTP with SSE fallback (#1552)
Fixes
- fix(knowledge): load platform config from persistent storage (#1558)
- fix(workflow): allow zero LLM temperature (#1562)
- fix(console): include space context in debug SSE requests (#1569)
- fix(console): prevent blank workflow history poisoning (#1579)
- fix(agent): harden CoT parsing and avoid duplicate LLM calls (#1589)
Improvements
- v1.1.0Astron Agent v1.1.02026-07-06 · 2026-07-06 11:31 UTC
查看更新说明
This release expands the standalone Agent into a more capable execution surface: Agents can now use configured Workflows, Link plugins, and Mem0-backed memory directly from the standard Agent experience. It also includes security hardening for tool-debug URLs, CI/test stabilization, and documentation cleanup for the v1.1 line.
Highlights
Agent Capabilities
- Workflow invocation inside Agents. Standard Agents can persist workflow capabilities, expose workflows as runtime tool callbacks, and use them from both chat and debug paths. The implementation includes ownership and space-membership validation, workflow runtime service support, response extraction handling, and test coverage for key runtime branches. (#1487)
- Plugin capability for Standard Agents. The Agent ability page can import Link plugins from the plugin store, persist selected tools, reload them in bot details, and pass them into debug/chat requests for runtime invocation. Official/admin-owned plugins are handled as trusted import sources. (#1448)
- Mem0 Agent memory. Added configurable Mem0 memory support for Agents, including scoped memory settings, improved retrieval, app-level memory isolation, non-blocking memory writes, Chinese memory preservation, and related CI/test fixes. (#1479)
Security and Stability
- Hardened official tool debug URL validation and trusted-owner handling to reduce unsafe redirect/debug invocation risk. (#1453)
- Addressed GitHub code-scanning alert no. 54 for server-side request forgery. (#1459)
- Stabilized Superteam CI and remote test checks, including S3 client integration-test setup and remaining remote test failures. (#1429, #1431, #1432, #1433)
Documentation and Maintenance
- Added the v1.0.9 release-notes PDF to homepage resources. (#1442)
- Cleaned up unrelated documentation/files and ignored local agent instruction files in git. (#1438, #1435)
Upgrade Notes
- To use Agent workflow invocation, deploy the Console/Toolkit changes together so configured workflows can be resolved and executed through the new runtime path.
- Review Agent capability settings after upgrade if you plan to enable plugins, workflow tools, or Mem0 memory for existing Agents.
Change Scope
- 154 files changed: 6,489 insertions and 6,559 deletions.
- Full comparison: https://github.com/iflytek/astron-agent/compare/v1.0.9...v1.1.0
- v1.0.9Astron Agent v1.0.92026-06-18 · 2026-06-18 09:38 UTC
查看更新说明
This release centers on a major overhaul of the standalone Agent (agents created directly in the Console): its chat runtime was rebuilt on Spring AI and gained MCP and Skill capabilities. It also adds team publish approval, an agent workbench redesign, and a round of documentation, examples, and security improvements.
Highlights
Standalone Agent
- Runtime rebuilt on Spring AI. The standalone agent's chat runtime was migrated from a hand-rolled OpenAI-compatible implementation to Spring AI (
spring-ai-openai), usingOpenAiChatModelandToolCallback/ToolCallingManagerfor model calls, streaming, and framework-managed tool execution. Legacy runtime paths were removed. (#1418, #1425) - MCP (Model Context Protocol) support. Standalone agents can now connect external MCP tools by configuring MCP Server URLs on the capability page; the runtime fetches and invokes those tools and lets the model choose them by description. (#1418, #1426)
- Skill module. A new Skill block on the capability page reuses the resource-management importable-skill list (search / multi-select / remove, up to 30). At runtime each skill exposes
read_skill_*(readsSKILL.mdand referenced resources) andrun_skill_*(executes commands in the E2B script sandbox via a newcore/agentendpoint). (#1424, #1427)
Collaboration & Workbench
- Added a team publish approval flow for shared spaces, with OWNER/ADMIN review of workflow/agent publishing. (#1383)
- Redesigned the agent workbench with refined settings and interactions. (#1397)
- Added agent debug conversation history and improved web-search tool orchestration.
Docs, Examples & i18n
- Standardized the VitePress docs site with an i18n layout, edit links, and a contribution guide. (#1406)
- Added a community workflow examples gallery (scaffold, seeds, lint, docs page) and a submission issue template. (#1407, #1408)
- Supplemented the FAQ with community-sourced Q&A (#1413) and refreshed MiniMax M-series model examples (#1373).
Security & Stability
- Hardened code-scanning security checks. (#1398, #1402)
- Tightened agent tool-calling boundaries and stabilized order-dependent toolkit tests. (#1403)
Upgrade Notes
- Standalone agent model selection: the two built-in default Spark models were removed from agent creation — choose a model explicitly (e.g., one configured in Model Management).
- Database migration: Flyway
V1.38adds thechat_bot_base.skillscolumn and runs automatically on startup. - Skill execution (
run_skill): requires an E2B script sandbox configured in resource management. The Console backend reachescore/agentvia theAGENT_URLenv (defaults tohttp://core-agent:${CORE_AGENT_PORT}in Docker).read_skillworks without a sandbox.
Change Scope
- 248 files changed: 18,358 insertions and 6,136 deletions.
