惯性聚合 高效追踪和阅读你感兴趣的博客、新闻、科技资讯
阅读原文 在惯性聚合中打开

推荐订阅源

宝玉的分享
宝玉的分享
小众软件
小众软件
J
Java Code Geeks
I
InfoQ
奇客Solidot–传递最新科技情报
奇客Solidot–传递最新科技情报
腾讯CDC
L
LangChain Blog
博客园 - 司徒正美
量子位
Y
Y Combinator Blog
C
Check Point Blog
T
Tailwind CSS Blog
D
DataBreaches.Net
Blog — PlanetScale
Blog — PlanetScale
N
Netflix TechBlog - Medium
钛媒体:引领未来商业与生活新知
钛媒体:引领未来商业与生活新知
F
Fortinet All Blogs
云风的 BLOG
云风的 BLOG
A
About on SuperTechFans
B
Blog RSS Feed
酷 壳 – CoolShell
酷 壳 – CoolShell
大猫的无限游戏
大猫的无限游戏
V
V2EX
阮一峰的网络日志
阮一峰的网络日志

Hacker News: Show HN

PurrrrrFocus: Pomodoro Timer App - App Store Workflow Engine — Multi-Step Orchestration for Bun RapidPhoto: Pro Photo Editor App - App Store GitHub - DheerG/swarms: Achieve extraordinary results with claude code across a variety of tasks SPICE simulation → oscilloscope → verification with Claude Code — Lucas Gerads Show HN: VCoding – A 5 MB native Windows IDE with no dynamic dependencies Show HN: LLMs don't hallucinate because they're bad at math, it's the format GitHub - Agent-FM/agentfm-core: AgentFM is a peer-to-peer network that turns everyday computers into a decentralized AI supercomputer. AgentFM lets you run massive AI workloads directly across a global mesh of idle CPUs and GPUs. Show HN: Tracking Top US Science Olympiad Alumni over Last 25 Years GitHub - Potarix/agent-hub: One place to talk to all your agents Show HN: Runtime security for AI agents(injection,tool abuse, data exfiltration) GitHub - dubeyKartikay/lazyspotify: Terminal Spotify client for macOS and Linux GitHub - the-banana-tool/king-louie: Easy to use GUI Personal AI Assistant. Win/Linux/Mac. Show HN I made my vacation rental bookable by AI agents–no Airbnb, 0% commission GitHub - basteez/jsf-autoreload: maven plugin to enable hot reload on jsf projects uvm32/hosts/host-gdbstub at main · ringtailsoftware/uvm32 GitHub - labsai/EDDI: Config-driven engine that turns JSON into production-grade AI agents. Multi-agent orchestration, 12+ LLM providers, MCP/A2A protocols, RAG, persistent memory, and enterprise compliance (EU AI Act, GDPR, HIPAA). Built on Quarkus. GitHub - glitchnsec/fortyone-oss: AI Executive Assistant Platform Quickstart | Alien GitHub - muxshed/shed: One stream in, or many. Every destination, simultaneously. No cloud middleman, no per-channel fees, no limits. GitHub - ocrbase-hq/ocrbase: 📄 PDF/IMG ->.MD/JSON Document OCR API for PaddleOCR and GLMOCR. Self-hostable. GitHub - impactjo/home-memory: MCP server that lets your AI assistant remember everything about your home. GitHub - Sets88/dbcls: DbCls is a powerful terminal database client that supports various databases GitHub - neptun2000/heor-agent-mcp GitHub - SeanFDZ/macmind: Single-layer transformer in HyperTalk for the classic Macintosh RollQuation: Math Puzzles - Apps on Google Play GitHub - dropbox/witchcraft Show HN: Agent-cache – Multi-tier LLM/tool/session caching for Valkey and Redis GitHub - opentalon/opentalon: OpenTalon is an open-source platform built from the ground up in Go as a robust alternative to OpenClaw LinkedIn™ 职位抓取工具 - Chrome 应用商店
agentry — self-hosted infrastructure for AI-built apps
winash83 · 2026-06-22 · via Hacker News: Show HN

Infrastructure for AI-built software

Run the internal tools your AI builds — on servers you own.

agentry is the runtime, connection, and deploy layer underneath your AI coding agent. Point any agent at a Linux box you control; agentry gives it a sandbox to work in, ships what it builds as a real container, and serves it at a URL — without your code or data ever leaving your hardware.

Free in early access · bring your own model, no token markup · macOS & Linux. Read the docs →

Any AI agent Claude Code · Cursor Roo · the dashboard Your model Claude · GPT · Gemini open weights agentry Your server Isolated containers Docker crm docs api ops your-app.agentry.live

What agentry is

Not an app builder. The infrastructure underneath one.

The AI writes the code. agentry is everything that makes that code into running software on your own machines — and it works with whatever agent you already use. Three layers, one connection.

Sandbox

Somewhere real to work

An isolated environment on your server with a filesystem, a shell, package managers, and any databases or keys you wire in — so the agent builds against the real thing, not a stub.

Connection

A URL with no open ports

An end-to-end encrypted link carries traffic between agentry and your server, so apps get an HTTPS URL anyone can reach while the machine itself stays off the open internet. No DNS, firewall, or certs to manage.

Runtime & deploy

Build once, run, roll back

Every deploy is a container image kept in your registry. Ship an update or roll back to any previous build in a click — the URL and custom domain stay put. Take the image and run it anywhere.

Harness-agnostic by design. If it speaks MCP, it works — the CLI exposes one server, agentry mcp, and your agent picks it up like any other.

Internal apps

Build internal tools without handing your data to anyone.

