Paca
Self-hosted, AI-native project management where AI agents collaborate as equal teammates in Scrum, replacing Jira, Trello, ClickUp, and Monday.
Evidence shows: plugin system uses capability-based permission model, declares required host functions, and WASM sandbox restricts permissions; install script supports non-interactive mode, but user confirmation is only prompted during installation, not covering all operations; data flow transparency is limited, only mentions MCP and WebSocket, not detailing data flow; sensitive data handling has encryption keys and secret masking, but not comprehensive; dependency security has CI builds and dependency locking, but no vulnerability scanning evidence; external effects: AI agents run in sandbox, but external API calls not explicitly restricted; rollback: activity diff and revert available, but not covering all changes; source attribution: publisher identity not verified, but code and docs traceable. Deductions: user confirmation not comprehensive, data flow transparency insufficient, dependency security lacks vulnerability scanning, external effects control unclear.
Evidence shows: project structure clear, services have defined responsibilities, tests cover critical paths like ACP bridge and AI agent unit tests; dependency availability: uses Docker Compose and lock files, but no guarantee of dependency availability; failure messages: tests cover failure scenarios like send failure and interrupt, but not comprehensive. Deductions: dependency availability not fully proven, failure message coverage limited.
Evidence shows: targets Scrum teams, supports multiple AI agent integrations like Claude Code, Gemini CLI, scenarios clear; capability boundaries defined via plugin system and configuration, but limitations not detailed; trigger precision: automation engine supports multiple trigger types, but precision not detailed; environment fit: supports self-hosting and Docker Compose, but not all environments. Deductions: trigger precision not detailed, environment fit limited.
Evidence shows: information architecture clear, has architecture docs and guides; install notes detailed, multiple installation methods; naming stability: version releases and changelog, but naming conventions not explicit; examples and FAQ: examples and docs, but no FAQ; known limitations: not explicitly listed; license Apache 2.0, complete; versioning and changelog recorded; maintenance responsibility: contribution guide and security policy, but maintainers not explicit. Deductions: naming stability insufficient, known limitations not listed, maintenance responsibility unclear.
Evidence shows: output usability: MCP server and skills provided for integration; marginal value: as Jira alternative, offers AI collaboration features, unique value; cost-benefit: free open-source, self-hosted, low cost. Deductions: no evidence of actual usage effectiveness.
Evidence shows: claims consistent with code and docs, but no external verification; cross-source corroboration: tests and CI, but no independent verification; fact-inference separation: docs distinguish feature descriptions and design philosophy, but not explicitly labeled. Deductions: lack of external verification, fact-inference separation unclear.
- Publisher identity not verified, proceed with caution.
- Dependency security lacks vulnerability scanning evidence, recommend checking dependencies.
- User confirmation mechanism not comprehensive, some operations may proceed without confirmation.
- Data flow transparency limited, recommend reviewing data flow.
What does this agent do, and when should you use it?
Paca is a self-hosted, free, open-source project management platform designed to enable AI agents to collaborate as equal teammates with humans in a Scrum team. Key components include a React + TanStack Start frontend (apps/web), a Go + Gin REST API (services/api), a Node.js + Socket.IO real-time service (services/realtime), a Python + FastAPI + OpenHands SDK AI agent orchestration (services/ai-agent), and an MCP server (apps/mcp). The platform is configurable via files for workflows, statuses, field definitions, and more, and is extensible through WebAssembly (WASM) plugins for both backend and frontend. AI agents can be assigned to sprints, pick up tasks from the board, write BDD specs, and contribute to System Design Documents. Deployment is via a single Docker Compose command, and data is fully controlled by the user.
