Pando

Deploy and share apps

trypando.ai · Quickstart · Docs · Sponsor

trim.D2513CF6-A6F7-4E21-B4CF-08359FF82FDF.MOV

---

What is Pando?

Pando is an open-source, self-hosted platform for running the apps your team builds, including ones written with AI. Point it at a git repo or image and it builds the app, scans it for vulnerabilities, runs it on its own isolated network, and puts it behind your company's SSO, shared only with the people who need it.

Built for IT and platform teams who want employees to deploy internal tools without those tools living on laptops or personal cloud accounts. Also works on a home server.

Status: alpha. Expect breaking changes; see the CHANGELOG before upgrading. Needs Docker and Docker Compose. Quickstart →

Get started

Install Pando with the quickstart.

Documentation

On trypando.ai/docs:

• API, CLI and MCP server
• Errors and Events
• Adapters and Configuration

In this repository:

• docs/identity-providers.md: connecting Okta, Microsoft Entra ID, Google Workspace, Keycloak, Authentik or another provider, and SCIM.
• docs/rootless.md: running Pando on rootless Docker or Podman on Linux.
• docs/reference.md: running on several hosts or on Kubernetes, host policy at startup, and what an app receives from Pando.
• CHANGELOG.md: what changed in each release, and whether you need to act.

Reporting a problem

• A bug, or something that doesn't work as documented: open an issue.
• A security vulnerability: privately, through the advisory form, not as an issue. See SECURITY.md for what to include and what response to expect.
• A question: Discussions.

Contributing

Bug reports and pull requests are welcome. See CONTRIBUTING.md for how the project is organized, how to build it, and what a change needs before it can be merged. CODE_OF_CONDUCT.md applies everywhere the project happens.

License

AGPL-3.0, with a commercial license available for embedding Pando in a proprietary product or offering it as a hosted service without publishing modifications. See LICENSING.md for which applies to you, and LICENSE for the full text. Contributors sign the Contributor License Agreement once, by posting a comment on their first pull request.