Flowise
Visual low-code builder for AI agents, RAG apps, chatbots, agentic workflows, multi-agent systems, LangChain-based components, API-serving flows, and self-hosted deployments through npm, Docker, and cloud platforms.
Open the source and read safety notes before installing.
Safety notes
- Flowise can turn visual flows into callable chatbots, agents, RAG pipelines, and API endpoints. Review each flow's tools, credentials, webhooks, and external actions before production use.
- Self-hosted deployments should protect the UI, credentials, flow exports, logs, and API endpoints with authentication, network controls, secret management, and backups.
- RAG flows may ingest private documents, chunk content, create embeddings, and query external vector databases; scope datasets and retention before sharing flows.
- Agentic workflows and multi-agent systems can call external services repeatedly; set quotas, rate limits, and approval gates for write actions.
- The repository license file says most code is Apache-2.0, while enterprise directories and files with explicit copyright notices use a commercial license; verify license boundaries before redistribution.
Privacy notes
- Prompts, uploaded documents, chunks, embeddings, vector metadata, tool inputs, tool outputs, model responses, credentials, flow definitions, logs, and exported chatflows may contain private data.
- Model providers, embedding providers, vector stores, document loaders, search APIs, workflow integrations, and hosted Flowise Cloud may receive data depending on flow configuration.
- Do not commit `.env` files, provider keys, vector database secrets, webhook URLs, exported credentials, generated logs, or private flow templates.
- Before publishing a chatbot or API endpoint, review whether prompts, source documents, dataset IDs, and tool outputs are exposed to users or downstream systems.
Prerequisites
- Node.js 20.0.0 or newer for npm installation.
- Docker Compose if using the documented Docker self-host path.
- Provider credentials for selected LLMs, embedding models, vector stores, document loaders, tools, or workflow integrations.
- Persistent database/storage configuration, auth settings, and environment variables before exposing a shared Flowise instance.
- A review plan for which users can create chatflows, agentflows, tools, webhooks, credentials, and public API endpoints.
Schema details
- Install type
- cli
- Troubleshooting
- No
- Scope
- Source repo
- Estimated setup
- 20 minutes
- Difficulty
- intermediate
- Website
- https://flowiseai.com/
- Pricing
- freemium
- Disclosure
- editorial
- Application category
- DeveloperApplication
- Operating system
- Web
Full copyable content
npm install -g flowise
npx flowise startAbout this resource
Overview
Flowise is a visual, low-code builder for AI agents, RAG applications, chatbots, agentic workflows, and multi-agent systems. It provides a web UI where teams compose model nodes, tools, memory, retrievers, vector stores, prompts, and API-facing flows without writing every integration from scratch.
This entry fills a clear directory gap. Langflow and Dify are already present as adjacent visual builders, but Flowise is a separate high-search project with strong demand around "Flowise AI agent builder", "Flowise RAG", "chatflow", "agentflow", and self-hosted LangChain-style visual workflows.
Install
Install the published npm package:
npm install -g flowise
npx flowise start
The README also documents Docker Compose and Docker image paths:
docker compose up -d
For source development, the monorepo uses pnpm, with server, ui,
components, and api-documentation modules.
Core Capabilities
| Area | Flowise Coverage |
|---|---|
| Visual builder | Drag-and-connect flow authoring for LLM apps, chatbots, RAG, and agents |
| Agent workflows | Agentic workflows, agentflow patterns, multi-agent systems, tools, memory, and orchestration nodes |
| RAG | Document loaders, chunking, embeddings, retrievers, vector stores, reranking, and chat-with-data patterns |
| Runtime | Node backend, React frontend, component integrations, and Swagger/OpenAPI-style API documentation |
| Deployment | npm package, Docker Compose, Docker image, source development, Flowise Cloud, and self-hosting docs for major cloud platforms |
| Integrations | LangChain-style components, model providers, vector databases, workflow automation, APIs, and webhook-oriented deployment patterns |
Use Cases
- Prototype RAG chatbots over internal docs or knowledge bases.
- Build visual agent workflows that call tools and route steps.
- Publish a chatflow or agentflow behind an API endpoint.
- Compare visual agent builders such as Flowise, Langflow, Dify, and LobeHub.
- Let non-specialist teams inspect the graph behind a chatbot or RAG workflow.
- Self-host an AI chatbot builder with provider credentials kept in your own infrastructure.
Source Review
Verified on 2026-06-18:
- GitHub reports
FlowiseAI/Flowiseas an active repository with 53,000+ stars, 24,000+ forks, and latest releaseflowise@3.1.2. - The repository description says "Build AI Agents, Visually"; topics include low-code, no-code, LangChain, RAG, chatbot, workflow automation, agentic AI, agentic workflow, agents, and multi-agent systems.
