mrkeyoor.com_
Tue 15 Sept 23:58 UTC
LLM Toolsevaluationupdated 25 Aug 2026

LibreChat review

LibreChat is a self-hosted chat and agent workspace that puts many hosted and local AI providers behind one web interface. It gives teams their own accounts, conversations, agents, MCP tools, file workflows, and admin controls instead of making everyone work from separate vendor apps.

+331stars / 7d
Verdict

Our LibreChat install completed in 78 seconds and occupied 2,295 MB, but the source build failed 20 seconds later in librechat-data-provider, so we would not adopt it without pinning a revision and reproducing the build in CI. It is a strong fit for a technical team that wants one self-hosted home for providers, agents, MCP, and user administration. A solo user with one local model should choose a smaller interface, while production teams should treat each release candidate and agent feature as software to qualify, not merely a UI update.

We ran it

Lab card: what happened when we ran LibreChatScreenshot of LibreChat (librechat.ai)
Install✓ · 78s2678 packages · 2295 MB
Build✗ · 20s
Testsn/ano test script
Known vulns80 critical · 0 high · 2 moderate · 6 low (npm audit)
Repo4509 files~1,132,340 lines of source · 49.2 MB · 27 CI workflows · Dockerfile

Answers from our run

Does LibreChat build from source?

Dependencies installed in 78 seconds (2678 packages), and the build failed. We cloned commit 9cee6f9 into a clean Debian container with 3 CPUs and no project-specific setup.

Does LibreChat have tests you can run?

Not through a standard command: the project exposes no test script or target that our harness could run.

Does LibreChat have known vulnerabilities in its dependencies?

npm audit flagged 8 known advisories in the dependency tree at the time of our run.

Who should not use LibreChat?

Developers wanting a small UI for one local model: our install pulled 2,678 packages and occupied 2,295 MB.

What are the alternatives to LibreChat?

Open WebUI, Hugging Face Chat UI. Our LibreChat install completed in 78 seconds and occupied 2,295 MB, but the source build failed 20 seconds later in librechat-data-provider, so we would not adopt it without pinning a revision and reproducing the build in CI.

Setup2/5Install completed, but our clean source build failed
Docs5/5Detailed deployment, configuration, provider, and feature guides
Community5/5Current commits and same-day issue and pull-request activity
Maturity3/5Established product with a failed build and experimental agent paths

Discussed on

  1. hnLibreChat – Enhanced ChatGPT Clone98 points
  2. hnLibreChat: Enhanced ChatGPT Clone4 points
  3. hnLibreChat is a self-hosted AI chat platform that unifies all major AI providers3 points
  4. hnLibreChat – Enhanced ChatGPT Clone3 points

Who it’s for

Teams willing to operate a 2,295 MB install in exchange for one shared interface across several AI providers.
Self-hosters who need user accounts, OAuth or LDAP, role controls, conversation search, and an admin panel.
Agent builders who want MCP tools, reusable Skills, subagents, code execution, memory, and human approval in the same product.
Organizations that already run MongoDB and can manage provider credentials, secret rotation, upgrades, and backups.

Who it’s NOT for

Developers wanting a small UI for one local model: our install pulled 2,678 packages and occupied 2,295 MB.
Teams that require a clean source build before evaluation: commit 9cee6f9 failed in librechat-data-provider during our sandbox build.
Buyers expecting a bundled model or a free inference service: the README lists external providers and custom endpoints, which still need local model infrastructure or provider access.
Operators who cannot test fast-changing agent features: v0.8.8-rc1 labels Agent Plugins and stateful Code Interpreter sessions experimental, and current reports cover subagent routing and strict Bash execution failures.
Administrators who want upgrades without release review: the README explicitly warns readers to check the changelog for breaking changes.

Setup reality

Our run installed 2,678 packages in 78 seconds and used 2,295 MB on disk. The build then failed with exit code 2 after 20 seconds. Its log shows the librechat-data-provider workspace failing while running its clean, tsdown, and TypeScript build command. The repository exposed no tests script or target, so we skipped tests. The audit reported 8 known vulnerabilities: 2 moderate and 6 low.

The official local route is Docker Compose after copying .env.example. A useful deployment still needs AI provider credentials or a working local endpoint, MongoDB, stable encryption and JWT secrets, correct public domains, and decisions about authentication. Redis, file storage, web search, RAG, speech, and code execution add their own services or credentials when enabled.

The Compose path may avoid the source-build problem we hit, but our result means source deployers should reproduce the build on their own pinned revision. Production operators also need persistent secrets: the docs say temporary generated credentials are only a bootstrap convenience, and changing an established encryption key does not re-encrypt stored records.

LibreChat v0.8.8-rc1 combines chat, agents, and MCP

LibreChat v0.8.8-rc1 is much more than a self-hosted ChatGPT lookalike. It can connect to OpenAI, Anthropic, Google, AWS Bedrock, Azure, local servers, and custom OpenAI-compatible endpoints. The same interface also handles shared conversations, files, web search, image generation, speech, presets, and conversation branching. Teams can give users separate accounts and manage roles or groups from the included admin panel. That range is the reason to consider LibreChat over a small model frontend.

