Agent automation that you control.

Open source. Any model, any pattern, any budget.

Everything a production workflow needs.

Triggered however your work happens, running on any model, at a cost you set. One file, one control plane.

Triggers
Cron 0 9 * * 1-5
Webhook
GitHub · PR opened
Slack message
Human approval
Workflow call

Triggered by anything

A schedule, a webhook, a pull request, a Slack message, or a person clicking approve.

Model
claude-opus-4.8
gpt-5.5
glm-5.2
gemini-3.5-flash
See all models

Any model, your keys

Anthropic, OpenAI, Google, or your own model on any OpenAI-compatible endpoint. No lock-in.

This month
Spend cap$1.47 / $5.00
Tokens1.2M in · 340K out
Compute4m 12s
within budget

A cost you control

A hard budget cap on every workflow and key, transparent metering, and your choice of runner.

Build production-ready workflows in seconds.

Describe what you want and watch it ship. In the Builder, or with the coding agent you already use, Claude Code, Cursor, or Codex.

Cost and compute, under your control.

Choose a model per call, cap spend per workflow and per key, and pick the runner that fits, hosted or your own hardware. No opaque credits, no surprise bills.

See pricing

A workflow is just a file.

morning-digest.ts
export const meta = {
  slug: "morning-digest",
  triggers: [{ kind: "cron", expr: "0 9 * * 1-5" }],
  permissions: { secrets: [{ name: "GITHUB_TOKEN" }] },
};

const token = await secrets.get("GITHUB_TOKEN");
const issues = await fetchIssues(token);

// the model writes; it never sees the secret
const digest = await agent(`Summarize:
${issues}`);
output(digest);
  1. Design the workflow

    Real TypeScript, where one agent() call grows into many: loops, swarms, and tournaments.

  2. Deploy it

    boardwalk deploy and it is live on a schedule.

  3. It runs

    For as long as the work takes. Live-tail it, keep the full record.

Secure by default.

Every run is isolated in its own VM, with no standing credentials, secrets scoped to your org, and all traffic leaving through an egress proxy: internal networks and cloud metadata are always blocked, and any workflow can be locked to an allowlist. Runs reach your own AWS, GCP, or Azure with per-run OIDC identity instead of stored keys. Run them on our cloud, or self-host the runner on your own hardware.

How isolation works

Open source. All of it.

The engine, SDK, and CLI are Apache-2.0 and MIT on GitHub. Read every line, run it on your own hardware, and leave anytime.

Put your team in control.

Transparent pricing. Pay for the compute and tokens each run uses.