Skip to content
DioscHub
DioscHub DioscHub

Documentation for AI that respects your security model

DioscHub embeds assistants into your stack without ever touching your credentials. Start by understanding the model, then build, operate, and ship it past review.

Understand the security model Quickstart
Credential-blind Bring-Your-Own-Auth Consensus-gated actions
START HERE

Where do you want to start?

Pick what you're here to do. We'll lay out the shortest honest path.

01
The security model

How credential-blind orchestration actually works.
02
Architecture at a glance

Every box and boundary, in one diagram.
03
A reference deployment

An internal-helpdesk example, end to end.
You'll walk away with: Enough understanding to take DioscHub into a security review.
THE MODEL

One request, two trust zones.

DioscHub draws a hard line between orchestration and execution. The model decides what to do; your own code decides how — with the credentials that never crossed the line.

The hub is credential-blind
It orchestrates the model and tool calls but never receives your secrets — only a scoped session token.
Tools run in your perimeter
MCP servers live in your infrastructure. They wrap endpoints you already have.
Secrets never leave
Credentials are injected at the edge of your boundary. They are never serialized to the model or the hub.
Read the architecture guide
Your application client
React · Vue · Angular · Vanilla — assistant-kit widget
user intent + scoped session token
DioscHub credential-blind
Orchestrates the model, sessions, roles & tool calls
tool call (no secrets)
Your security perimeter
MCP server your code
Runs in your infra · wraps existing endpoints
Your APIs & data secrets stay
Credentials are injected here and never leave
BROWSE

All seven pillars.

Evaluate

Decide if DioscHub fits — the model, the boundary, a reference deployment.

Get started

Zero to a working assistant in your app.

Build

Integrate the frontend and extend DioscHub with your own MCP tools.

Browse Build

Operate

Run, configure, harden and observe a self-hosted DioscHub.

Browse Operate

Secure & Comply

Ship past a security review — what flows where, and what persists.

Browse Secure & Comply

Reference

APIs, schemas and boundary contracts — terse, for looking up.

Browse Reference

Concepts

The mental model and the shared vocabulary the rest of the docs use.

Browse Concepts