Creance

grant · act · record · expire

Fly your agents.Keep the keys.

The stationmaster's register for agents that ship.

Creance is one small keeper on your own machine. It holds the only long-lived trust, hands your agent a narrow short-lived key at the moment it needs to ship, watches every act through one gate, and writes it all to a ledger you can read at a glance.

Read the docs

Free on your own machine, forever. No account needed for the local tool.

The problem

Your agents are better than you at the building now. What they can't be trusted with is the keys. So you burn the hours in dashboards: minting tokens, wiring deploys, rotating secrets across a hundred projects.

The building got cheap. The admin didn't.

The loop

Four lines, and the register writes every one of them itself.

01
grant
A narrow, short-lived key at the moment the agent needs to ship. Nobody gets a long-lived token.
02
act
Every action passes one gate, and the gate can perform the act itself so the credential never leaves the keeper.
03
record
One honest ledger: every grant, act and expiry lands as a stamped, hash-chained line, reconciled against each platform's own audit log.
04
expire
The key dies on its own. Revoke everywhere in one motion, and it completes locally even if a platform is unreachable.

Three words that get confused, including by us

Creance holds your keys. That's the product. What it never does is host them.

Custody
who holds the long-lived credential
Creance, sealed, on hardware you control
Hosting
whether a server we run holds it
never: there is no such server, by design
Delivery
who holds a credential at the moment of use
ideally nobody: the Gate performs the act so the credential never leaves the keeper. Failing that, something short-lived and narrow

The plane may request, never command

Drive your fleet from anywhere. A request for an act travels as sealed ciphertext through the relay to the machine that holds the credential. That machine decides under its own signed policy, and destructive acts always wait for you.

No credential, no key, and no decision ever leaves your box.

Tiers

The tool is whole at the first column. The others sell the operating of it.

Local

Free, forever · no account

  • The whole tool on your machine.
  • Your ledger, your kill switch, nothing leaves the box.
  • Self-host the relay too; it's all Apache-2.0.

Solo

~$5 / month · early access

  • One person, unlimited devices.
  • Encrypted sync the relay can never read.
  • One eye across every machine.
  • Drive-from-anywhere requests.

Team

~$8 / seat / month · early access

  • Everything in Solo, for many people.
  • Shared policy and multi-owner custody.
  • Offboarding that rotates the key.

The hosted relay is the same open-source code, operated for you. It stores ciphertext it cannot read. Self-hosting is free, always.