AEONTRA
PUBLIC ALPHA

CONTROL PLANEOPEN SOURCEMCP

Give software agents a defined place to work.

Aeontra is an open-source MCP control plane for repositories, CI, deployments and private Edge workers.

The client requests work. Aeontra enforces the configured boundary and records the result.

Run the public alpha Inspect the source

01 / SYSTEM

One control plane. Four working surfaces.

The public server exposes registered tools. Private execution stays behind administrator-owned roots, policies and credentials.

A.01

Repository work

Read, search, patch and validate inside configured roots. Secret paths remain denied.

  • read_file
  • apply_patch
  • run_tests
A.02

Delivery

Prepare exact plans for publication, pull requests, CI diagnosis, merge and deployment.

  • preview
  • revalidate
  • execute once
A.03

Durable work

Processes, worktrees and task state survive client interruptions without replaying accepted effects.

  • receipts
  • fences
  • cleanup
A.04

Private Edge

Signed outbound workers run beside the repositories and tools they are allowed to reach.

  • Linux
  • WSL
  • Windows

02 / AUTHORITY

Authority is configured before the model arrives.

Policy is loaded by the operator, not written by the model.

MODE / R

Inspect without changing state

Use for first contact, reviews and diagnostics. Reads still pass through roots, bounds, redaction and audit.

01Preview
02Approve
03Revalidate
04Execute once
05Audit

Reduced authority is not absolute safety. Operators still own configuration, credentials, dependencies and recovery.

03 / EDGE

The workspace can remain on your machine.

An Edge device makes an outbound authenticated connection to the control plane. Local paths, tools and credentials stay inside the device boundary configured by its owner.

Linux / Parrot / WSLRootless toolbox and browser harness where supported
Native WindowsSigned service, fixed-drive workspaces and Windows workcells
CLIENTChatGPT / Codex / MCP
HTTPS + OAUTH
CONTROL PLANEAEONTRA
OUTBOUND EDGE CHANNEL
PRIVATE DEVICEEDGE + WORKSPACES

04 / START

Start with a disposable repository.

The smallest evaluation is local, read-only and independent of the maintainer's hosted infrastructure.

LOCAL / READ-ONLYGO 1.26+
go install github.com/charle-z/mcp-devbox/cmd/mcp-devbox@latest
mcp-devbox serve --root /absolute/path/to/disposable-repo --mode read-only

01Public alpha guideInstall, connect, verify, report 02Security modelThreats, boundaries, limitations 03Tool contractRegistered operations and effects

PUBLIC ALPHA / 2026

Useful now. Still operator-owned.

Available

  • Local stdio and authenticated HTTP MCP
  • Repository, GitHub, CI and deployment workflows
  • Signed Linux and Windows Edge packages
  • Apache-2.0 source and reproducible gates

Current limits

  • Single-maintainer support and no service-level agreement
  • Multi-user tenancy is not part of the current product
  • Execution guarantees depend on the selected profile and host
  • The public deployment is maintained as evaluation infrastructure