Step 8: Advanced Agent Zero
This page is for you once the playbook jobs feel routine and Agent Zero has run well for a week or two. It covers six power features, and each one comes with what it is for, how to turn it on, and what you trade for it. Each feature is optional, so try one at a time and keep everything else on this page as it was.
Applies to: Agent Zero only. The setups that work with any agent are listed at the end.
Everything here happens on the Agent Zero web page at
http://localhost:5080 or in A0 Launcher, and the clicks are
the same on Windows and on a Mac. These steps were checked on 14
November 2026.
Model presets: a cheap model for most work, a strong one on demand
What it is for. A model preset is a named set of models. The Main model talks and uses tools, and the Utility model writes summaries, chat names, and memory notes. The Embedding model searches memory. Presets let you switch the whole set from the chat in one click. A fresh install comes with presets called Default, Efficiency, and Power, and the preset menu is the first dropdown on the left of the chat status bar.
- Click the current preset name, then click Edit Presets.
- Click Add, name it
Cheap, choose a low-cost model for the Main and Utility models, and click Save. For that low-cost model, the API id isdeepseek-flash, and the version is DeepSeek-V4.1-Flash-1017. - Click Add again, name it
Strong, choose a frontier model for the Main model, and click Save. - Open Settings → Agent → Models and make
Cheapthe default for new chats.
What you should see new chats start on Cheap. When a
job needs careful planning, you pick Strong from the preset
menu for that chat only.
A project or an agent profile can also have its own preset, through the Per-project / agent option in the same settings. Leave the Embedding model alone, because changing it means rebuilding the memory index. The prices behind this split are on Mix a cheap model with a strong one.
- You gain: a much lower bill, because most steps go to the cheap model and you pay frontier prices only for the jobs that need them.
- You risk: a cheap Main model makes more mistakes on
long jobs, and it may follow hidden instructions on a web page more
easily. A surprise bill is also possible if you forget a chat is on
Strong. - Makes sense when: the agent stays in its container
with Host access off, and a spend limit is set at each provider. Switch
to
Strongfor anything that writes outside the workspace or uses an account.
A local model on your own computer
What it is for. With a local model in Ollama or LM
Studio, your prompts never leave your computer and there is no bill per
step. Agent Zero runs inside a container, so it reaches your computer
through a special address, host.docker.internal, rather
than localhost. Inside the container,
localhost means the container itself.
If you picked Local model during first-run setup in
Step 1,
Agent Zero already uses Ollama. The steps below add a separate
Local preset, so you can switch between a cloud model and a
local one from the preset menu.
Install Ollama with Run a local model with Ollama, download a model in its terminal, and leave Ollama running. For example:
ollama pull qwen3.8:27bIn Agent Zero, click Edit Presets, click Add, and name the preset
Local.For the Main model, choose Ollama and type the model name exactly as Ollama lists it, such as
qwen3.8:27b. If Agent Zero asks for an address, usehttp://host.docker.internal:11434. For LM Studio, the port is1234instead.Click Save and pick
Localfrom the preset menu.If a small model explains what it would do instead of doing it, pick the Tiny Local profile from the profile menu beside the chat input. That profile is built for small local models.
What you should see a short test question gets an answer from the
Local preset. If Agent Zero cannot connect, the model
server may only accept connections from inside your computer. Local models covers that fix for
Ollama and LM Studio.
Agent Zero's docs say the model server must listen on an address Docker can reach, and that you should "keep that port limited to trusted clients". They also warn that a Utility model that loads is not proven to handle summaries and memory well, so test it on a few chats before you rely on it.
- You gain: privacy for your prompts and files, and no bill per step.
- You risk: this is hardware dependent. A model that fits in your RAM is usually much weaker than a frontier model, and an open model server port can let other devices on your network use it.
- Makes sense when: the material is private, your computer has the memory for a model that can use tools, and the port is not reachable from outside your home network.
Projects, agent profiles, and memory cleanup
What it is for. A project gives one kind of work its own files, instructions, memory, secrets, and model settings, so a client job never sees your personal notes. An agent profile sets a role and turns tools on or off. Memory is what Agent Zero has learned, and the Memory page lets you review it.
To make a project:
- Open Projects from the dashboard and click Create project.
- Give it a title, a short description, and plain instructions. Agent Zero's own example includes "Keep generated files inside this project unless I ask otherwise".
- Save it, open a chat, and choose the project from the project picker in the top right.
What you should see the chat shows the project as active, and files the agent makes land in that project.
To make a careful profile:
- Open the profile menu beside the chat input and click Manage agents, then Create agent.
- Set each tool to On, Default, or Off. A cautious start turns off the tool that runs terminal commands and code, and the text editor's Write and Patch actions.
- Save the profile and pick it for chats that only need to read and summarize.
What you should see the new profile appears in the profile menu, and its tool settings show those tools as Off.
Agent Zero's docs add a limit: "Tool permissions control those tool calls; they are not a filesystem sandbox". The same docs say an agent with terminal access can still write files even when the editor's Write action is off, which is why step 2 turns the terminal off too.
To clean up memory, back up first with Settings → Backup & Restore. Then open Memory from the dashboard, search for old test entries or facts that are no longer true, and edit or delete them. The docs say "A stale or incorrect memory can poison the processing instead of helping it," so this is the first place to look when the agent keeps repeating a mistake.
What you should see the entries you deleted no longer appear when you search Memory again.
- You gain: cleaner answers, private material kept apart by project, and agents that cannot use tools they do not need.
- You risk: a privacy risk if you put secrets in the wrong project, because project tasks use that project's secrets. Deleting memory without a backup cannot be undone, and backups may not include every secret.