The cost of that range is visible in the repository. We measured 4,509 files and about 1,132,340 lines of source at commit 9cee6f9, arranged as a monorepo with workspaces. The checkout itself was 49.2 MB, yet installation expanded the project far beyond that size. This is a web platform with an API, shared packages, deployment assets, and integrations that move independently. Owners should budget for application operations and regression testing, rather than treating it like a static interface placed in front of Ollama.

What happened when we ran it

Our run installed 2,678 packages in 78 seconds inside a fresh Debian container with 3 CPUs, 8 GB of RAM, Node 22, and no secrets. Those packages occupied 2,295 MB. The build started but failed with exit code 2 after 20 seconds, leaving zero successful tasks in the reported build summary. The dependency audit found 8 known vulnerabilities, split into 2 moderate and 6 low, with none rated high or critical.

The final log lines identify the failing workspace as librechat-data-provider version 0.8.521. Its build command ran a clean step, tsdown, and TypeScript against tsconfig.build.json, then returned npm error code 2. The excerpt does not contain the earlier compiler diagnostic, so it does not establish a cause. We will not guess whether the failure came from the container, the toolchain, or that revision. Our test method also found no tests script or target, so tests were skipped rather than reported as passing.

Docker Compose starts it, while production needs persistent secrets

The official v0.8.x local guide has a short first run: clone the repository, copy .env.example, install Docker, and use docker compose up -d. That is the friendliest evaluation route and may use prepared images instead of the source-build path that failed for us. A running page is only the beginning. LibreChat still needs an AI provider key or a reachable local endpoint before it can answer, and useful optional features introduce search, speech, storage, RAG, or code-execution configuration.

MongoDB stores the application data, and the server defaults to port 3080. Public deployments must set their client and server domains, choose an authentication policy, terminate TLS, persist uploaded files, and back up conversations. The credential guide requires fixed encryption and JWT values for production replicas. Temporary generated values can persist in the bundled Compose volume, but the docs describe them as a bootstrap aid. With 2,295 MB installed in our sandbox, upgrades also deserve disk monitoring and a rollback plan.

Agent breadth in v0.8.8-rc1 comes with experimental paths

Version v0.8.8-rc1 brings agent steering, queued follow-ups, human approval, memory isolation, Skills, MCP refresh, subagents, and background code tools into one builder. That is a persuasive package for an internal AI workspace. An administrator can offer several provider models while agents share approved tools and users keep their work in one account. The release also adds SSRF checks around speech, OCR, and web tools, plus encrypted registered secrets, which are relevant controls for a service that can reach outside systems.

Some of the newest paths still need qualification. The release calls Agent Plugins and reusable stateful Code Interpreter sessions experimental. On 2026-08-25, an open v0.8.7 report said an orchestrator selected the intended subagent but failed to return the correct response, while calling that subagent directly worked. Another same-day report showed programmatic Bash execution crashing when a script enabled set -u. The repository has 27 CI workflow files, but those concrete reports are reasons to test the exact tools, models, and approval flow your users will run.

The 42,446-star project is active and carries a large queue

LibreChat had 42,446 GitHub stars when we checked it, and its last push was 2026-08-25. Issues and pull requests were also updated that day. GitHub's combined open count was 726, which we split through search into 370 open issues and 356 open pull requests. That is a busy project rather than a dormant one, but the queue is large enough that adopters should search for their provider and feature before upgrading. The latest published GitHub release was the v0.8.8-rc1 prerelease from 2026-08-14.

LibreChat earns its operational weight when several users need multiple providers, managed agents, and MCP tools behind organization-controlled access. Our 78-second install proves the dependency graph can resolve in a clean container, while the 20-second build failure blocks a clean recommendation for source deployment at commit 9cee6f9. Start with Docker Compose, pin the chosen release, set permanent secrets, and rehearse restore and rollback. If those jobs sound excessive for your use case, Open WebUI or Hugging Face Chat UI offers a narrower place to begin.

Alternatives

ProjectWhat it isPick it when
Open WebUI gh↗A self-hosted AI interface with especially direct support for Ollama and OpenAI-style APIs.pick this instead when local model access is the main job and LibreChat's agent and provider breadth is unnecessary.
Hugging Face Chat UIThe open-source web application behind HuggingChat, built for configurable model endpoints.pick this instead when you want a narrower chat application and are comfortable assembling more of the surrounding platform yourself.

Sources

  1. LibreChat README
  2. LibreChat local setup guide
  3. LibreChat environment variables
  4. LibreChat v0.8.8-rc1 release
  5. LibreChat subagent routing report
  6. LibreChat strict Bash execution report

More llm tools reviews

claude-skills · RAG_Techniques · ux-ui-agent-skills · dictionary-of-ai-coding · gemini-skills · reversa · the whole board →