stakpak/agent

What it solves

Stakpak is an autonomous DevOps agent designed to manage applications and infrastructure without the lock-in of a Platform-as-a-Service (PaaS). It allows developers to automate infrastructure code generation, Kubernetes debugging, CI/CD configuration, and deployments while implementing strict security guardrails to prevent LLMs from having unrestricted access to production environments.

How it works

The agent runs as a 24/7 background process (Autopilot) on your machines. It uses a combination of LLMs (supporting Anthropic, OpenAI, Gemini, or local models via OpenAI-compatible endpoints) and a set of security-hardened tools. It integrates with communication channels like Slack, Telegram, and Discord for notifications and triggers. To ensure safety, it employs "Warden Guardrails" for network-level policy blocking and "Secret Substitution" to handle credentials without exposing them to the LLM.

Who it’s for

It is built for DevOps engineers and developers who want to automate their operational tasks and infrastructure management using AI agents while maintaining high security and control over their production systems.

Highlights

• Autopilot Runtime: A 24/7 autonomous background agent with scheduling and notification routing via Slack, Telegram, and Discord.
• Security Hardening: Features mutual TLS (mTLS), dynamic secret substitution, and privacy mode for redacting sensitive data.
• DevOps-Specific Tooling: Includes infrastructure code indexing for Terraform and Kubernetes, real-time progress streaming for Docker builds, and a built-in documentation research agent.
• Adaptive Intelligence: Uses "Rulebooks" (Markdown-based SOPs) and persistent knowledge to learn from past incidents and organizational policies.
• MCP & ACP Integration: Acts as a secure Model Context Protocol (MCP) proxy and supports the Agent Client Protocol (ACP) for integration with editors like Zed.