- Makes sense when: you keep a copy of each important secret yourself, and you back up before any large cleanup.
Add-on servers and plugins
What it is for. MCP servers and plugins add new tools, such as control of a browser or a link to another app. Agent Zero lists them on the MCP/A2A tab in Settings and in the Plugin Hub.
To add an MCP server:
Open Settings, click the MCP/A2A tab, find External MCP Servers, and click Open.
Paste the server's settings in JSON. This example from Agent Zero's docs adds a browser debugging tool:
{ "mcpServers": { "chrome-devtools": { "command": "npx", "args": ["-y", "chrome-devtools-mcp@latest"] } } }Click Apply now.
To limit which profiles can use it, open the profile with Edit agent, go to MCPs, and set the server On or Off.
What you should see the server shows a green status and a count of
its tools. A server that runs on your own computer, rather than in the
container, needs host.docker.internal in its address.
For plugins, open Plugins and use Browse or Install to reach the Plugin Hub. Agent Zero's docs ask you to read each plugin's "description, README, permissions, and source link" before you install it, and to back up before plugin experiments.
- You gain: new kinds of jobs without writing code.
- You risk: every server and plugin is code that runs with the agent's access, and one that reads email or web pages brings prompt injection with it. Real keys pasted into settings that you later share or publish are a privacy risk.
- Makes sense when: you trust the package or its source, and a job truly needs it. It should not be able to send, post, or pay for you, and it should be off in profiles that do not need it.
Host access, done carefully
What it is for. Host access lets Agent Zero use files, commands, a browser, or Computer Use on your real computer instead of only inside its container. It starts off, and every earlier page keeps it off. The folder you pick sets where work starts, but Agent Zero's docs say it does not restrict commands to that folder.
Use a second instance with its own workspace for this, so your everyday Agent Zero is never the one with Host access.
- Back up your everyday instance first, using Backup
/a0/usron its card under Instances in Launcher. - Make a new folder on your computer, such as
agent-work, and copy in only the files for the job. - In Launcher, open Installs, click Run, open Advanced, and under Workspace storage choose Create folder named after Instance. Agent Zero's docs say to "Use a separate workspace for each running Instance".
- Open the new instance with Open UI, click the
computer icon beside its name in the Launcher tab bar, choose the access
you need and the
agent-workfolder, and click Save. - Leave Browser and Computer Use off unless the job needs them.
- When the job is done, close that instance's tab, which stops Host access.
What you should see the new instance can list the files in
agent-work, and your everyday instance still says Host
access is off.
- You gain: the agent can work on real files and real programs on your computer.
- You risk: the container is no longer the wall. A command can reach anything your account can, and a page with hidden instructions can now reach your real files.
- Makes sense when: you are watching the run, the folder holds copies with a backup, and the agent is logged out of everything. It does not make sense for scheduled tasks or for chats reachable from your phone. Host access and unattended runs adds a separate account or a virtual machine for a stronger wall.
The Flare tunnel, behind a login
What it is for. The Flare tunnel gives your Agent Zero web page a public web address, so you can use it from your phone or another place. Agent Zero's docs warn that "anyone with the tunnel URL can try to open your instance".
- Open Settings → Authentication and set a UI
Login and a strong UI Password. If you
installed with a login and no password, the installer's default password
is
12345678, so change it now. - Click Save, then open the page in a private browser window to check that it asks you to log in.
- Open Settings → External Services → Flare Tunnel and click Create Tunnel.
- Copy the web address it shows and open it on your phone.
- When you are done, stop the tunnel on the same screen.
What you should see the address starts with https://,
and it shows the Agent Zero login page before anything else.
Agent Zero's docs put it plainly: "Always set a username and password in Settings -> Authentication before creating a tunnel".
- You gain: the full Agent Zero page from your phone, without the phone add-ons.
- You risk: anyone who finds the address can try your password, and a weak or default password gives a stranger an agent with your keys. With Host access on, that stranger could reach your real files.
- Makes sense when: the password is strong and unique, Host access is off in that instance, and you stop the tunnel when you are not using it. A tunnel left running all the time belongs on An always-on machine, which covers the other ways to stay reachable.
Shared advanced topics
These pages cover setups that work with any agent in this guide. Each one applies to Agent Zero.
- Local models: Agent Zero
reaches Ollama and LM Studio through
host.docker.internal, and this page helps you size a model to your RAM. - Mix a cheap model with a strong one: model presets are Agent Zero's way to do this, and the page has the price math and the spend limits.
- Host access and unattended runs: Host access and scheduled tasks, with backups, separate accounts, and logs.
- An always-on machine: scheduled tasks and phone add-ons only work while the computer stays on.
- Subscription sign-ins: the terms, ban risk, and billing for using a chat plan instead of an API key.
- Relays: services that pass your requests to other model companies, with their fees and privacy terms.
- Uncensored models: hosted models whose refusals have been removed, what they cost, and why most readers should skip them.
Sources
Checked 14 November 2026.
- Model Presets guide: the preset menu, Edit Presets, the starting presets, and Settings → Agent → Models.
- Installation
guide: the model roles and the memory index. It also covers
host.docker.internal, local server ports, trusted clients, Utility model testing, Authentication, and the tunnel warning. - Local model tool use: the Tiny Local profile.
- Usage guide: projects, memory cleanup, the stale-memory warning, and plugins. It also covers tunnels, secrets, and Settings → Backup & Restore.
- Agent Profiles guide: tool permissions and the filesystem warning.
- MCP Setup guide: the example, Apply now, the status check, and profile MCP settings.
- Launcher guide: instances, backups, workspace storage, and Host access.
- A0 installer README: the installer's default password.
- The hybrid notes: prices for the cheap and strong split.
Next
Next: Persona and rules.