Paca runs a unified Scrumban board where humans and AI agents collaborate in real time. AI agents (such as Claude Code, Codex, Gemini CLI) can be assigned to sprints, pick up tasks, update statuses, and comment on the board, either through the ACP (Agent Client Protocol) bridge (paca-acp-bridge) or via the OpenHands SDK. The platform provides in-app AI chat for natural-language planning, a BDD collaboration editor for Gherkin scenarios co-authored by POs, BAs, and AI, and System Design Documents (SDD) to keep architecture visible. The MCP server (@paca-ai/paca-mcp) runs via npx and exposes tools for managing projects, tasks, sprints, documents, members, and more. The automation engine (v0.11.0) uses a visual Trigger → Condition → Action graph builder, with actions including task retargeting, AI agent dispatch, and external API calls. Plugin support includes WASM backend modules and frontend modules, installed via the Plugin Marketplace within the UI.
- A Scrum Master wants to integrate AI coding agents (e.g., Claude Code) as formal team members participating in sprint planning and task execution.
- A Product Owner uses in-app AI chat to turn requirements into epics and stories, refining them with BDD scenarios.
- A development team connects Claude Desktop via the MCP server to list sprints, create tasks, and add comments using natural language.
- A project manager needs a self-hosted, customizable board where workflows and fields can be adjusted via configuration files without coding.
- An AI agent (e.g., OpenHands) runs tasks in an isolated sandbox, updating the Kanban board via the Paca API without touching the host environment.
- A team wants to extend the platform via WASM plugins to add custom routes, data models, or UI components, with a capability-based permission model.
What are this agent's strengths and limitations?
- AI agents integrated as equal teammates, assignable on the board, not just chatbots
- Fully self-hosted; data remains on your infrastructure
- Free and open-source (Apache 2.0) with no per-seat costs
- Highly customizable via configuration files and WASM plugins with granular permission model
- Provides an MCP server compatible with any MCP client (e.g., Claude Desktop)
- Supports ACP (Agent Client Protocol), allowing integration with existing CLI agents (Claude Code, Codex, etc.) while preserving local credentials
- Relatively new project (v0.12.0), may lack long-term stability and features of mature PM tools
- Requires Docker and self-hosting infrastructure; not suitable for non-technical teams
- AI agent sandboxing requires additional resources (Docker containers)
- No managed cloud version unlike Jira/ClickUp; users must handle upgrades and security themselves
- AI agent behavior is dependent on the OpenHands SDK, which may limit customizability
- Plugin ecosystem is still nascent, community plugins may be limited
How do you install or deploy this agent?
To install Paca, you have two options:
- Interactive install script (recommended for production): Run the following command on a Linux server with Docker; no repository clone is required:
curl -fsSL https://github.com/Paca-AI/paca/releases/latest/download/install.sh | bashThe script walks you through configuration interactively and starts the full stack. For non-interactive (CI/scripts/AI agents), set PACA_YES=1 and use environment variables to steer other settings.
- Manual Docker Compose:
mkdir paca && cd paca
curl -fsSL https://github.com/Paca-AI/paca/releases/latest/download/docker-compose.yml -o docker-compose.yml
mkdir -p caddy
curl -fsSL https://github.com/Paca-AI/paca/releases/latest/download/Caddyfile -o caddy/Caddyfile
curl -fsSL https://github.com/Paca-AI/paca/releases/latest/download/.env.production.example -o .envGenerate secure passwords and secrets (POSTGRES_PASSWORD, ADMIN_PASSWORD, JWT_SECRET, ENCRYPTION_KEY, etc.), update .env, then run:
docker compose --env-file .env up -dOpen http://localhost and log in with the admin credentials you set.
How do you use this agent?
After installation, access the Paca UI via your browser and log in with the admin credentials. Create an API key in Settings → API Keys for MCP or ACP connections. To connect AI agents, use the MCP server: add a paca entry to your Claude Desktop config with command: npx, args: -y @paca-ai/paca-mcp, and PACA_API_KEY and PACA_API_URL environment variables. Alternatively, install the /paca skillset by running PACA_API_URL=http://localhost:8080 curl -fsSL https://raw.githubusercontent.com/Paca-AI/paca/master/scripts/install-paca-skills.sh | bash, which supports Claude Code, Gemini CLI, Cursor, among others. In daily use, create projects, sprints, and tasks, assign them to AI agents, and they will update statuses automatically. Customize workflows via configuration files and extend with plugins.