Most of the software a team actually needs is internal — dashboards over a production database, admin panels, tools that touch customer records. Putting those on a hosted builder means routing your data, or a tunnel to it, through someone else's cloud. agentry doesn't.

Runs next to your data

The app sits on your own server, right beside the database it reads. The connection to your data never leaves your network.

Nothing exposed

Your machine opens no inbound ports — there's nothing on it for the internet to scan, find, or attack. It works behind a firewall or NAT.

Locked to your team

Make a deployment org-only with one setting, or add real user logins — email/password and SSO with Google, GitHub, Microsoft, or any OIDC provider — with no auth code in your app.

How you use it

From empty server to live app, in three steps.

The first step takes a minute. The rest is just prompting your agent and clicking deploy.

1

Connect a server

Paste one line on any Linux box — your laptop, a $5 VPS, bare metal. It connects over an encrypted link and registers in seconds. No DNS, no firewall rules, no certificates.

2

Point your agent at it

Wire up Claude Code, Cursor, Roo, or any MCP client once, then just ask: "use agentry to build me…". It works in a real sandbox on your server.

3

Ship it

One click builds a container, runs it on your server, and hands back a public URL. Roll back, add a domain, or move it to a bigger box whenever you like.

🔒 encrypted 🔒 end to end 🔒 encrypted You Cursor · Claude Code · Roo talking MCP to the CLI agentry mcp agentry Your server laptop · home box · VPS running your sandbox + app No inbound ports Works behind a NAT, firewall, mobile hotspot. your-app.agentry.live Public URL for what you build — served on the same connection.

Automations

Write automations by describing them.

Tell your agent what you want — a morning report, a webhook that files incoming data, a nightly backup. It writes the automation, runs it on your server, and records every run.

Describe it, don't build it
Plain language in, a running automation out. You never touch cron syntax or webhook plumbing.

Runs on your infrastructure
Your server, your database. The automation lives with the app it belongs to — same code, same data, same deploy.

Every run, recorded
A built-in dashboard shows every run and webhook delivery — status, payloads, Run-now, and Replay.

How automations work →

Things you can say

  • "Post our open PRs to Slack every weekday at 9."
  • "When Stripe says a payment succeeded, log it and ping Slack."
  • "Every 5 minutes, check our endpoints and alert me if one is down."
  • "Back up the orders table to S3 every night."

More examples →

Everything it does

The unglamorous parts of shipping — handled.

The agent writes features; agentry covers the platform work that usually eats your week. None of it leaves your server.

Instant deploys & rollback

Every deploy is saved as a versioned image. Ship an update, or roll back to any past build in a click — same URL, seconds later.

Custom domains

Serve from app.yourco.com. Add a couple of DNS records; HTTPS certificates are provisioned and renewed for you.

Built-in authentication

Put a login on any app — email/password plus Google, GitHub, Microsoft, or any OIDC provider. Your code reads the user from a header; you write no auth.

Services, wired once

Bind Postgres, Redis, S3, a vector store, or an AI key to your server once — every app the agent builds picks up the credentials automatically.

One-click server updates

Keep the agentry runtime current from the dashboard. It pulls the latest, swaps itself in, and rolls back automatically if anything looks wrong.

Many servers, many apps

Prototype on your laptop, ship to a production box, keep a staging host on the side. Switch between them in a click; bindings follow each server.

The economics

One server. Every app. A bill you control.

agentry itself is free. You have exactly two costs — and both stay small, because one machine hosts everything and you pay your AI provider directly, at cost.

Hosting · flat, shared across every app

The number that matters: this is per server, not per app. Ten internal tools on one CX22 is still ~$5/month. Per-app platforms bill you again for every app — and again for each add-on database. Build twenty tools here and your hosting bill doesn't move.

AI · pay your provider directly, no markup

You bring the key; agentry never resells tokens or adds a margin. Because you choose the model, you choose the price — prototype on something cheap, switch to a frontier model only for the hard parts, no re-wiring.

Rough figures, early 2026 — check each provider for current rates. Want the worked-out example? See the cost breakdown →

Security model

Zero trust, by the textbook definition.

Every request authenticates. Every connection is encrypted. Nothing is trusted because of where it came from. agentry sits in front of your server, not on it — and four properties keep it that way.

End-to-end encrypted, verified on every request, with no implicit trust by network location.

  1. 01

    Per-device identity

    Every device and every server authenticates with its own certificate — no shared passwords or API keys. Lose a laptop? Revoke that one device. Everything else stays live.

  2. 02

    Your server stays private

    agentry handles the public-facing side. Your server doesn't. No port forwarding, no public IP, no SSH key handed to a third party.

  3. Every certificate carries an organization identifier, checked on every request. One company's sandboxes and apps are unreachable from another's connection — even with a perfectly valid device cert.

  4. Sandbox created. Server enrolled. Deploy started. Device revoked. Every state change lands in your organization's audit log with the actor, IP, and timestamp — nothing to turn on.

Why agentry

You keep everything.

Other AI builders host your app, hold your data, and meter your usage. agentry is the opposite bet: it's the front door, and your machine is the house. Bring your own model, your own server, your own data — and keep all three.

You own it

Code, data, and the running apps all live on hardware you control. Turn agentry off and nothing moves — it was already yours.

Zero lock-in

Every app is a standard container. Take the image and run it on any Docker host, with or without us. No data to extract, no export wizard.

Zero trust, end to end

Per-device certificates, mutual TLS on every hop, per-org isolation, audit by default. Your server never opens an inbound port.

Free, genuinely

No metered tier, no token markup, no per-app fee. You pay your server provider and your model provider — nothing to us.

Bring a server.

Free in early access. Your code, your data, your apps — yours to keep.