AON
Click on "Deploy Server".
Wait a few minutes for the server to deploy. Once ready, it will show a "Started" state.
In the chat, type
@followed by the MCP server name and your instructions, e.g., "@AONWhat did I save about the Orion project deadlines?"
That's it! The server will respond to your query, and you can continue using it as needed.
Here is a step-by-step guide with screenshots.
π°οΈ AON : Self-Contained Obliterated AI
Your own uncensored AI agent. One GPU. Zero cloud. Zero filters.
β‘ Quick start Β· π‘ Why AON Β· π MCP server Β· π± Android Β· π Live instance Β· π¬ Demo
π¬ Chat | πΊοΈ Maps |
|
|
AON is a self-hosted AI agent that runs on your own hardware with local models. It answers questions, runs tools (files, shell, web search, maps), remembers you across chats, reads your documents, and extends itself with new models, skills and MCP servers. Use it from the web, the Android app, Telegram, or from Claude Desktop, Claude Code and Cursor through its MCP server.
β‘ Quick start
pipx install aon-agent # 1. install
aon init # 2. create ~/.aon with a starter config
aon serve # 3. open http://127.0.0.1:8700Related MCP server: SafeFlo
π‘ Why AON
Memory and RAG are table stakes now. What AON adds:
π Obliterated and fully yours. An uncensored ("obliterated") 27B model on a single consumer GPU (RTX 4090). Your chats, memory and documents never leave the box.
𧬠It extends itself. Paste a link and AON works out what it is: a GGUF model it can pull (it checks the VRAM budget and tool support first), an MCP server it can connect, a skill repo it can import, or docs it can learn from. It can draft a new skill from any web page and test it.
π Plugs into the AI apps you already use.
aon mcpturns AON into an MCP server for Claude Desktop, Claude Code and Cursor, so they can hand it tasks and search its memory and your documents.π₯ A private AI for your whole crew, from one GPU. vLLM serves several people at once, behind Cloudflare Access email PIN, with every user approved by hand.
π‘οΈ Honest by design. Shell commands and file writes wait for your approval. A reply that claims "done" without a tool having run is not trusted. Secrets are never saved to memory.
πΊοΈ Grounded, not guessed. Places and routes come from OpenStreetMap routing on a 3D globe; distances and times are computed, not written by the model.
π°οΈ AON | βοΈ Typical cloud AI chat | |
Runs on your own hardware | β | β |
Your chats and files stay with you | β | β |
Provider content filtering | β none | β |
Cost | your GPU's power | subscription or per token |
Long-term memory + your documents (RAG) | β | β |
Runs commands on your server (with your approval) | β | β |
Installs new models, MCP servers and skills from a link | β | β |
Usable from Claude Desktop / Cursor as a tool (MCP) | β | β |
One GPU serves your whole team | β | β |
π MCP server
Use AON inside Claude Desktop, Claude Code, Cursor and any other MCP client.
aon mcp runs AON as a Model Context Protocol server. It ships
in the aon-agent package
(source); your MCP client starts it for you.
Tool | What it does | Access |
| Hand AON a task or question; it answers with its own model, memory, documents and tools. Pass | βοΈ write |
| Search AON's long-term memory about you | π read |
| Save a fact to AON's memory | βοΈ write |
| Search your document library by meaning and exact words | π read |
| List the library | π read |
| Add a text document to the library | βοΈ write |
Shell commands and file writes are always refused over MCP: there is nobody to approve them inside another app.
Claude Desktop: Settings β Developer β Edit Config (
claude_desktop_config.json), then restart it.Cursor:
~/.cursor/mcp.json, or.cursor/mcp.jsonin a project.
{
"mcpServers": {
"aon": { "command": "aon", "args": ["mcp"] }
}
}claude mcp add aon -- aon mcpAdd "--home", "/path/to/home" to args for a different home folder. If the client can't find
aon, use the full path from which aon.
