Stakpak

Description

Stakpak is an open-source AI DevOps agent that ships and maintains your production apps on autopilot. It runs as a single long-running process on your own machines that combines scheduling, messaging, and a local API, installs as a system service, and persists across reboots. You can drive it interactively through a terminal TUI, let it run autonomously in the background, and watch its schedules, channels, and recent activity.

Stakpak is built for running apps in production, where a wrong move means downtime, data leaks, or a large bill, so it uses a different trust model than coding agents. It auto-heals incidents (for example, detecting idle database connections and restarting an app), scans for cost savings like idle instances and orphaned volumes, and defuses time bombs such as expiring TLS certificates, secrets, deprecated APIs, and end-of-life runtimes. Security is central: a network sandbox called Warden routes every network request through a transparent proxy with Cedar policies, secret substitution detects 210+ secret types and swaps them with placeholders before the LLM sees them, and full session audit logs record every action with backups before modification so you can replay sessions and roll back. It is written in Rust under Apache 2.0 and runs entirely on your machines with mTLS encryption.

Stakpak scales by how many apps you manage rather than headcount. You can use a unified LLM Gateway for simple billing across Claude, GPT, Gemini, and more, or bring your own API keys with the same platform features and no token markup. Plans range from a free open-source tier through individual and team plans up to unlimited apps with self-hosting support.

Stakpak's Core Features

• Open-source AI DevOps agent that runs on your machines 24/7

• Interactive TUI plus autonomous background operation

• Auto-healing of production incidents

• Cost watchdog for idle instances and orphaned resources

• Automatic renewal of expiring TLS certs and secrets

• Warden network sandbox with Cedar policies

• Secret substitution for 210+ secret types before the LLM sees them

• Full session audit logs with backups and rollback

How to use Stakpak?

1. 1

   Install and init: Install Stakpak and run stakpak init so it discovers your stack and generates APPS.md.

2. 2

   Put apps on autopilot: Run stakpak up and let the agent drive.

3. 3

   Choose billing: Use the unified LLM Gateway or bring your own provider API keys.

4. 4

   Monitor: Watch schedules, channels, and recent activity, and step in when the agent asks.

Stakpak's Use Cases

• Auto-healing incidents
• Cloud cost reduction
• Cert and secret renewal
• Safe autonomous DevOps
• Terminal-driven operations

FAQ from Stakpak

• What is Stakpak?

  It is an open-source AI DevOps agent that lives on your machines 24/7 to deploy and maintain production apps, pinging you only when it needs a human.

• How is it different from a coding agent?

  Coding agents write code; Stakpak runs your apps in production, which needs a different trust model with sandboxing, secret redaction, and audit logs.

• How does it protect secrets?

  Secret substitution detects 210+ secret types and swaps them with placeholders before the LLM sees them, restoring real values only at execution time.

• What is Warden?

  Warden is a network sandbox that routes every network request through a transparent proxy governed by Cedar policies so the agent cannot break things.

• Is it open source?

  Yes. It is written in Rust and licensed under Apache 2.0, running entirely on your machines with mTLS encryption.

• How is pricing structured?

  It scales by the number of apps you manage, with a free open-source tier and individual and team plans up to unlimited apps and self-hosting support.