Website profiles · Technology insights · Alternatives

hexabot.ai

Self-hostable AI workflow automation. Build AI agents and workflows that talk, act, and remember across channels, with MCP tools, memory, and data control.

Paid content
Visit website
Profile views 0 Outbound visits 0 Normal
Hexabot Full homepage screenshot

At a glance

Category
Productivity
Language
English
Paid-content signal
Paid contentObserved
Registered
2024
Hosting
Amazon.com, Inc.Inferred
HTTPS certificate trusted
PassedObserved
Last updated

Website review

This review may include AI-generated content and is not individually verified. Domain, certificate and other facts come from the observed data on this page.

What is Hexabot?

Hexabot is a self-hostable platform for building AI agents and workflow automation. You define flows that combine conversations with real actions—calling models, tools, APIs, and back-office systems—and run them on infrastructure your team controls, keeping production data in-house. Flows can be built visually as a graph or written as portable YAML with typed contracts and schema validation, which suits teams that want version control alongside a visual editor.

Its main pieces:

  • Channels: trigger workflows from chat, forms, schedules, or events, and serve multilingual assistants across web, messaging, social, and custom channels.
  • Actions and bindings: reusable steps with explicit input, output, and settings contracts for LLM calls and external systems.
  • Memory, RAG, and MCP: managed conversation memory, retrieval-augmented context, and MCP integration points for sanctioned tools.
  • Human review: conditionals, loops, segmentation, inbox workflows, and live handoff when automation needs a person.
  • Operations: roles, analytics, and team controls for running assistants in production.

Getting started is CLI-based: install the Hexabot CLI, scaffold a project from the starter template, and run the local stack to build workflows before deploying. The site cites Orange as a customer running multilingual service automation across website and social channels, routing complex cases to humans.

Who it fits

Teams that need customer-facing automation but cannot send data to a hosted SaaS—regulated industries, or organizations with existing infrastructure and engineering capacity—are the clearest fit. The trade-off is operational: self-hosting means you own deployment, upgrades, and uptime. If you want a zero-maintenance hosted bot builder, this is more machinery than you need.

A practical first step: scaffold the starter project locally and rebuild one real workflow you already run manually, such as routing support requests by language and intent. If the graph/YAML split and handoff model feel natural in that exercise, evaluate plans on Hexabot's pricing page against your expected users and workflow volume.

How do I set up and run Hexabot locally using the CLI?

Install the official Hexabot CLI globally with npm, scaffold a project from the starter template, then run the local stack.

npm install -g @hexabot-ai/cli
hexabot create my-project
cd my-project
hexabot dev

The create step generates a complete automation workspace from the starter template, so you get a working project structure for defining workflows, connecting channels, and extending the runtime with actions and tools. hexabot dev then starts the local Hexabot stack for development.

What to do once it's running

  • Open the project workspace and confirm the local stack started without errors before adding anything custom.
  • Define a first workflow and connect a channel, then wire in an action or tool call so you can see an end-to-end conversation trigger real work.
  • Work in YAML if you want version control and schema validation; switch to the visual graph when flow logic gets complex.

Practical notes

  • You'll need Node.js and npm installed first, since the CLI is distributed as an npm package.
  • The project directory is your workspace—treat it as a normal code repository so workflow changes are reviewable and portable.
  • For setup details beyond the four commands, the documentation at Hexabot is the right next stop.

A sensible first milestone: get one workflow answering a chat message and calling a single tool, then expand to memory, RAG, or human handoff once that loop is stable.

How does Hexabot keep my production data under my control compared to cloud-hosted AI workflow tools?

The core difference is where the runtime and its data live. Hexabot is designed to be self-hosted: you scaffold a project with the Hexabot CLI, run the local stack, and operate the workflow runtime yourself. Conversations, memory, retrieval context, and the tool calls your workflows make stay in infrastructure your team controls, rather than passing through a vendor's hosted platform. Cloud-hosted tools, by contrast, typically run workflows and store conversation history on the provider's servers, so your control is mostly limited to configuration, access rules, and whatever data-processing terms the vendor offers.

