Architecture Overview

infrastrActure is a control plane for AI agents. It serves canonical MCP runtime config to clients, manages shared and per-user tool installations, supervises ephemeral sandboxes, and exposes a tightly audited host-operations surface (Infra SSH).

TessarAct is the reference client; anything that speaks MCP can be a client.

Topology

Responsibilities

AreaResponsibility
integrationreturn canonical MCP server configs
shared toolsmanage platform-wide integrations
installationscreate and manage user runtimes
sandboxeslifecycle + runtime access
built-in MCPexpose platform operations as tools
infra SSHcontrolled host operations
authenforce instance binding and tiers

Design Principles

  1. control plane, not monolith
    It manages runtimes; it is not the only runtime.

  2. tenant-aware by default
    instance binding is part of every key and sync flow.

  3. shared vs user-managed split
    shared tools are platform-owned; installs are tenant-owned.

  4. admin operations are explicit
    admin-tier key plus approval lease for infra SSH.

  5. audit where risk is highest
    infra SSH records successful, denied, and failed operations.