Back to Gap Map Product / UX / Safety & Guardrails

Coop

ROOST
open source / Overall score: 3.0

Coop is a self-hosted review and moderation console from the nonprofit ROOST, run with Docker Compose. It provides review queues, routing, automated enforcement rules, analytics, and REST/GraphQL APIs, plus a child-safety workflow with HMA hash matching, NCMEC CyberTipline reporting, and OpenAI Moderation and Google Content Safety integrations. It orchestrates AI safety signals rather than being a guardrail model itself. Musubi offers a hosted version.

Openness

5 high confidence
5.0
license
Apache-2.0(OSI)
source
public(github.com/roostorg/coop)
self-host
yes
service
none
core features withheld
no

The whole application, including the HMA hash-matching service it runs beside, is in the public repository and runs on your own infrastructure with Docker Compose, with no paid edition or license key. ROOST runs no hosted service of its own; third parties such as Musubi offer one.

  • https://cdn.jsdelivr.net/gh/roostorg/coop@main/docs/development/docker.md recorded 2026-09-29

    The Docker guide in the Coop repository says prebuilt images "are published to the GitHub Container Registry on every push to" main, and that one command runs the full stack locally: "Pull the published images and run the full stack locally with a single command". Searched the body for enterprise, license key and subscription: none.

  • https://cdn.jsdelivr.net/gh/roostorg/coop@main/LICENSE recorded 2026-09-29

    The LICENSE file at the head of roostorg/coop main is the Apache License text, opening "Apache License" and "TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION".

  • https://cdn.jsdelivr.net/gh/roostorg/coop@main/package.json recorded 2026-09-29

    The root package.json of the Coop monorepo sets the license field to Apache-2.0 and its up script runs "docker compose up --detach postgres clickhouse hma scylla redis", starting the HMA hash-matching service locally with the rest of the stack.

  • https://cdn.jsdelivr.net/gh/roostorg/coop@main/README.md recorded 2026-09-29

    The repository README describes "the open source review and moderation tool from" ROOST, says "Coop is free and open source so your data stays within your infrastructure" and that the codebase is auditable, "with no hidden logic and no vendor lock-in". It adds "Run Coop with a single command using Docker Compose". Searched the body for enterprise, license key, paid and pricing: none.

  • https://github.com/roostorg/coop recorded 2026-08-13

    Repo metadata records license spdxId - Apache-2.0. README says 'Coop is free and open source so your data stays within your infrastructure', that the codebase is 'auditable, with no hidden logic and no vendor lock-in', and runs it 'with a single command using Docker Compose'. No paid tier, enterprise directory or license key on the page.

  • https://roost.tools/coop/ recorded 2026-09-29

    ROOST's Coop page calls it "An open source review and moderation platform for anything that requires decisions at scale" and says it is "Self-hosted, privacy-preserving, and built with reviewer wellbeing in mind". It notes "Coop can also be run as a managed service by third-party providers", naming Musubi as one that "offers a hosted version today".

Adoption

3 medium confidence
3.0

Coop's adoption is read from named production deployments, not repository stars: Cove customers, including Notion, carried over when Coop was open-sourced from Cove, and the 1.0 announcement names a community messaging platform and an unnamed large-scale adopter. The repository's own production list is empty, so these deployments are known only through ROOST's announcements, not the codebase.

Capability

3 low confidence
3.0

Coop covers the review, routing, automation and reporting workflow a trust and safety team runs, including child-safety reporting to NCMEC. It reached its 1.0 release only months after its first public version, so its production record is short.

  • https://cdn.jsdelivr.net/gh/roostorg/coop@main/README.md recorded 2026-09-29

    The repository README lists a Review Console, Content Processing, Analytics ("Detailed insights into moderation effectiveness and trends"), a Rules Engine ("Automated content evaluation against customizable policies") and "Simple REST and GraphQL APIs for seamless platform integration".

  • https://github.com/roostorg/coop recorded 2026-08-13

    README lists Review Console, Content Processing, Analytics, Rules Engine and 'Simple REST and GraphQL APIs for seamless platform integration'.

  • https://roost.tools/blog/coop-1-0-world-s-first-free-open-source-child-safety-infrastructure-for-every-platform/ recorded 2026-09-29

    ROOST's Coop 1.0 announcement, dated June 09, 2026, says Coop v0 shipped "in February, and now, after months of development" and describes 1.0 as a content review and enforcement system "that any organization can configure, self-host, and build on", adding that it "processes content review workflows at scale".

  • https://roost.tools/coop/ recorded 2026-09-29

    ROOST's Coop page lists review across any policy category, with the child-safety workflow adding "hash matching via HMA, NCMEC CyberTipline reporting, and integrations with Google Content Safety API and OpenAI Moderation API". Flagged content "flows into review queues", with "Role-based access controls and routing rules", and users can "Build rules for automation using your signals or route content to manual review".

Verified 2026-09-29