What "under your control" means in practice

  • Hosting location: Self-hosting means the database, memory store, and workflow execution sit on your servers or your chosen cloud account, subject to your own backup, retention, and network policies.
  • Data in memory and RAG: Hexabot workflows use managed memory and retrieval-augmented context. When self-hosted, that stored context lives in your environment, so retention limits and deletion are your decision.
  • Tool and MCP access: Workflows connect to models, APIs, and MCP integration points. Self-hosting lets you restrict outbound calls to sanctioned tools and keep credentials inside your perimeter.
  • Governance features: Roles, analytics, and team controls are part of the runtime, which you administer rather than a vendor console.

Where cloud-hosted tools still have an edge

Self-hosting shifts operational burden to you: patching, scaling, monitoring, and securing the stack become your responsibility. Cloud-hosted platforms often provide managed uptime, elastic scaling, and less setup work. If your team lacks infrastructure capacity or your data is not sensitive, a hosted tool may be the simpler choice. If you handle regulated, customer, or proprietary data and need to keep it inside your own environment, Hexabot's self-hosted model is the closer fit.

A concrete scenario

A support team handling multilingual customer conversations on web and social channels could self-host Hexabot, keep conversation memory and knowledge retrieval in its own database, and route sensitive cases through human review points and live handoff. The trade-off is that the team must own deployment and security. For a starting point, compare Hexabot's approach with a managed option such as n8n to see how self-hosted and cloud-hosted models differ on the same workflow.

Decision criterion: choose self-hosting when data residency, retention, and tool access must follow your own policies and you can staff the operations; choose a hosted tool when speed of setup and managed reliability outweigh direct control of the runtime.

When should I use visual graph editing versus YAML for building Hexabot workflows?

Use the visual graph editor when you are designing or explaining a flow; use YAML when the flow needs to be reviewed, versioned or deployed as code. Hexabot supports both and describes YAML as portable, with typed contracts, schema validation and project-friendly version control, so the choice is mostly about who edits the workflow and how it reaches production.

Visual graph editing fits

  • Early design and stakeholder review: non-engineers, product owners or clients can follow branches, loops and handoff points on a canvas.
  • Fast iteration on conversation structure: trying a different routing path or adding a human-review step is easier when you can see the whole flow.
  • Debugging a live conversation: tracing where a message went is quicker when the graph mirrors the runtime.
  • Onboarding: a new team member understands a drawn flow faster than a long YAML file.

YAML fits

  • Code review: diffs show exactly what changed, which matters when several people edit one workflow.
  • Version control and promotion: the same file moves from staging to production with a reviewable history.
  • Repeated patterns: templated flows, shared contracts between actions and bindings, and schema validation catch mistakes before deploy.
  • Automation: generating or checking flows in CI rather than clicking through a UI.
Situation Better choice Main trade-off
Flow still being shaped, mixed audience Visual graph Harder to review line by line
Flow is stable and shared YAML Less readable for non-engineers
Many similar workflows YAML with templates Up-front setup effort
Quick one-off internal bot Visual graph Drift if never exported

A practical next step

Pick the format by the flow's expected lifetime, not by personal preference. For a customer-facing assistant like the multilingual website and social channel work described in Hexabot's Orange case, start in the graph with the team, then treat the YAML as the source of truth once the flow stabilises. If you want to compare this approach with other self-hostable automation platforms, look at n8n for its node-based editor and Langflow for LLM-oriented flow building.

How does Hexabot integrate MCP tools, memory, and RAG into an agent workflow?

Hexabot treats MCP tools, memory and RAG as parts of the same workflow runtime rather than separate add-ons. In its own description, a workflow can trigger from chat, forms, schedules or events, then call models, tools, APIs and back-office systems, with managed memory and retrieval-augmented context available to the agent along the way. MCP is presented as the integration point for "sanctioned tools" — a way to expose approved external capabilities to the agent instead of hard-coding each one.

How the pieces fit together

  • MCP tools are connected as capability bindings with defined input, output and settings contracts. In practice, a step that needs to look up an order or create a ticket calls an MCP-exposed tool, and the workflow knows what to send and what to expect back.
  • Memory is described as managed by the platform, so an agent can carry context across turns and channels without your team building a separate store.
  • RAG supplies retrieved context at the point the model is called, which suits assistants that must answer from your own documentation or knowledge base rather than general model knowledge.
  • Human review points — conditionals, loops, inbox workflows and live handoff — sit alongside these, so a retrieval miss or a sensitive tool call can be routed to a person.

