Self-hosted Maillume
Your infrastructure. Your provider key. The complete scanner core.
Deploy Maillume for your own users, keep analysis heuristic-only, or connect a supported AI provider without sending that key to a project maintainer.
01
Data boundary
Operate the application in your own environment.
02
Bring your key
Choose a supported AI or compatible endpoint.
03
Open source
Inspect and modify the AGPL-3.0 codebase.
04
Same guardrails
Keep no-store responses, limits, and disclaimers.
Community quickstart
From clone to local scanner.
Heuristic mode needs no AI account. Add a server-side provider configuration only when your deployment needs it.
- 01Clone the repository and install dependencies.
- 02Copy the environment example and select heuristic or AI mode.
- 03Run the checks, then deploy to your preferred Next.js host.
Terminalheuristic mode
git clone https://github.com/MatthiasBusscher/Maillume.git
cd maillume
npm install
cp .env.example .env.local
# ANALYSIS_MODE=heuristic
npm run devPublic AI deployments also need provider-side budgets and deployment-level abuse controls.
Choose the analysis boundary
Two modes, one result contract.
| Mode | External provider | Best for |
|---|---|---|
| Heuristic | None | Simple, predictable, zero-provider-cost deployments |
| AI | Your configured provider | Operators who accept provider processing and manage their own costs |
What the project provides
- Next.js application and analysis API
- Paste, screenshot OCR, and .eml workflows
- Heuristic and provider adapter architecture
- Synthetic evaluation fixtures and security checks
- Deployment and privacy documentation
What the operator owns
- Infrastructure, monitoring, and incident response
- AI provider account, terms, budgets, and retention review
- User disclosures and legal compliance
- Rate limits and abuse prevention at the edge
- AGPL source-availability obligations
Community edition