- The README documents Node.js
>=20.0.0,npm install -g flowise,npx flowise start, Docker Compose, Docker image usage, source development withpnpm, environment variables, documentation, self-hosted deployment options, and Flowise Cloud. - The npm registry resolves package
flowiseversion3.1.2with theflowiseCLI binary. - The repository license file says enterprise directory content and files with explicit copyright notices use a commercial license, while content outside those restricted areas is available under Apache-2.0.
Safety and Privacy
Flowise makes it easy to expose a flow as a chatbot or API endpoint. That is useful, but it also means credentials, prompts, tools, retrievers, and document sources need review before a flow is shared. Treat exported flows like configuration code: inspect them for secrets, endpoints, prompts, dataset names, and write-capable tools.
For RAG and agent workflows, test retrieval quality, rate limits, and tool side effects before trusting output. A visually clear graph is not a security boundary; users still need auth, logs, secret storage, and production review.
Duplicate Check
Checked current content/tools/, content/mcp/, content/agents/,
content/skills/, guides, collections, open pull requests, and repository-wide
content for FlowiseAI/Flowise, Flowise, flowise, Flowise AI agent builder,
Flowise RAG, Flowise chatflow, Flowise agentflow, visual AI agents, low-code AI
agent builder, LangChain visual builder, and multi-agent workflow builder.
Existing entries cover adjacent builders such as Langflow, Dify, LobeHub, Open
WebUI, and RAGFlow, but no dedicated Flowise tools entry, exact source URL
duplicate, target file, or open duplicate PR was found.
Source citations
Add this badge to your README
How it compares
Flowise side by side with 3 alternatives on trust, install, platform support, and disclosed safety notes — all from reviewed registry metadata.
| Field | Flowise Visual low-code builder for AI agents, RAG apps, chatbots, agentic workflows, multi-agent systems, LangChain-based components, API-serving flows, and self-hosted deployments through npm, Docker, and cloud platforms. Open dossier | AnythingLLM Local-first AI application for private chat, document RAG, workspace agents, MCP-compatible tools, model routing, memories, scheduled tasks, multimodal workflows, multi-user Docker deployments, and self-hosted agent automation. Open dossier | Dify Production-ready LLM app and agentic workflow platform with visual workflows, RAG pipelines, agent capabilities, model management, observability, prompt IDE, APIs, Dify Cloud, and self-hosted Docker Compose deployment. Open dossier | Open WebUI Self-hosted AI platform and web UI for Ollama, OpenAI-compatible APIs, RAG, Python function tools, model builder workflows, artifacts, web search, vector databases, enterprise auth, observability, plugins, and MCP-adjacent OpenAPI integrations. Open dossier |
|---|---|---|---|---|
| Trust | ||||
| Install risk | Review first | Review first | Review first | Review first |
| Notes | Safety ✓ Privacy ✓ | Safety ✓ Privacy ✓ | Safety ✓ Privacy ✓ | Safety ✓ Privacy ✓ |
| Category | tools | tools | tools | tools |
| Source | source-backed | source-backed | source-backed | source-backed |
| Author | FlowiseAI | Mintplex Labs | LangGenius | Open WebUI |
| Added | 2026-06-18 | 2026-06-18 | 2026-06-18 | 2026-06-18 |
| Platforms | CLI | CLI | CLI | CLI |
| Source repo | — | — | — | — |
| Safety notes | ✓Flowise can turn visual flows into callable chatbots, agents, RAG pipelines, and API endpoints. Review each flow's tools, credentials, webhooks, and external actions before production use. Self-hosted deployments should protect the UI, credentials, flow exports, logs, and API endpoints with authentication, network controls, secret management, and backups. RAG flows may ingest private documents, chunk content, create embeddings, and query external vector databases; scope datasets and retention before sharing flows. Agentic workflows and multi-agent systems can call external services repeatedly; set quotas, rate limits, and approval gates for write actions. The repository license file says most code is Apache-2.0, while enterprise directories and files with explicit copyright notices use a commercial license; verify license boundaries before redistribution. | ✓AnythingLLM can run agents, scheduled tasks, MCP-compatible tools, browser-like workspace actions, developer APIs, and external model calls; scope tools and credentials before enabling them for users. The upstream Docker guide includes examples that add the SYS_ADMIN capability to the container. Review whether that capability is acceptable for the host before copying production run commands. Multi-user Docker deployments need normal production controls: authentication, TLS, network isolation, secret management, persistent-volume ownership, backups, and upgrade planning. Agent tools, custom agents, model routing, memories, and scheduled tasks can change behavior over time; use least privilege, logging, review gates, and rollback plans for write-capable workflows. Localhost services such as Ollama, Chroma, LocalAI, or LM Studio