A concrete scenario

A customer asks about a delayed delivery on a messaging channel. The workflow retrieves the relevant shipping policy via RAG, pulls the order status through an MCP tool, keeps the customer's earlier messages in memory, and hands off to an agent if the answer is ambiguous. The same flow can run on web and social channels with multilingual output.

Decision criteria

Choose this pattern when data control and self-hosting matter — Hexabot's setup runs locally via its CLI and starter template, and the runtime stays under your team's control. If you mainly need a hosted chatbot with minimal ops, the self-hosted model adds setup and maintenance work you should weigh first.

Next step: scaffold a local project with the CLI, then model one narrow workflow — a single RAG lookup plus one MCP tool call — before adding memory and handoff. For background on the protocol itself, see Model Context Protocol.

Which Hexabot pricing plan fits my team's usage as users and workflows grow?

Choose based on two growth signals rather than a fixed team size: how many people need access, and how many workflows you actually run in production. Hexabot's pricing page frames its plans around "operational usage," starting free and moving up as users, workflows, and license activations become production concerns. The plan names (Starter, Pro, Unlimited) suggest a ladder from a small pilot to broader rollout, but the page evidence doesn't give seat counts, workflow limits, or prices, so confirm those on Hexabot's pricing page before committing.

A practical way to decide

  • Start free while you are prototyping one or two workflows with a small group. This matches the self-hosted local setup described on the site: scaffold a project with the CLI, run the local stack, and test conversations, actions, and memory.
  • Move to Starter when a workflow goes live for real users and you need a stable runtime and license activation, but the audience and team are still narrow.
  • Move to Pro when several people build and maintain workflows, or when you run multiple channels (web, messaging, social) and need roles, analytics, and handoff. The Orange case—multilingual service automation across website and social channels with routing of complex cases—is the kind of scope where a mid-tier plan typically fits.
  • Consider Unlimited only if seats or workflow count are the binding constraint and per-unit limits would otherwise force constant re-planning.

Concrete scenario

A five-person support team launches one website assistant and later adds WhatsApp and a second language. They can likely stay on a lower tier during the pilot, then step up when the second channel and more builders join—because that is when user and workflow counts, not features, drive the cost.

Decision criteria

Ask three questions: How many people will edit workflows (not just use the bot)? How many production workflows will run at once? Do you need multi-channel delivery and team controls now or later? If the answer to the last is "later," stay low and upgrade when the first live workflow proves value. Check current limits and prices on the official pricing page, since the plan boundaries are what determine the right fit.

Related questions

More questions →
What Features Does Hexabot Provide for AI Workflow Automation?

Hexabot is a self-hostable AI workflow automation platform for teams that need to build agents and business automations while keeping production data under their own control. Its feature set covers the full path from trigger to action: workflows can start from chat, forms, schedules, or events; call models, tools, APIs, and back-office systems; and pause for human judgment when automation isn't enough. The features below are the ones to evaluate if you're deciding whether Hexabot fits your operational use case.

How workflows are triggered and what they can call

Hexabot workflows are not limited to conversational input. A workflow can be started by:

  • A chat message
  • A form submission
  • A schedule
  • An event

Once running, a workflow can call language models, tools, APIs, and back-office systems. This makes the platform suited to service operations where a conversation needs to produce a real action — a lookup, a ticket, a routed request — rather than just a reply.

How flows are modeled and validated

Hexabot supports two ways to define a flow:

Approach What it gives you
Visual graph Model flows visually for team review and editing
Portable YAML Keep flows in version control alongside the project

Both are backed by typed contracts and schema validation, so the shape of inputs and outputs is defined rather than implied. For teams that treat workflows as code, the YAML option is the relevant one; for teams that need non-engineers to inspect a flow, the graph view matters more.

Reusable actions and capability bindings

Workflows are assembled from reusable actions, LLM calls, and capability bindings. Each has a clear contract for inputs, outputs, and settings. The practical effect is that an action built once — say, a call to an internal system — can be reused across workflows without redefining its interface each time. When evaluating the platform, check whether your existing systems can be expressed as actions with clean input/output contracts; that is where most integration effort goes.

