Every request hits Authentik first, then routes by model name to a local runtime (Ollama and mlx-lm by default, vLLM included) on your Apple Silicon mesh, so prompts and code stay on-prem. When you want a frontier model, the same Open WebUI bursts to any vendor (AWS Bedrock, GCP Vertex, Azure OpenAI, OpenAI, Anthropic, or your provider of choice) on your own keys, over an OpenAI-compatible gateway plus the Model Context Protocol (Linux Foundation). Swap the runtime, the gateway, or the IdP for your own. Some advanced features stay provider-specific.
Sovereign by default, hybrid by choice
Connect Slack, Notion, Google Drive, Postgres, and GitHub through vendor or community MCP servers of your choice (the default selection ships with the first cohort, subject to upstream availability), so the local assistant can read your tools without your data leaving the rack.