Foxel

DrizzleTime/Foxel is ranked 5,858 among these 8 peers; mittagessen/kraken is ranked 5,860.

Baidu Netdisk uses OAuth with , , and a matching . Powered by configurable embedding providers and vector databases (Milvus, Qdrant). **Custom Roles**: Create tailored roles with fine-grained system and adapter permissions. **Path-based Rules**: Define read / write / delete / share permissions per path, with support for **wildcards**, **regex patterns**, and **priority-based rule ordering**. **Audit Logging**: Every user action is recorded with full traceability (user, IP, method, status, duration). 🔗 Sharing Generate public or password-protected share links with configurable expiration dates. Recipients

can browse shared files and folders without logging in. 🧩 Plugin System Extend Foxel's capabilities through a manifest-based plugin architecture. Load React frontend components and custom backend routes at runtime, without modifying the core codebase. MCP and Agent boundaries The MCP endpoint is . External clients authenticate with a Foxel Bearer Token and own their confirmation UI; the server always enforces the authenticated user's path permissions. Set to the public Foxel URL (for example, ) to allow its Host and Origin headers

through MCP transport validation. External MCP clients can access file-system and processor tools. and are available only to the built-in AI agent and are not exposed through MCP. Directory listing, metadata, text reads, search, and processor listing can run directly. In the built-in agent, and also run without approval. supports GET/POST/PUT/PATCH/DELETE/HEAD/OPTIONS, including external write requests, without an additional Foxel approval step. Agent writes, creates, deletes, moves, copies, renames, and calls create

database-backed approval batches. Approval requests must include the returned ; execution uses the server-stored arguments, rejects expired or cross-user requests, and does not re-execute repeated confirmations. Recursive changes and directory processing validate all enumerated children before starting. Any denied or unverifiable path rejects the batch; queued work rechecks permissions and stops after a scope change. Tools return structured error codes such as , , , , , and without exposing internal exceptions or credentials. Agent conversations currently support OpenAI, Anthropic, and Ollama

interfaces, with at most eight tool-call rounds per request. Processor task IDs can be tracked in the task queue. 14+, FastAPI, Tortoise ORM, SQLite | | **Frontend** | React 19, TypeScript, Vite, Ant Design | | **Auth** | JWT (OAuth2), bcrypt | | **Vector DB** | Milvus Lite / Server, Qdrant | | **Deployment** | Docker, Gunicorn + Uvicorn | | **Package Managers** | uv (Python), Bun (JS) | 🚀 Quick Start Using Docker Compose is the most recommended way to start Foxel. Create Data Directories Create a folder for persistent data: 2. Download Docker Compose File After

downloading, it is **strongly recommended** to modify the environment variables in the file to ensure security: Modify and : Replace the default keys with randomly generated strong keys. Access the Application Once the services are running, open the page in your browser. On the first launch, please follow the setup guide to initialize the administrator account. 🤝 How to Contribute We welcome contributions from the community! Whether it's submitting bugs, suggesting new features, or contributing code directly. Before you start, please read

our file, which explains the development environment and submission process. A Simplified Chinese translation is available in . 🌐 Community Join our