Memory, RAG, and MCP integration

Hexabot gives workflows managed memory, retrieval-augmented context, and MCP integration points for sanctioned tools. In practice:

  • Memory lets a workflow retain context across interactions rather than treating each turn as isolated.
  • RAG supplies retrieved context to model calls, so answers can draw on your knowledge rather than only the model's training.
  • MCP provides a defined integration point for tools you have approved, rather than ad hoc connections.

If your automation depends on remembering prior interactions or grounding responses in internal documents, these are the features to test first.

Human review and control flow

Automation rarely covers every case. Hexabot includes:

  • Conditionals and loops for branching logic
  • Segmentation for dividing audiences or cases
  • Inbox workflows for queued human handling
  • Live handoff when a conversation needs a person

This is the part to scrutinize if your use case involves complex or sensitive requests. The Orange success story on the site describes exactly this pattern: handling frequent requests automatically while routing complex cases and keeping the customer experience consistent across website and social channels.

Multichannel delivery and team operations

Hexabot runs multilingual assistants across web, messaging, social, and custom channels, with roles and analytics for team control. That means the same workflow runtime can serve different channels, and access can be governed by role rather than shared credentials.

Self-hosting and getting started

The platform is self-hosted, which is the basis for the data-control claim: you run the runtime and keep production data under your control. The documented local path is:

  1. Install the CLI: npm install -g @hexabot-ai/cli
  2. Create a project: hexabot create my-project
  3. Enter the workspace: cd my-project
  4. Run the local stack: hexabot dev

The starter template produces a working automation workspace where you can define workflows, connect channels, and extend the runtime with actions and tools.

Choosing based on your situation

Hexabot is a reasonable fit if you need self-hosted operation, workflows that both converse and act, and a mix of visual and version-controlled flow definitions. It is less obviously the right choice if you only need a simple chatbot without actions or memory, or if you cannot run and maintain your own stack.

Pricing is tiered — the site lists Starter, Pro, and Unlimited plans and describes starting free before upgrading as users, workflows, and license activations become production signals. Check the pricing page for current terms rather than assuming any tier's limits.

Hexabot Plans: How to Choose Between Starter, Pro, and Unlimited

Hexabot offers three paid plans — Starter, Pro, and Unlimited — and you can start free before upgrading. The right tier depends on your operational usage: how many users you bring on, how many workflows you run, and how many license activations you need in production. Hexabot's own pricing page frames the decision this way rather than around fixed feature lists, so the practical approach is to begin on the free tier, watch those three signals grow, and upgrade when one of them becomes a constraint.

The Plans at a Glance

Plan Best suited for What drives the upgrade
Free (start here) Evaluating the platform, building and testing workflows locally Hitting limits on users, workflows, or activations
Starter Early production use with a small team First real users and live workflows
Pro Growing operations with more workflows and team members More users, more workflows, more activations
Unlimited Full-scale deployment without plan ceilings Usage that would otherwise keep pushing you up tiers

The site lists Starter, Pro, and Unlimited as the paid tiers and provides a "Buy" checkout link for each. It does not publish per-plan prices, user caps, or workflow limits in the page content available, so confirm exact numbers on the pricing page before committing.

How to Decide

1. Start free and measure real usage

Hexabot's guidance is explicit: start free, then upgrade as users, workflows, and license activations become production signals. Don't guess your tier from a feature checklist — build your first workflow, connect a channel, and see what your actual footprint looks like.

2. Identify your binding constraint

Ask which of the three signals will hit a limit first:

  • Users — if your team or client base is growing, you'll likely move up on seats.
  • Workflows — if you're automating many separate processes (support triage, lead routing, internal ops), workflow count becomes the driver.
  • License activations — if you're deploying across multiple environments or instances, activations matter most.

Whichever runs out first tells you which tier to buy.

3. Match the tier to the stage, not the feature list

  • Starter fits a first production deployment: a small set of workflows serving real users.
  • Pro fits an expanding operation where both workflow count and team size are climbing.
  • Unlimited fits deployments where you'd otherwise keep bumping ceilings — multi-channel, multi-team, or multi-instance setups.

