open-webui — security grade SAFE, quality 69/100

Security audit verdict: SAFE · quality 69/100

No red flags found in any of the 11 categories — no credential harvesting, no data exfiltration, no curl-pipe-shell installer. Scanned against the SlowMist agent-security taxonomy, refreshed every 8 hours. Full audit →

by open-webui · MCP Server · ★ 154.1k

Last updated: · Indexed by AgentSkillsHub · Auto-synced every 8h

🔒 Is open-webui safe to install? View the security audit →

About open-webui

Open WebUI 👋 Open WebUI is an extensible, feature-rich, and user-friendly self-hosted AI platform designed to operate entirely offline. It supports various LLM runners like Ollama and OpenAI-compatible APIs, with built-in inference engine for RAG, making it a powerful AI deployment solution. Passionate about open-source AI? Join our team → [!TIP] Looking for an [Enterprise Plan](https://docs.openwebui.co

aillmllm-uillm-webuillmsmcpollamaollama-webuiopen-webuiopenai

Quick Facts

Stars154,137
Forks22,523
LanguagePython
CategoryMCP Server
Quality Score68.5248309976565/100
Open Issues281
Last Updated2026-10-07
Created2023-10-06
Platformsbrowser, mcp, python
Est. Tokens~17k

Compatible Skills

These tools work well together with open-webui for enhanced workflows:

  • aichat — semantic(0.24)+complementary+shared_fw(ollama,openai)+rare_topics+shared_platform (54%)
  • open-webui-tools — semantic(0.35)+complementary+rare_topics+same_lang+shared_platform (52%)
  • open-assistant-api — semantic(0.21)+complementary+shared_fw(openai)+same_lang+shared_platform (50%)
  • parllama — semantic(0.20)+complementary+shared_fw(ollama)+same_lang+shared_platform (50%)

open-webui alternative? Top 6 similar tools

Looking for a open-webui alternative? If you're comparing open-webui with other mcp server tools, these 6 projects are the closest alternatives on Agent Skills Hub — ranked by topic overlap, star count, and community traction.

  • ragflow by infiniflow · ⭐ 90.9k

    RAGFlow is a leading open-source Retrieval-Augmented Generation (RAG) engine that fuses cutting-edge RAG with

  • headroom by chopratejas · ⭐ 44.4k

    Compress tool outputs, logs, files, and RAG chunks before they reach the LLM. 60-95% fewer tokens, same answer

  • nanobot by HKUDS · ⭐ 48.8k

    Ultra-lightweight, open-source, self-hosted personal AI agent framework in Python with WebUI, tools, memory, M

  • LibreChat by danny-avila · ⭐ 44.8k

    Enhanced ChatGPT Clone: Features Agents, MCP, Skills, DeepSeek, Anthropic, AWS, OpenAI, Responses API, Azure,

  • chatgpt-on-wechat by zhayujie · ⭐ 43.0k

    CowAgent是基于大模型的超级AI助理,能主动思考和任务规划、访问操作系统和外部资源、创造和执行Skills、拥有长期记忆并不断成长,比OpenClaw更轻量和便捷。同时支持微信、飞书、钉钉、企微、QQ、公众号、网页

  • AstrBot by AstrBotDevs · ⭐ 41.5k

    AI Agent Assistant & development framework that integrates lots of IM platforms, LLMs, plugins and AI feature,

More MCP Server Tools

Explore other popular mcp server tools:

View all MCP Server tools →

Popular Python Agent Tools

Frequently Asked Questions

What is open-webui?

open-webui is User-friendly AI Interface (Supports Ollama, OpenAI API, ...). It is categorized as a MCP Server with 154.1k GitHub stars.

What programming language is open-webui written in?

open-webui is primarily written in Python. It covers topics such as ai, llm, llm-ui.

How do I install or use open-webui?

You can find installation instructions and usage details in the open-webui GitHub repository at github.com/open-webui/open-webui. The project has 154.1k stars and 22523 forks, indicating an active community.

What are the best alternatives to open-webui?

The top alternatives to open-webui on Agent Skills Hub include ragflow, headroom, nanobot. Each offers a different approach to the same problem space — compare them side-by-side by stars, quality score, and community activity.

How this security grade is produced

Grades come from a rule-based scan built on the SlowMist agent-security taxonomy, covering 11 red-flag categories including credential harvesting, data exfiltration, and curl | sh installers. It is a first-layer scan, not a manual audit — we say so rather than overstate it.

The scale of the problem is documented independently: Liu et al. (2026), in a study of 31,132 agent skills, report that 26.1% contain security vulnerabilities. Our own full-catalog census is published as a citable open dataset.

Sources & who's responsible:

View on GitHub → Browse MCP Server tools