Skip to content

Open-source control plane
for AI Agents

Issue 01
Owner edition

Give Agents
a mandate.
Not a master key.

Crewhelm creates and operates long-lived Agents on your Cloudflare account—with exact capability grants, immutable revisions, budgets, approvals, and a complete audit trail.

For people who want useful Agents
without becoming platform operators.

01 / A run, made legible

Routine work moves.
Authority boundaries hold.

AUTHORITY LEDGER

research-brief

ACTIVE
Agent revisionrev_7c91a4IMMUTABLE
github.search_codeRead scope · standing grant
ALLOWED
slack.send_messageExternal side effect · owner review
APPROVAL
github.delete_branchDestructive action · no grant
DENIED
Run budget18 / 50 steps
RUN RECEIPT#0841 · COMPLETED
DISPATCHSINGLE · VERIFIED

Tool visibility is not authority. Every action is checked against the exact Agent revision, grant, limits, and run context.

02

An Agent should
work for you.

I.

Own the control plane.

Deploy Crewhelm to your Cloudflare account. Keep durable state, policy, and operational control in infrastructure you own.

II.

Grant the minimum.

Connections and capability grants are explicit. Provider credentials remain in Composio; Agents receive bounded use, never the keys.

III.

Let routine work run.

Schedules and manual runs dispatch once, observe budgets, and proceed within standing authority—without asking you about every harmless step.

IV.

Make every stop recoverable.

Approve, deny, disable, revoke, retry, and inspect. When judgment is required, work pauses with context instead of improvising permission.

03

Your infrastructure.
Clear lines of custody.

Cloudflare owns durable execution. Composio holds provider credentials. Crewhelm owns the authority between intent and action.

01 · OPERATEClaude / CodexMCP client
signed request
02 · CONTROLCrewhelmyour Cloudflare
authorized dispatch
03 · ACTAgent / Tool Gatebounded run
scoped capability
04 · CONNECTComposiocredentials stay here
WorkersDurable ObjectsThinkWorkflowsStorage
04

Bring up
your helm.

Run the guided installer from a terminal authenticated with Cloudflare. Crewhelm provisions the control plane, then verifies what came up.

Read the documentation
~/crewhelm
$ npx @crewhelm/cli@beta up

You own what comes up.

Stop renting trust.

Run Agents
with boundaries.

Explore Crewhelm on GitHub