Where to View Pricing and Buy

  • Pricing overview: https://hexabot.ai/pricing
  • Purchase links are provided per tier on the site: "Buy Starter," "Buy Pro," and "Buy Unlimited," each leading to a license checkout.

Because Hexabot is self-hostable, your plan governs licensing and usage rather than hosting — you run the runtime yourself, which is why activations are a meaningful signal.

A Practical Path

  1. Install the CLI and scaffold a project: npm install -g @hexabot-ai/cli, then hexabot create my-project, cd my-project, hexabot dev.
  2. Build one customer-facing workflow and connect a channel.
  3. Track users, workflows, and activations as you add real traffic.
  4. When one signal nears its limit, check the pricing page and buy the next tier up.

This keeps you on the cheapest plan that actually fits, and avoids paying for capacity you haven't reached yet.

Common Pitfalls

  • Buying before measuring. The free start exists precisely so you can size your usage first.
  • Assuming features differ by tier. The site steers plan choice by operational usage, not feature gating — verify any specific capability you depend on before upgrading.
  • Ignoring activations. For self-hosted deployments across environments, activation count can be the real ceiling, not users or workflows.

For the underlying platform capabilities — graph/YAML workflows, memory and RAG, MCP tools, human handoff, and multichannel delivery — see the features page; those apply across the runtime regardless of which plan you land on.

How Do I Start Building Workflows Locally with Hexabot?

Install the official Hexabot CLI, scaffold a project from the starter template, then run the local stack — four commands get you from nothing to a running self-hosted workspace. You need Node.js with npm available on your machine, since the CLI is distributed as an npm package. The result is a complete automation workspace where you can define workflows, connect channels, and extend the runtime with actions and tools.

Prerequisites

  • Node.js and npm installed and on your PATH (the CLI is installed globally via npm).
  • A terminal in the directory where you want the project created.
  • No cloud account is required for the local steps below — the starter template sets up a self-hostable project on your own machine.

Step-by-Step Setup

1. Install the Hexabot CLI

npm install -g @hexabot-ai/cli

This installs the hexabot command globally. Expected result: running hexabot in a terminal shows the CLI's available commands.

2. Create a project from the starter template

hexabot create my-project

Replace my-project with your preferred name. The starter template generates a complete automation workspace rather than an empty skeleton — it includes the structure for defining workflows, connecting channels, and extending the runtime with actions and tools.

3. Move into the project workspace

cd my-project

4. Run the local Hexabot stack

hexabot dev

This starts the local development stack. Expected result: the stack comes up locally and you can begin building and testing workflows against it.

What the Starter Template Gives You

The scaffolded project is the foundation for everything Hexabot does at runtime:

Capability What it means for your local build
Workflow definition Model flows visually or as portable YAML with typed contracts and schema validation
Channels Connect web, messaging, social, and custom channels
Actions and bindings Wire reusable actions, LLM calls, and external systems with defined input/output contracts
Memory, RAG, and MCP Add managed memory, retrieval-augmented context, and MCP integration points
Human review Use conditionals, loops, segmentation, inbox workflows, and live handoff
Service operations Run multilingual assistants with roles, analytics, and team control

Because flows can be expressed as YAML with typed contracts and schema validation, the project works well with version control — you can review and diff workflow changes like any other code.

Verifying It Works

After hexabot dev starts, confirm the stack is running locally before investing time in workflow design. Then build a minimal flow — for example, a chat-triggered workflow that calls a model or an API — and test it in the local environment. If the stack starts but a workflow fails, the problem is in the flow definition or a binding contract, not the installation.

Common Sticking Points

  • hexabot command not found after install: the global npm bin directory isn't on your PATH. Check your npm prefix and shell configuration.
  • Wrong directory: hexabot create must run where you want the project folder to appear; cd into the new folder before hexabot dev.
  • Port conflicts on the local stack: if another service occupies a required port, the stack may fail to start — stop the conflicting service or adjust the configuration.
  • Skipping the starter template: starting from an empty project means you lose the pre-wired structure for workflows, channels, and actions that the template provides.

