About

About AgentSDR, the open-source AI SDR

AgentSDR is an open-source project led by Kandid, the company that started it and runs it in production. The code, the licence, the governance and the security policy are all public.

Star on GitHub How to self-host it

Who builds it

Kandid, in the open

Facts here come from the project's own files in the repository.

AgentSDR is led by Kandid, the company that started the project and runs it in production. The source is published in the Kandid-ai organisation on GitHub, at github.com/Kandid-ai/AgentSDR.

It is built as one Next.js app on one PostgreSQL database, and you run it yourself. The first public release, 0.1.0, was published on 6 October 2026. Every release is recorded in the changelog, including the database migrations it needs.

Maintainers review and merge pull requests, triage issues, cut releases and handle security reports. They are listed in CODEOWNERS and belong to the maintainers team on GitHub.

The licence

MIT, with the text in the repository

You may use, copy, modify, self-host, distribute and sell AgentSDR, including in closed-source products and hosted services. Keep the copyright and licence notice.

MIT License
The binding text is the LICENSE file in the repository.
Inbound equals outbound
By submitting a pull request, contributors agree their contribution is licensed under the same licence and that they have the right to submit it.
Responsible use
The project publishes a responsible use guide to read before you send anything.

Governance

How decisions are made

Written down in GOVERNANCE.md, so nobody has to guess.

Roles
Users run AgentSDR and report bugs. Contributors improve the code, docs or design. Maintainers review and merge, triage, release and handle security reports. Anyone can contribute.
Day-to-day changes
Decided in pull requests. One maintainer approval and a green CI check are enough to merge.
Bigger changes
Architecture, the data model, licensing, security posture and public APIs are discussed in an issue or Discussion first and need the agreement of at least two maintainers.
When maintainers disagree
If a discussion does not converge, Kandid's project lead makes the final call and records the reasoning on the issue.
Becoming a maintainer
Contributors with sustained, high-quality contributions and good judgement can be invited by the existing maintainers. Maintainers inactive for six months may move to emeritus status.
Code of conduct
Everyone follows the Code of Conduct, based on the Contributor Covenant. Concerns can be sent to [email protected].

Read GOVERNANCE.md in full. Changes to governance follow the same path as architecture changes.

Contributing

How to take part

Small, focused changes are welcome without ceremony. Larger ones start with a conversation.

Report a bug
Open an issue with the bug form, with steps to reproduce and what you expected.
Send a pull request
Fork, branch from main, run the checks CI runs and open a PR. One issue per pull request, kept small. See CONTRIBUTING.md.
Start a discussion
Larger ideas begin in GitHub Discussions. Questions and show-and-tell live there too.

Security

Report security problems privately

AgentSDR holds contacts, conversations and the credentials of connected services, so reports are taken seriously.

Please do not open a public issue, discussion or pull request for a security problem. Use Security, Report a vulnerability on GitHub, or email [email protected].

The policy targets an acknowledgement within 3 business days and an initial assessment within 7 business days. Coordinated disclosure, credit in the advisory if you wish and a safe harbour for good-faith researchers are described in SECURITY.md. There is no paid bug bounty.

FAQ

Questions, answered

Who builds AgentSDR?

AgentSDR is an open-source project led by Kandid, the company that started it and runs it in production. The code lives in the Kandid-ai organisation on GitHub. Maintainers are listed in the repository's CODEOWNERS file and are members of its maintainers team.

What licence is AgentSDR under?

The MIT License. By submitting a pull request, contributors agree that their contribution is licensed under the same licence.

When was the first public release?

Version 0.1.0 was released on 6 October 2026. The project follows Semantic Versioning, and while the major version is 0, minor releases may include breaking changes, which the release notes say.

How do I report a security problem?

Not in a public issue, discussion or pull request. Report it privately through GitHub's Report a vulnerability form for the repository, or email [email protected]. The policy targets an acknowledgement within 3 business days and an initial assessment within 7 business days. There is no paid bug bounty.

How do I contribute?

Open an issue for a bug or a feature, improve the docs with a pull request, or pick up an issue labelled good first issue or help wanted. For anything beyond a small fix, comment on the issue first and wait for a maintainer to confirm the approach. A pull request needs a green CI check and one maintainer approval.

Where do I get help?

In the documentation at docs.agentsdr.ai, in GitHub Discussions for questions and ideas, or in an issue for bugs. The project is maintained by a small team, and community support is best effort.

Blog