Appstrate
[Autonomous agents, sandboxed]

Give your agents a goal. They do the rest.

The open-source Agent-as-a-Service platform.
Autonomous, sandboxed, sovereign by design.

Linux · macOS · Docker 20+Inspect the script →
[What Appstrate is]

The bolt. The brackets.

Appstrate mark
⚡ The bolt

The agent.

Autonomous, goal-driven, powered by the LLM of your choice. It reasons, calls tools, returns structured output.

[ ] The brackets

The sandbox.

Docker isolation per run. Sidecar proxy for credentials. RBAC, audit logs, rate limits.

Input
Goal + data
Sandbox
⚡ Agent
Tools
Providers
Memory
Output
Structured JSON + trace

Built on the open AFPS standard — portable, versioned, runnable on any Appstrate instance.

[01 · Why Appstrate]

Workflows break the moment reality doesn't match the diagram.

Most AI platforms ask you to describe work as a graph: if this, then that, unless that. It works until it doesn't. Autonomous agents skip the graph — define the goal, give the tools, the agent figures out the path.

And they don't fan out. When 100 tickets arrive at once, you queue them up. Agents run isolated in sandboxes — fire 100 in parallel, done in seconds. No queueing layer to build.

0
node editors
0
branches to maintain
0
concurrent runs, by default
adaptations, no re-deploy

[02 · How it works]

Goal in. Work out.

1. You define the agent

A prompt, a goal schema, the tools it can use. That's it — no node editor.

2. Appstrate runs it in a sandbox

Every run spins up an isolated Docker container. Credentials stay in a sidecar proxy, never in the agent's context.

3. You get structured output

JSON you can use. Plus a full trace: every tool call, every reasoning step, every cost.

Inputemail
Subject: Refund on order #A-8421

Hi — my package on order #A-8421 never arrived. Tracking says "delivered". Could you refund? Thanks.

Sandbox
agent.refund-triage@v1
  • mail.read0ms
  • orders.get(#A-8421)0ms
  • refund.check_policy0ms
Outputstructured JSON
{
  "decision": "approve",
  "amount": 42.00,
  "currency": "EUR",
  "reason": "Non-delivery confirmed",
  "trace_id": "run_7k3x9p"
}

[03 · Built for developers]

The Stripe-for-agents API you wish you had.

🧠

Autonomous agents

Goal-driven reasoning with your choice of LLM (Claude, GPT, Llama).

Learn more →
📦

Sandboxed execution

Isolated Docker per run. Credentials never leak into the agent.

Learn more →
🏢

Multi-tenant headless

Applications + end-users + impersonation. Built for SaaS from day one.

Learn more →
🔌

Dozens of providers + any you build

Gmail, Slack, Stripe, Notion ready. Add your internal API or any HTTP service in 2 minutes — no code.

Learn more →
🔒

Sovereign by design

Self-host on your hardware. Works offline with Ollama/llama.cpp.

Learn more →
🪝

Stripe-grade API

Date versioning, idempotency keys, RFC 9457 errors, Standard Webhooks.

Learn more →

[04 · Use cases]

Agents that ship, not demos that linger.

Support triage

Classify tickets, check policy, draft replies, escalate edge cases.

Learn more →

Sales enrichment

Scrape public sources, enrich CRM fields, score accounts nightly.

Learn more →

Ops automation

Monitor queues, restart stuck jobs, post to Slack on thresholds.

Learn more →

[05 · Works with the stack you actually have]

If curl can call it, an agent can.

Real companies don't run on Gmail and Notion. They run on a 2011 ERP, a mainframe with a REST façade, a partner API delivered as a PDF, and an internal Rails app one team maintains. Any HTTP endpoint with OAuth, API key, Basic, or custom auth becomes an Appstrate provider — in 2 minutes, no code, sidecar-isolated.

🏛️

Legacy backends

Your 2008 ERP with a REST façade. Your SOAP-over-HTTP adapter. Your on-prem middleware.

Learn more →
🤝

Partner & B2B APIs

The endpoint your biggest client sent you as a PDF. The vendor with 12 customers and zero SDK.

Learn more →
🏢

Internal services

Your Flask app on one VM. Your homegrown intranet API. URI allowlist + SSRF protection.

Learn more →

[06 · Sovereign by design · No vendor lock-in]

Your agents. Your infrastructure. Your rules.

Sovereignty isn't a promise — it's a structural property of the platform. Four layers of portability, built in from day one.

Any model

Claude, GPT, Llama, or your local model via Ollama, llama.cpp, vLLM. Bring your own keys. Switch anytime.

Any infrastructure

Cloud, self-hosted in 2 minutes, on-prem, fully offline air-gapped. Same binaries. Same agents.

Open standard

Agents are AFPS packages — manifest + prompt. Portable artifacts you own. Move them anywhere.

Open source

Apache 2.0. Fork it. Audit it. Leave with everything via the export API. No feature gates.

Ready to ship your first autonomous agent?

Self-host in 2 minutes. Or start on Cloud — 50 free credits, no card required.

Linux · macOS · Docker 20+Inspect the script →