When to Move Beyond Local

The local stack is for building and testing. When you're ready for production, Hexabot is designed to be self-hosted so your production data stays under your control. Pricing is tiered by operational usage — the site lists Starter, Pro, and Unlimited plans and notes that you start free and upgrade as users, workflows, and license activations become production signals. Check the pricing page for current terms before committing to a plan.

What Is Hexabot and What Is It Used For?

Hexabot is a self-hostable AI workflow automation platform for building AI agents and agentic workflows that can talk, act, and remember across channels. You use it when you want conversational automation connected to real actions and back-office systems, while keeping production data under your own control. It fits teams that need multichannel service delivery with human review points, and that are prepared to run and extend the runtime themselves.

What Hexabot actually does

Hexabot combines several capabilities in one runtime:

  • Conversations that do work. Workflows can be triggered from chat, forms, schedules, or events, then call models, tools, APIs, and back-office systems.
  • Graph and YAML control. You can model flows visually or as portable YAML with typed contracts, schema validation, and version control.
  • Actions and bindings. Reusable actions, LLM calls, capability bindings, and external systems connect through clear input, output, and settings contracts.
  • Memory, RAG, and MCP. Workflows get managed memory, retrieval-augmented context, and MCP integration points for sanctioned tools.
  • Human review points. Conditionals, loops, segmentation, inbox workflows, and live handoff cover cases where automation needs human judgment.
  • Service operations. Multilingual assistants run across web, messaging, social, and custom channels, with roles, analytics, and team control.

Who it is for

Hexabot suits teams building customer-facing or internal automation where the conversation must lead to an action — routing a request, calling a system, or handing off to a person. The published Orange success story describes multilingual service automation across website and social channels, handling frequent requests, routing complex cases, and keeping the customer experience consistent. That pattern — high-volume routine requests plus escalation — is a reasonable signal of the intended use.

It is less suitable if you want a fully managed SaaS with no operational involvement, since self-hosting is the core premise.

How you start

The documented path is a CLI-based local setup:

  1. Install the official CLI: npm install -g @hexabot-ai/cli
  2. Create a project from the starter template: hexabot create my-project
  3. Move into the workspace: cd my-project
  4. Run the local stack: hexabot dev

The starter template produces a complete automation workspace where you define workflows, connect channels, and extend the runtime with actions and tools. Expect to need a local environment capable of running the stack; the documentation is the place to confirm prerequisites before installing.

Pricing and licensing

The site presents plans named Starter, Pro, and Unlimited, each with a purchase link, and states you can start free and upgrade as users, workflows, and license activations become production signals. Specific prices, limits, and what each tier includes are not stated in the available material, so check the pricing page directly before committing.

Decision guide

If your priority is… Hexabot is a reasonable fit when…
Data control You need the workflow runtime and production data on infrastructure you control
Multichannel service You need web, messaging, social, and custom channels in one runtime
Mixed automation and people You need inbox workflows and live handoff alongside automated steps
Tool integration You want MCP integration points and typed action contracts
Zero ops You would rather not run and extend the platform yourself

The practical next step is to scaffold the local project, build one narrow workflow end to end, and confirm the channel and tool integrations you need before evaluating plans.

How Self-Hosting Hexabot Keeps AI Workflow Data Under Your Control

Hexabot keeps AI workflow data under your control because the workflow runtime runs in your own environment rather than on a vendor-hosted service. You self-host the platform, so the conversations, memory, knowledge, and tool calls that your agents process stay inside infrastructure you operate. This fits teams that need to connect chat and messaging channels to internal systems but cannot send production data to a third-party runtime. The trade-off is that you take on deployment, upgrades, and operational responsibility yourself.

What "self-hosted" means for your data

The core idea is that Hexabot is a runtime you install and run, not a SaaS dashboard you log into. The site describes it as a "Self-Hosted AI Workflow Automation Platform" and states that you can "self-host Hexabot, connect every channel, orchestrate tools and actions, use memory and knowledge, and keep your production data under your control."

In practice, that means:

  • Workflow execution happens in your environment. The agents, flows, and tool calls run on infrastructure you provision.
  • Memory and knowledge stay with the runtime. Managed memory and retrieval-augmented context are part of the runtime you host, not a separate vendor store.
  • Channel connections are yours to configure. Web, messaging, social, and custom channels connect to your instance.
  • You control the surrounding systems. Actions and bindings call your APIs and back-office systems directly.

