Talorys is an open-source personal AI assistant released under the MIT licence. Its author, posting as rociiu on Hacker News (item 50031614) on 10 October 2026, describes it as an agent that "runs entirely in your own Cloudflare account". The post had about 100 points and 48 comments when we read it. This article reports what the README and the thread say; we have not installed or run it.

What it does

According to the README, Talorys offers streaming chat with Markdown and tool-activity indicators, durable memory the user can view, edit and delete, and create-read-update-delete screens for tasks, notes and projects that can also be driven from chat. It also runs one-time and recurring reminders, daily task digests and optional AI routines, delivered to an in-app notification centre.

It is single-user by design: no signup, no teams, one owner password hashed locally with PBKDF2-SHA256 and stored as a Cloudflare secret. The README says tasks, notes, memories and reminders keep working if Workers AI is unavailable or the daily allowance is spent.

What it runs on

The README lists four Cloudflare services: Pages for the React front end and an API proxy function, a private Worker with no public URL, a SQLite-backed Durable Object holding all data and alarms, and Workers AI. The chat model named is @cf/zai-org/glm-4.7-flash. The Worker is reached only through a service binding from the Pages site. The README says Talorys has no telemetry and sends nothing to its developers, and that Cloudflare still processes chat messages and the memories included in each prompt.

Install is one command, npx create-talorys@latest, which per the README logs in through Wrangler's browser OAuth flow or an API token, deploys the Worker and Pages project, sets secrets and checks the deployment without running any AI inference. The same installer handles update, status, doctor and reset-password, and the app can export a JSON backup of conversations, memories, tasks and settings.

What it costs

The README says Talorys is designed to fit the Workers Free plan and never turns on paid features, but adds that it is "not unlimited free". Quotas are set by Cloudflare and can change. Guardrails in Settings: maximum output tokens, maximum context tokens (older history is summarised), maximum tool calls per request, and maximum AI requests and scheduled AI runs per day. Its usage panel shows local estimates only. On a paid Cloudflare plan, usage past included amounts is billed under that plan.

In the thread, commenter martheen put the free daily allowance of 10,000 Workers AI neurons at roughly 0.11 USD of usage, and pcthrowaway worked out roughly 4 million input or 0.5 million output tokens on the cheapest Llama model, but only about 240,000 input and 34,000 output tokens on a larger Qwen model. These are commenters' calculations, not figures from Cloudflare that we checked.

The strongest objection

Most of the discussion was about the phrase "self-hosted". Commenters including onionisafruit, muvlon and StrLght argued that depending on Cloudflare for compute, storage, scheduling and inference is reliance on someone else's hosted services, and that a free tier can change at any time. Others, such as j45 and _fat_santa, argued that deploying into your own cloud account counts, and tomrod suggested "self-managed". One commenter who built a side project on Workers said Durable Object and KV bindings made it impossible to run off Cloudflare at all.

A second warning came from commenter hung, who said they were billed for Workers AI neuron usage they expected to be covered by free limits and never got an answer from support. That is one user's account, unverified here.

What a team can take from it

Talorys is a personal tool, not a workplace product, and nothing in the sources says it has been security-reviewed. It is still a compact, readable example of a pattern: one Durable Object per user holding state, alarms for scheduling, hard daily caps on model spend, and a degraded mode when inference is unavailable. If you try it, set the AI limits low first.

DiscussDoes an agent running in your own cloud account count as self-hosted for your team, and what would you need to see before trusting one with work data?