Dev & Engineering on-prem-deploymentmodel-provider-pluginsollamallama-cppmulti-platform-desktopdocker-composeagent-symlinkspowersync

Thunderbolt

The AI you control: choose your models, own your data, and eliminate vendor lock-in.

FollowAgents review · FARS-2.1
Not recommended
49/ 100 5-point scale 2.5 / 5
1 2 3 4 5 6
1Trust11 / 29 · 1.9/5

Evidence shows security audit claims, dependency locking, and CI security gates, but lacks specific implementation details for least privilege, user confirmation, data flow transparency, and sensitive data handling. Deductions: no clear evidence of least privilege, user confirmation, data flow diagrams, or sensitive data encryption.

2Reliability8 / 14 · 2.9/5

Project has CI tests and dependency locking, but failure messages and error handling documentation are insufficient. Deductions: specific examples of failure messages and error recovery mechanisms are not documented.

3Adaptability9 / 18 · 2.5/5

Project targets enterprise users, supports multiple platforms and models, but capability boundaries and trigger precision are unclear. Deductions: no clear description of agent capability boundaries and trigger conditions.

4Convention11 / 18 · 3.1/5

Project has clear documentation structure, installation guides, and FAQ, but version changelog and naming stability information are insufficient. Deductions: missing CHANGELOG and naming stability statements.

5Effectiveness7 / 13 · 2.7/5

Project offers local deployment and model choice, but specific evidence of output usability and marginal value is insufficient. Deductions: no output format examples or real-world use cases.

6Verifiability3 / 8 · 1.9/5

Project has CI and tests, but the correspondence between claims and evidence is unclear. Deductions: no traceable claim sources or cross-validation.

Evidence confidence: Low Reviewed Aug 11, 2026 Reviewed revision 56ea04b4a694
The upstream repository has new commits since this review. The score still applies to the reviewed revision shown and may not cover the latest changes.
Before you use it
  • Project is early-stage, depends on external authentication and search services, may not be suitable for fully offline environments.
  • Publisher identity is unverified, supply chain risks should be carefully assessed.
  • Security audit is not yet complete, production use should wait for audit results.
Review evidence [1][2][3][4][5][6]
See the full review method →

What does this agent do, and when should you use it?

Thunderbolt is an open-source, cross-platform AI client developed by the Thunderbird team, designed for on-premises deployment in enterprise environments. It supports all major desktop and mobile platforms, including web, iOS, Android, Mac, Linux, and Windows. Thunderbolt is compatible with frontier, local, and on-prem models, and offers enterprise features, support, and FDEs. The project is under active development, currently undergoing a security audit, and preparing for enterprise production readiness. It provides a self-hosted backend with Docker Compose or Kubernetes, using Postgres and PowerSync for data management. Users must bring their own model providers; there is no public inference endpoint, but you can use Ollama or llama.cpp for free local inference or add API keys for any OpenAI-compatible model provider. Thunderbolt is licensed under MPL-2.0 and adheres to Mozilla's Community Participation Guidelines.

Thunderbolt provides a unified chat interface to interact with multiple AI model providers. It runs a backend service (port 8000) for authentication and data sync, and a frontend (port 1420) built with Vite and Tauri. Users can configure API keys for OpenAI-compatible providers or local inference servers like Ollama or llama.cpp. The app supports disabling search functionality to move toward offline-first operation. The development workflow uses Make commands: make doctor verifies tooling, make setup installs dependencies and symlinks agents, make up starts Postgres and PowerSync in Docker, and make run launches both backend and frontend. The repository includes architecture docs, a Storybook for component development, and a Vite Bundle Analyzer for performance tuning.

  1. An enterprise IT team wants to deploy an AI chat tool on-premises to meet data privacy and compliance requirements.
  2. A developer wants to use local open-source models via Ollama or llama.cpp and interact through a polished chat interface.
  3. An organization needs a cross-platform AI client (desktop and mobile) with a self-hosted backend to avoid cloud dependency.
  4. A power user wants to switch between multiple model providers without being locked into a single vendor.
  5. A team wants to evaluate AI productivity tools while maintaining full control over their data and infrastructure.

What are this agent's strengths and limitations?

Pros
  • Fully open-source (MPL-2.0) and self-hostable, giving complete control over data and deployment.
  • Cross-platform support across web, iOS, Android, Mac, Linux, and Windows.
  • Model-agnostic, compatible with any OpenAI-compatible API, and encourages local inference with Ollama or llama.cpp.
  • Enterprise features, support, and FDEs available, making it suitable for production environments.
  • Strong emphasis on security (security audit) and community participation guidelines.
Limitations
  • Still in early development; not fully offline-first, currently depends on authentication and search (search can be disabled).
  • No public inference endpoint, so users must configure their own model providers, increasing setup complexity.
  • Targeted primarily at enterprise customers; individual users may find documentation and installation challenging.
  • Relies on external services (Postgres, PowerSync), adding deployment and operational overhead.
  • Currently undergoing security audit, so production readiness is not yet fully established.

How do you install or deploy this agent?

Thunderbolt is still early-stage and does not yet provide prebuilt installers for end users. Developers can set up a local environment by cloning the repository and running: make doctor to check tools, make setup to install dependencies and link agent symlinks, make up to start Postgres and PowerSync in Docker, and make run to start the backend (port 8000) and frontend (port 1420). For enterprise self-hosting, refer to the deploy/README.md for Docker Compose or Kubernetes configurations. You will need to configure your own model provider, such as installing Ollama or llama.cpp.

How do you use this agent?

After installation, open the frontend (in development, http://localhost:1420), register or sign in (requires self-hosted backend). In the settings, add your model provider: either an API key for an OpenAI-compatible service or the endpoint for a local Ollama/llama.cpp instance. Select a model from the chat interface and start chatting. To move closer to offline usage, disable search in the integrations settings.

How does this agent compare with similar options?

Thunderbolt differentiates from closed-source clients like OpenAI's ChatGPT or Anthropic's Claude by emphasizing data ownership and model freedom, allowing full self-hosting and avoiding vendor lock-in. Compared to other open-source chat clients, Thunderbolt focuses on enterprise-grade deployment and model neutrality.

FAQ

Is Thunderbolt completely free?
Thunderbolt is open-source (MPL-2.0) and free to use, but you must cover your own infrastructure costs (e.g., servers, database) and model usage fees unless you use local free models.
Can I use my own API keys?
Yes. Thunderbolt supports any OpenAI-compatible model provider; you can add your API keys in the settings.
Can Thunderbolt work offline?
Not fully yet. It currently depends on authentication and search, but you can disable search in integrations. Full offline mode is on the roadmap.
Which platforms does Thunderbolt support?
It supports web, iOS, Android, Mac, Linux, and Windows, though the exact build status for mobile may vary.
How do I report a security vulnerability?
Please do not file public GitHub issues. Instead, report it privately via the vulnerability reporting form at security/advisories/new.

Compare agents like this one

The same FARS review applied across the shortlist this agent qualifies for.

Related agents