π¬ Demo

βΆοΈ Click to watch on YouTube
β¨ Features
π οΈ Agent with tools | Read, write and edit files, run shell commands, search and fetch the web, show maps. Commands and file writes ask for approval. |
π§ Long memory | Facts about you, searched by meaning and merged when they change; recall of older turns from this and other chats by meaning and exact strings; a rolling summary plus a numbered outline of everything you asked. |
π Document library (RAG) | Text, code, Markdown, HTML, Word and PDF, from the Documents panel or chat attachments. Hybrid search (SQLite FTS5 + vectors); answers cite the document. |
π Context budget | Every request is fitted to the model's window using the server's exact token count, so long chats never overflow. |
π§© Skills | Agent Skills ( |
π MCP, both ways | Connects to stdio and HTTP MCP servers (browse the Glama directory in the Hub) and is an MCP server itself. |
π Attachments | Files and photos in chat; images go to vision models. |
πΊοΈ Maps | Places and routes from OpenStreetMap (Nominatim, OSRM) on a MapLibre 3D globe. |
π₯ Multi-user | Chat on vLLM to serve several users at once; Cloudflare Access for sign-in. |
π± Everywhere | Web UI, Android app and an optional Telegram bot. |
ποΈ Architecture
flowchart TB
subgraph clients["Clients"]
direction LR
W["π Web UI"] ~~~ A["π± Android"] ~~~ T["π¬ Telegram"] ~~~ M["π€ Claude / Cursor"]
end
S["π°οΈ AON server Β· FastAPI + agent loop"]
subgraph backends["Behind AON"]
direction LR
TL["π οΈ Tools"] ~~~ DB[("π§ Memory + docs")] ~~~ V["β‘ vLLM"] ~~~ O["π¦ Ollama"] ~~~ X["π MCP servers"]
end
clients -- "HTTPS via Cloudflare Access, or MCP over stdio" --> S
S --> backends
π± Android app
260 KB, Android 7.0 or newer.
Open the link on your phone and download the APK.
Allow installs from your browser when Android asks (Install unknown apps), then tap Install.
Open AON and sign in with your approved email address (see Try the live instance).
The app opens https://aon.vulkron.uk by default. To use your own server, press Back in the
app and choose Change server, for example http://192.168.1.50:8700 on your home network.
The APK is signed (APK Signature Scheme v2, certificate CN=AON, O=Vulkron, C=GB); its SHA-256 is
on the release page.
π Try the live instance
Access to https://aon.vulkron.uk is by approval only:
π Request access. Open an issue titled Access request, saying who you are and what you would like to use AON for. Please do not post your email address in the issue; the maintainer will reply and tell you how to send it.
β³ Wait for approval. Requests are reviewed by hand. Once yours is approved, your email address is added to the allowed list and the issue is closed with a note.
β Sign in. Open https://aon.vulkron.uk, enter the approved email address, and type the one-time PIN that is emailed to you. The PIN sign-in is handled by Cloudflare Access.
Access can be withdrawn at any time. The instance runs on private hardware with limited capacity: please do not use it for anything illegal, for automated or bulk traffic, or to process other people's personal data, and expect a short wait when several people are using it.
π¦ Installation
Requirements
Linux (runs on Ubuntu), Python 3.11 or newer.
Ollama with an embedding model (
ollama pull nomic-embed-text) and a chat model with tool support (for exampleollama pull qwen3:14b), unless chat runs on vLLM.Optional: a GPU server running vLLM (
vllm/).Optional: Node.js 20 for
npx-based MCP servers.
Install
pipx install aon-agent # or: pip install aon-agent
aon init # --ollama URL --model NAME --bind HOST:PORT --home DIREverything AON keeps (config, chats, memory, documents, skills) lives in its home folder:
--home DIR, else $AON_HOME, else ~/.aon.
git clone https://github.com/leo007-htun/AON.git && cd AON
python3 -m venv venv && venv/bin/pip install -e ".[test]"
venv/bin/aon initβοΈ Configuration
aon init writes config.toml into the home folder; edit it to taste. Keep context_window
equal to vLLM's --max-model-len (or the Ollama model's context).
Key | Meaning | Example |
| Ollama's OpenAI-compatible endpoint (embeddings, and chat unless |
|
| Model used when the UI does not pick one |
|
| The agent's workspace; chats and documents are stored here |
|
| Address and port of the web UI. AON has no login: keep it on |
|
| Tool calls allowed per request |
|
| Seconds before a shell command is stopped |
|
| Extra tools that always need approval |
|
| Embedding model on Ollama |
|
| The chat model's context length, in tokens |
|
| Tokens kept free for thinking and the answer |
|
| Recent chat turns sent word for word |
|
| Also recall relevant turns from your other chats |
|
| Optional separate chat backend (vLLM) |
|
| The model name served there; only this model goes to |
|
| Sampling for the chat backend |
|
| The chat backend model accepts images |
|
| Optional Telegram bot |
|
π Running
aon serve # web UI on the bind address from config.toml
aon serve --port 9000 # or override host/port
aon --helpsetsid nohup aon serve >> ~/.aon/aon.log 2>&1 < /dev/null &
pgrep -af '[a]on serve' # is it running?
