WorkPilot is a self-hosted AI coding and productivity assistant that integrates natively into Microsoft Teams and your entire M365 environment — with zero data leaving your infrastructure.
From code review to Teams messages — one assistant, every channel, zero friction.
Read, write, edit, and debug code across your entire codebase. Spawns specialized sub-agents for exploration and review. Powered by 100+ LLMs via LiteLLM.
Multi-layer sandboxing, secret redaction, audit logging, E-stop kill switch, Security Classifier, and Entra ID authentication — security-first by design.
Native Teams bot integration, Entra ID SSO, Microsoft Graph access, and Azure deployment support — designed to live inside your M365 tenant.
Chat from CLI, browser, or Teams. A single agent loop handles all channels simultaneously through a stateless cloud relay — your data never leaves your machine.
WorkPilot is built with a defense-in-depth security model. Every tool call passes through a multi-phase hook pipeline — preflight classifiers reject suspicious actions before execution, postflight scanners redact credentials from all output. A global E-stop halts everything instantly on detection of data leaks.
WorkPilot is built for organizations that run on Microsoft. Authenticate once with Entra ID and reach your agent everywhere.
Chat with your agent directly inside Teams. OID-based routing ensures messages always reach the right user's agent.
Sign in once with your Microsoft account. MSAL-based authentication, OIDC token validation, and per-user session isolation.
Access email, calendar, files, and Teams data through Graph API. Graph auth via MSAL for rich M365 integrations.
Cloud Gateway deploys to Azure App Service in minutes. Stateless relay — your agent logic and data stay on your own machine.
DirectLine Web Chat and Bot Framework integration. Embedded web chat UI for intranet portals and custom apps.
Extend with Model Context Protocol servers. Consume or expose tools through MCP — integrate any service into the agent loop.
WorkPilot runs on your machine — the Cloud Gateway is just a stateless relay. Your data never leaves your infrastructure.
Windows — auto-installs Python if needed:
macOS / Linux — auto-installs Python if needed:
Or if Python 3.11+ is already installed: pip install workpilot
Run the interactive setup wizard, then connect to the Cloud Gateway. Sign in with your Microsoft account — Teams and Web Chat start routing immediately:
The WorkPilot Teams app is currently in preview. Access is invite-only while we complete store validation. There are two ways to get it:
* Your tenant admin must allow custom app uploads.
Install from PyPI in seconds, or open the web chat. WorkPilot runs on your infrastructure.