The site's framing is "Own Your AI Workflow Runtime," which is the clearest statement of the model: control comes from operating the runtime, not from a data-processing agreement.

Where the data actually lives

A useful way to check whether self-hosting meets your requirements is to map each data type to where it resides:

Data type Where it lives when self-hosted
Conversation and channel messages Your runtime and whatever storage you configure
Workflow definitions (graph or YAML) Your project repository and runtime
Agent memory and RAG context The runtime you host
Tool and API calls (MCP, actions) Between your runtime and the systems you connect
Analytics and team roles Your instance

The site does not publish a detailed data-residency or storage-architecture document in the material available, so confirm specifics like database backends and retention settings against the documentation before committing to a compliance-sensitive deployment.

The mechanisms that support control

Self-hosting alone is not the whole story. Several features are designed to keep automation governed and auditable:

Memory, RAG, and MCP inside the runtime

Hexabot gives workflows "managed memory, retrieval-augmented context, and MCP integration points for sanctioned tools." Because these run inside your instance, the context your agents retrieve and the tools they are allowed to call are defined by your configuration rather than a vendor's defaults. MCP integration points are described as "sanctioned," which suggests an allow-list style of control over which tools workflows can reach.

Human review and handoff

Conditionals, loops, segmentation, inbox workflows, and live handoff let you insert human judgment where automation should not act alone. For data-sensitive operations, this is a control point: a workflow can pause and route to a person before taking an action on production systems.

Roles and team oversight

The platform includes "roles, analytics, and team control" for service operations. That supports operational governance — who can build, edit, and monitor workflows — though the site does not detail the permission model, so verify role granularity in the docs.

Version-controlled workflow definitions

Flows can be modeled visually or as "portable YAML with typed contracts, schema validation, and project-friendly version control." Keeping workflow logic in YAML in your own repository means changes are reviewable and traceable, which matters when workflows touch regulated or sensitive data.

A concrete example

Consider a customer-service team that wants an AI assistant on its website and social channels but must keep customer conversations and internal order data inside its own network.

  1. The team scaffolds a project with the Hexabot CLI and runs the local stack.
  2. They connect web and messaging channels to their instance.
  3. They build a workflow that answers frequent questions using RAG over their own knowledge base, and calls an internal order-status API through an action binding.
  4. They add a conditional so complex or sensitive cases route to a human inbox.
  5. Because the runtime, memory, and API calls all sit in their environment, customer messages and order data never leave infrastructure they control.

The site cites Orange as a success story running "multilingual service automation across website and social channels," handling frequent requests and routing complex cases — a pattern that matches this kind of setup.

What self-hosting does not guarantee

Control over the runtime is not the same as control over every model call. If your workflows call external LLM providers, the prompts and context sent to those models leave your environment. The site does not specify which model providers are supported or whether fully local models are an option, so treat model-call data flow as a separate decision you must verify. Similarly, self-hosting shifts patching, backup, and uptime responsibility to your team.

How to decide

Self-hosting Hexabot is a good fit if:

  • You need conversations, memory, and tool calls to stay in infrastructure you operate.
  • You want workflow logic version-controlled in your own repository.
  • You can staff deployment, upgrades, and monitoring.

It is a weaker fit if you want a fully managed service, or if your compliance requirements extend to model inference and you cannot confirm a local-model path. To evaluate, start with the local stack using the CLI, then test one workflow that touches your most sensitive data and trace where that data flows before scaling to production channels.

Website Overview

Identifiable technologies and additional version or configuration signals make the service easier to fingerprint, which may help targeted scanners narrow their checks. Page metadata, canonical configuration and social previews work together to provide more consistent search and sharing presentation.

Domain and Registration

Transfer-protection status is present, helping reduce the risk of unauthorized domain transfers. The domain has about 2 years of registration history; its current configuration provides more context than age alone. Registration contact information is publicly available through RDAP. The domain uses the common .ai extension, which is not an independent safety signal.