tail -f ~/.aon/aon.log # its log
pkill -f '[a]on serve' # stop itsudo tee /etc/systemd/system/aon.service >/dev/null <<'EOF'
[Unit]
Description=AON agent
After=network-online.target
Wants=network-online.target
[Service]
User=ubuntu
Environment=AON_HOME=/home/ubuntu/.aon
ExecStart=/home/ubuntu/.local/bin/aon serve
Restart=always
RestartSec=5
[Install]
WantedBy=multi-user.target
EOF
sudo systemctl daemon-reload && sudo systemctl enable --now aon
journalctl -u aon -fChange User, AON_HOME and the aon path (which aon) to match your setup.
β‘ Multi-user with vLLM
Ollama answers one request at a time for some models. To serve several users, run the chat model on vLLM and point AON at it:
chat_base_url = "http://<gpu-box>:8001/v1"
chat_model = "aon"
default_model = "aon"
context_window = 16384vllm/ has the systemd unit, the chat template and the exact package versions used.
Measured on one RTX 4090 (24 GB) with a 27B 4-bit model: 16K context serves 2β3 full-length
requests at once and the rest queue; 8K serves 4.
π Remote access
AON has no login of its own. Keep bind on your LAN and, to reach it from outside, put it behind
an authenticating proxy, for example a Cloudflare Tunnel with Cloudflare Access (email PIN).
Geolocation in the map needs HTTPS.
π§ͺ Development
pip install -e ".[test]"
pytest -qPath | What it is |
| The |
| Builds AON from |
| AON as an MCP server |
| FastAPI app: REST API and the chat WebSocket |
| The agent loop (tool calls, approval, loop guard) |
| Planner: answer directly, ask, or plan tool steps |
| Model calls; Ollama or vLLM per model |
| Fitting requests into the context window |
| Chat recall, rolling summary, outline |
| Episodic memory, extraction, consolidation |
| Document library (RAG) |
| Skills: store, import, authoring, evals |
| MCP servers and the Glama hub |
| Built-in tools (files, shell, web, map) |
| Web UI ( |
| Skills copied into a new home by |
| Test suite |
| Design notes |
| vLLM server setup |
πΎ Data
AON keeps its data in its home folder: workspace/app.db (chats), workspace/docs.db (document
library), memory/episodes.db (memory) and workspace/uploads/ (attachments). This repository
includes a snapshot of them from 2026-10-14. A fresh install creates empty ones; to start clean,
delete them before the first run. The Glama API key is kept in .glama_key, which is git-ignored.
π€ Contributing
Issues and pull requests are welcome. For anything bigger than a fix, please
open an issue first to talk it through. Run
pytest -q before sending a pull request.
π License
AON is released under the MIT License. Β© 2026 Sithu Htun (@leo007-htun).
Bundled third-party files keep their own licenses, included next to them: CybercoreCSS (MIT), MapLibre GL JS (BSD-3-Clause), highlight.js (BSD-3-Clause), and the Exo 2, JetBrains Mono, Orbitron and Rajdhani fonts (SIL Open Font License).
If AON is useful to you, give it a β. It helps others find it.
This server cannot be deployed
Maintenance
Related MCP Connectors
Agent-native MCP server over the public saagarpatel.dev corpus. Read-only, stateless.
Persistent memory, knowledge graph, task management and more for AI agents via MCP.
MCP server for your apps' tools and custom tools, plus hosted AI agents and approval-gated workflows
Nifty's MCP server β exposes tasks, projects, messages, and files as tools for AI agents.
Related MCP Servers
- AlicenseBqualityCmaintenanceA local-first MCP server that provides AI agents with safe codebase access through file discovery, hybrid lexical-semantic search, and project introspection. It features durable local memory and semantic indexing while keeping all data and processing entirely on your local machine.7425 npm6MIT
- AlicenseNot gradedqualityCmaintenanceLocal MCP server for Claude Code providing persistent memory, task planning, and agent coordination with full transparency and no network calls.2MIT
- AlicenseAqualityCmaintenanceA local shared-memory MCP server for Claude, Codex, Hermes, and other MCP-aware agents, providing a durable memory layer with Markdown files and SQLite fact store.6MIT
- AlicenseNot gradedqualityBmaintenanceA self-hosted MCP server that gives AI agents controlled access to a machine: filesystem, shell, background processes, git, web fetching and persistent key-value memory.GPL 3.0