- Full comparison: https://github.com/iflytek/astron-agent/compare/v1.0.8...v1.0.9
- Runtime rebuilt on Spring AI. The standalone agent's chat runtime was migrated from a hand-rolled OpenAI-compatible implementation to Spring AI (
用户点评
登录用户的真实使用记录,可按版本和硬件筛选还没有人点评。第一个说出真实体验的人最有价值。
🔭 What is Astron Agent
Astron Agent is an enterprise-grade, commercial-friendly Agentic Workflow development platform that integrates AI workflow orchestration, model management, AI and MCP tool integration, RPA automation, and team collaboration features. The platform supports high-availability deployment, enabling organizations to rapidly build scalable, production-ready intelligent agent applications and establish their AI foundation for the future.
Why Choose Astron Agent?
- Stable and Reliable: Built on the same core technology as the iFLYTEK Astron Agent Platform, providing enterprise-grade reliability with a fully available high-availability version open source.
- Cross-System Integration: Natively integrates intelligent RPA, efficiently connecting internal and external enterprise systems, enabling seamless interaction between Agents and enterprise systems.
- Enterprise-Grade Open Ecosystem: Deeply compatible with various industry models and tools, supporting custom extensions and flexibly adapting to diverse enterprise scenarios.
- Business-Friendly: Released under the Apache 2.0 License, with no commercial restrictions, allowing free commercial use.
Key Features
- Enterprise-Grade High Availability: Full-stack capabilities for development, building, optimization, and management. Supports one-click deployment with strong reliability.
- Intelligent RPA Integration: Enables cross-system process automation, empowering Agents with controllable execution to achieve a complete loop “from decision to action.”
- Ready-to-Use Tool Ecosystem: Integrates massive AI capabilities and tools from the iFLYTEK Open Platform, validated by millions of developers, supporting plug-and-play integration without extra development.
- Flexible Large Model Support: Offers diverse access methods, from rapid API-based model access and validation to one-click deployment of enterprise-level MaaS (Model as a Service) on-premises clusters, meeting needs of all scales.
🤝 Adopters
📰 News
🔄 Ongoing
📅 Past
- Astron Hackathon @ 2025 iFLYTEK Global 1024 Developer Festival 🎤 @mklong
- Astron Agent Zhengzhou Meetup 🎤 @lyj715824 @wowo-zZ
- Astron on Campus @ Zhejiang University of Finance and Economics 🎤 @lyj715824
- Astron Agent & RPA · Qingdao Meetup Brings Agentic AI! 🎤 @vsxd @doctorbruce @MaxwellJean
- Astron Training Camp · Cohort #1 🎤 @lyj715824 @Thomas1024-Astron @abelzha
- Astron Talk @ Chongqing Mini Tech Fest 🎤 @lyj715824
- Astron Agent @ MWC Barcelona 2026
- Astron Agent & RPA · Hefei Meetup 🎤 @lyj715824 @doctorbruce
- Astron Industrial Intelligence Hackathon 🎤 @lyj715824 @horizon220222
🚀 Quick Start
We offer two deployment methods to meet different scenarios:
Option 1: Docker Compose (Recommended for Quick Start)
# Clone the repository
git clone https://github.com/iflytek/astron-agent.git
# Navigate to the Docker deployment directory
cd docker/astronAgent
# Copy environment configuration
cp .env.example .env
# Configure environment variables
vim .env
For environment variable configuration, please refer to the documentation:DEPLOYMENT_GUIDE_WITH_AUTH.md
# Complete the required private initialization/password migration first:
# docs/CASDOOR_PASSWORD_STORAGE.md
# Then start all services; the authentication gateway requires a passing check.
docker compose -f docker-compose-with-auth.yaml up -d
📊 Service Access Addresses
After startup, you can access the services at the following addresses:
Authentication Service
- Casdoor Admin Interface: http://localhost:8000
AstronAgent
- Application Frontend (nginx proxy): http://localhost/
Note
- Default Casdoor login credentials: username:
admin, password:123
Option 2: Helm (For Kubernetes Environments)
🚧 Note: Helm charts are currently under development. Stay tuned for updates!
# Coming soon
# helm repo add astron-agent https://iflytek.github.io/astron-agent
# helm install astron-agent astron-agent/astron-agent
📖 For complete deployment instructions and configuration details, see Deployment Guide
📖 Using Astron Cloud
Try Astron:Astron Cloud provides a ready-to-use environment for creating and managing Agents. Get quick access at https://agent.xfyun.cn.
Using Guide:For detailed usage instructions, please refer to Quick Start Guide.
📚 Documentation
- 🔌 Integration Guide — call published workflows from an existing project via HTTP/SSE
- 🚀 Deployment Guide
- 🔧 Configuration
- 🚀 Quick Start
- 📘 Development Guide
- 📖 Tutorial
- 💡 Best Practices
- 📱 Use Cases
- ❓ FAQ
- 🌐 Open Source Workflows
🤝 Contributing
We welcome contributions of all kinds! Please see our Contributing Guide
🌟 Star History
📞 Support
- 💬 Community Discussion: GitHub Discussions
- 🐛 Bug Reports: Issues
- 👥 WeChat Work Group:
🌐 Related Projects
Astron Agent is part of the iFlytek Astron open-source ecosystem. These sibling projects work well alongside it:
- SkillHub — Self-hosted, open-source agent skill registry. Publish, version, and govern skill packages, then load and run them from Astron Agent for a managed skill lifecycle from development to production.
- AstronRPA — Agent-ready RPA suite with out-of-the-box automation tools. Call RPA workflow nodes directly inside Astron Agent to combine intelligent agents with robotic process automation.
📄 Open Source License
This project is licensed under the Apache 2.0 License, allowing free use, modification, distribution, and commercial use without any restrictions.