DNS and Email

Nameservers are provided by Amazon Route 53, indicating managed DNS hosting. MX records point to the Google Workspace email service. No CNAME was found; the observed records resolve directly to addresses. SPF and DMARC are configured. DKIM status is unknown. TXT records include verification markers for Google. Such markers may also remain after a service stops being used.

TLS and Certificates

The public key uses EC with 256 bits. The server supplied a complete certificate chain. No organization name is present in the certificate; the available fields are consistent with domain validation. The certificate was issued by Let's Encrypt, commonly associated with automated certificate services. The certificate's total validity is about 89 days, consistent with a short renewal cycle.

HTTP and Browser Security

The Server header exposes the software version: nginx/1.24.0 (Ubuntu). This makes version-targeted checks easier, but is not proof of an exploitable vulnerability. X-Powered-By exposes backend information: Next.js. The checked browser-security headers were not detected, leaving fewer explicit browser-side safeguards. No obvious internal addresses or debug information were found in the headers. No explicit CDN or WAF marker was found in the response headers.

Technology Stack Analysis

The public page identifies Next.js, nginx 1.24.0, with exact versions exposed for 1 technologies. These details can narrow vulnerability checks, although exposure alone is not a vulnerability.

Search and Social Sharing

Twitter Card metadata is configured. The title has 46 characters, within a common display range. A meta description is present, with 155 characters. The observed directives allow indexing and link following. No Generator meta tag is publicly exposed.

Hosting and Email

DNSAmazon Route 53
HostingAmazon.com, Inc.
EmailGoogle Workspace
Approximate IP geolocation (inferred; a CDN or proxy may differ from the origin server) United States flagAshburn, Virginia, United States Inferred 35.175.254.7

Registration details

RDAP / WHOIS

RegistrarOVH SAS
Registered2024-08-07
Expires2032-08-07
Domain statusclient delete prohibited、client transfer prohibited
Nameserversns-1035.awsdns-01.org、ns-1987.awsdns-56.co.uk、ns-444.awsdns-55.com、ns-553.awsdns-05.net
DNSSECunsigned

DNS records

DNS

TypeNameValueTTLPriority
Ahexabot.ai35.175.254.7300—
MXhexabot.aismtp.google.com3001
MXhexabot.aijksfff7gg4oyfeeknmd3lksri6ujhf5cj2wyuzqnlgcgdcfg5aaq.mx-verification.google.com30015
NShexabot.ains-1035.awsdns-01.org172800—
NShexabot.ains-1987.awsdns-56.co.uk172800—
NShexabot.ains-444.awsdns-55.com172800—
NShexabot.ains-553.awsdns-05.net172800—
TXThexabot.aigoogle-site-verification=SqRSl-Y3HYKQimsHtapRR6iTl6JOrYpmDVmEYYim6AE300—
TXThexabot.aiv=spf1 a mx include:_spf.google.com ~all300—
DMARC_dmarc.hexabot.aiv=DMARC1; p=none;300—

TLS and certificates

TLS / SSL

AssessmentNormal configuration
Supported protocolsTLSv1.2、TLSv1.3
Negotiated protocolTLSv1.3
Certificate subjecthexabot.ai
IssuerLet's Encrypt
Valid until2026-12-05T07:44 · Remaining when checked: 48 days
Verification detailsCertificate trust: Passed · Hostname match: Passed

HTTP response headers

HTTP

HeaderValue
content-typetext/html; charset=utf-8
cache-controls-maxage=3600, stale-while-revalidate
servernginx/1.24.0 (Ubuntu)

Identified technologies

Next.jsnginx 1.24.0

Pages, Search and Sharing

Meta descriptionSelf-hostable AI workflow automation. Build AI agents and workflows that talk, act, and remember across channels, with MCP tools, memory, and data control.
Canonical URLhttps://hexabot.ai
LanguageEnglish (default)
Twitter Cardsummary_large_image
All bots 1 allowed · 8 disallowed
  • Allow/
  • Disallow/account
  • Disallow/account/edit
  • Disallow/extensions/submit
  • Disallow/reset_password
  • Disallow/reset_password/*
  • Disallow/signin
  • Disallow/signin/*
  • Disallow/signup

User reviews (0)

  • No reviews yet.