You buy it. You run it.
A self-hosted agent can mean a Mac mini, cloud instance, or internal server. Either way, somebody owns uptime, credentials, updates, logs, browser sessions, and the fix when a workflow breaks.
The real choice is whether your team wants to own the runtime, maintenance, and recovery work that comes with keeping an agent useful.
A self-hosted agent can mean a Mac mini, cloud instance, or internal server. Either way, somebody owns uptime, credentials, updates, logs, browser sessions, and the fix when a workflow breaks.
CoSMO is configured around the workflow, hosted as a managed service, and kept available in the channels people already use. Your team reviews consequential work without inheriting an infrastructure project.
Self-hosting also needs secrets management, monitoring, recovery, access reviews, and someone who knows the agent well enough to troubleshoot it. That cost usually appears after the demo.
Good managed agents still use scoped permissions, clear records, and approval rules. CoSMO can prepare work and stop where human judgment matters.
The CoSMO audit identifies the operations bottleneck and approval boundary for a useful first agent job.
Take the ops auditA useful agent needs a place to run, a way to reach approved tools, a record of what it did, and a safe way to stop when context is missing. A demo can skip most of that. Day-to-day work cannot.
Someone needs to decide where the agent runs, restart it after failures, keep software current, and notice when scheduled work did not happen.
Tool access is not a one-time setup task. Tokens expire, permissions change, accounts move, and an agent should not quietly retain more access than it needs.
When a task stops halfway through, the team needs to know what happened, what changed, and whether it is safe to try again.
That is the clearest test of a DIY setup. A self-hosted agent can be perfectly reasonable when there is a named technical owner who has time, authority, and a reason to operate it. It becomes less reasonable when the answer is a marketing lead, a founder, or the person who first got it running on a Friday afternoon.
The problem is not that a Mac mini is bad hardware. The problem is that hardware creates an ownership story. Someone becomes responsible for network changes, OS updates, browser sessions, encrypted secrets, access requests, and the strange little failures that arrive after a system has been used for a month. The work is real even when it does not show up on a budget line.
Business teams do not need an agent to look magical. They need it to be clear. A good operating model tells the team what sources the agent used, what it prepared, what it could not verify, and where it stopped for approval. This is how an agent earns more responsibility over time.
Self-hosting does not prevent that. It simply means the team must build or maintain those habits and surfaces itself. A managed model should provide them as part of the service. If an agent sends a result with no evidence, changes something without a trail, or fails silently, the team will stop using it no matter how smart the model is.
A safe agent setup begins with scope. What can it read? Which tools can it use? What does it prepare by default? Which actions always need a person? Those answers matter more than whether the box is in an office or a cloud account.
For teams evaluating a managed service, ask for plain answers about access, records, failure handling, and how permissions are changed. For teams evaluating self-hosting, ask the same questions internally. The technology choice does not erase the operating work. It only decides who carries it.
There are teams that should build and operate their own agent environment. They may have a platform engineering group, a mature security program, specialized deployment requirements, or a product reason to make agent operations part of their core capability. Those teams are not looking for a shortcut. They are making an investment.
The mistake is treating every team as if it has that same reason. If the goal is to reduce manual marketing work, get a reviewable draft faster, or keep a workflow from falling through the cracks, a managed agent often gets there with far less overhead.
Choose self-hosting when owning the platform is part of the strategy and the team has clear operational ownership. Choose a managed agent when the goal is to get useful work moving without turning the business team into the support desk. Start with a workflow that has a clear input, a reviewable output, and a meaningful human approval point.
The right first job is usually unglamorous. It may be gathering context for a launch, checking a set of pages, preparing a follow-up, organizing a decision brief, or keeping a handoff from going cold. Those jobs create proof. After that, the team can decide whether more access or more automation is warranted.
The fastest way to make a bad decision is to start with a broad promise like “handle our marketing operations.” Start smaller. Pick one workflow with a known source of truth, a repeatable next step, and a person who can judge the result. For example, the agent can gather recent account context and prepare a follow-up draft, check a set of live pages against a brief, or turn a meeting into owners and next steps.
In a self-hosted model, that first workflow is also a test of the team’s ability to operate the environment. Can it reliably access the right systems? Does it preserve a clear record? Who responds when the scheduled run does not finish? In a managed model, it is a test of the service. Does the provider help define the work, configure the rules, and keep the agent useful after the first version?
Either way, do not measure success by how autonomous the agent appears. Measure whether people trust the output, whether the review step is clear, and whether the workflow actually removes a recurring piece of manual coordination. That is a much better basis for deciding what the agent should carry next.
Write down the name of the person or team who owns the agent when it is unavailable, when an access request arrives, when a scheduled workflow does not complete, and when the workflow itself needs to change. If that owner is clear and resourced, self-hosting may be a sensible choice. If nobody can take that on without dropping their actual job, the managed route is probably more honest.
Then write down the first workflow in plain language. What starts it, which sources it needs, what finished work looks like, and where a human must decide. This turns a deployment choice into an operating choice. It also makes it much easier to compare a DIY setup with a managed service on the thing that matters: whether the agent takes real work off the team’s plate.
A DIY setup can give a team access quickly. Operating it well is the longer commitment. A managed model can give the team the same kind of capability while moving the runtime, maintenance, and recovery burden to a provider. The better choice is the one that leaves the right people responsible for the right work.
A self-hosted AI agent is run and maintained by the team using it. That team owns the hardware or cloud runtime, access, credentials, updates, monitoring, and recovery.
A managed AI agent is configured and operated for the customer. The provider owns the runtime and maintenance while the customer keeps approval over consequential work.
The hardware or cloud bill can look cheaper, but the relevant cost includes time to configure, monitor, repair, secure, and improve the system.
It can fit a team with a technical platform group, strict internal deployment requirements, and a reason to own agent operations as a core capability.
Use the audit to turn an agent idea into a reviewable starting workflow.