may need Docker host routing adjustments; avoid exposing local provider ports wider than intended. | ✓Dify can orchestrate workflows, RAG pipelines, agents, tools, APIs, model providers, and production application endpoints; review tool permissions and user-triggered actions before exposing apps. Self-hosted deployments need normal production controls: authentication, TLS, network isolation, secret management, backups, database maintenance, object storage policy, and upgrade planning. Agent and workflow nodes can call external tools, model providers, HTTP APIs, search tools, and custom integrations; apply least privilege and approval gates for write actions. Enterprise, marketplace, cloud, and modified-license terms should be reviewed before using Dify as a multi-tenant service or white-labeled frontend. Prompt IDE changes, workflow edits, model-provider changes, and dataset updates can alter production behavior; use versioning, staged releases, and rollback paths. | ✓Open WebUI can run Python function-calling tools, RAG ingestion, web search, web browsing, image generation, plugins, and model/provider integrations; review each capability before enabling it for untrusted users. Docker examples expose web ports and persistent volumes. Mount persistent data, set admin/auth controls, and avoid treating demo defaults as production hardening. Python function tools and plugin pipelines can execute application logic and access configured services. Restrict tool creation and plugin installation to trusted administrators. RAG and web browsing can ingest local documents, URLs, cloud files, and extracted text; test indexing quality and permissions before exposing private corpora to users. Open WebUI uses a custom Open WebUI License with branding restrictions and enterprise-license exceptions. Verify license terms before redistribution, white-labeling, or commercial deployment. |
| Privacy notes | ✓Prompts, uploaded documents, chunks, embeddings, vector metadata, tool inputs, tool outputs, model responses, credentials, flow definitions, logs, and exported chatflows may contain private data. Model providers, embedding providers, vector stores, document loaders, search APIs, workflow integrations, and hosted Flowise Cloud may receive data depending on flow configuration. Do not commit `.env` files, provider keys, vector database secrets, webhook URLs, exported credentials, generated logs, or private flow templates. Before publishing a chatbot or API endpoint, review whether prompts, source documents, dataset IDs, and tool outputs are exposed to users or downstream systems. | ✓Uploaded documents, parsed chunks, embeddings, workspace memories, prompts, chat history, agent state, scheduled task inputs, MCP payloads, provider responses, logs, and API calls may contain sensitive data. The README documents anonymous telemetry and an opt-out through DISABLE_TELEMETRY=true or the in-app privacy setting; review this before using regulated or confidential data. Even with telemetry disabled, outbound calls may still go to configured LLMs, embedding models, vector databases, external tools, cdn.anythingllm.com, GitHub, or GitHubusercontent depending on the deployment. Keep provider keys, JWT secrets, workspace invite links, storage paths, private documents, and generated citations out of public prompts, screenshots, issues, and examples. | ✓Prompts, uploaded documents, knowledge-base chunks, embeddings, workflow variables, tool arguments, tool results, API requests, model responses, logs, annotations, and observability data may contain sensitive user or business data. Do not store API keys, database credentials, private documents, customer records, regulated data, or internal URLs in examples, public apps, logs, screenshots, or shared prompts. Review data paths for every model provider, embedding provider, reranker, tool, observability integration, storage backend, and Dify Cloud or self-hosted deployment component. RAG and knowledge-base features need deletion, retention, access control, source freshness, and permission filtering policies before ingesting private corpora. | ✓Chats, prompts, uploaded files, document chunks, embeddings, vector metadata, web search results, browser-fetched pages, Python tool inputs, plugin outputs, voice/video data, logs, metrics, and traces may contain private data. Configured model providers, vector databases, document extraction engines, web search providers, image providers, object storage, Redis, auth providers, and observability backends may receive user data. Keep provider keys, OAuth/LDAP/SSO secrets, database URLs, object storage keys, plugin credentials, uploaded files, RAG indexes, and OpenTelemetry exports out of public repos and screenshots. Define retention, deletion, tenant separation, group permissions, export policy, and audit review before using Open WebUI as a shared internal workspace. |
| Prerequisites |
|
|
|
|
| Install | | | | |
| Config | — | — | — | — |
| Citations | ||||
| Claim | Unclaimed | Unclaimed | Unclaimed | Unclaimed |
Featured in
Signals
Loading live community signals…
A short, calm digest of reviewed Claude resources. Unsubscribe any time.