ce mesh

Lay yourown line.

The Great Northern Telegraph building on the Bund in Shanghai, a stone facade with domed corners
Great Northern Telegraph, Shanghai

In 1871 a Danish company ran a telegraph line from the Nordics to Shanghai. Our machines in Shenzhen and northern Sweden now talk directly: 275 ms, no relay.

One private network for your computers and your AI agents. Direct encrypted links, and each agent gets a signed right to only what it may do.

Get early access

Devices · 6 of 10

DeviceLinkRound trip
MacBook, Shenzhendirect275 ms
Desktop, Umeådirectthis one
Build server, Helsinkidirect31 ms
Print farm, Shenzhendirect268 ms
Laptop, hotel wifirelay304 ms
Old iMacasleepseen 3 h ago

Add a device

On the new machine, run:

ce join

and type this code:

482 913

expires in 9:41  one use

Right · build-agent

Holderbuild-agent
Mayfiles.read, build.run
OnBuild server, Helsinki
Endsin 7 days
Signed byyou

valid  revoke

Refused · last hour

CallerAsked forTime
build-agentfiles.write14:02
unknown keyscreen.shot13:47
support-agentbuild.run13:31
unknown keyfiles.read13:30

4 refused  212 allowed

Control · 3 replicas

Replica 1leaderterm 41
Replica 2followerin step
Replica 3stoppedtest

answering  2 of 3 needed

Reach

MacDeskBuild
Youallallall
build-agentnonenone2 ops
support-agent1 opnonenone
Partnernone1 opnone

Your devices

Every machine on your network, how it is reached and how fast.

Direct when the network allows it; a relay only when it does not.

Five steps, one evening

Most people have three or four computers that should be one network: a laptop, a desktop at home, a server, a machine in the workshop. ce mesh joins them, then lets your AI agents in with exactly the rights you write down.

One device, read closely

Build server

Helsinki · Linux · added 12 Oct

Linkdirect
Round trip from you31 ms
Last seennow

Key

Rotated 2 days ago, next in 28 days

Rights held here

build-agentfiles.read, build.run
Youeverything

Refused today

1 build-agent asked for files.write

Remove deviceRotate key
Name and placeMachines named the way you think of them.
LinkDirect or relayed, and the round trip.
KeyKeys rotate on their own.
Rights held hereEvery agent that may act on it.
RefusedEach refused call, named.
RemoveOne tap takes it off the network.

Write a right

Pick an agent, the machines and the operations. The slip on the right is the right it would carry. Everything you leave out is refused.

Agent
Machines
May do
For
grant build-agent
  may  files.read build.run
  on   build-server
  for  7 days
  signed by you

    Free

    For one person and their own machines.

    Up to 10 devices, agents included, direct links, the relay when you need it, and every right you care to write. Run the whole thing on your own servers instead and it stays free.

    $0

    Start free

    Team

    For a company, a lab or a workshop with people and agents on one network.

    Unlimited devices and agents, rights per person and per agent, a shared refused-call log, single sign-on with Google or GitHub, and a direct line to the people who build it.

    $4per user / month

    Join the team list

    Send a line

    The first networks open to new accounts this week. Leave your email and we write once, with your invite. You pay nothing now.

    You're on the list.

    We'll email you once, with your invite.

    We keep your email and name only to send your invite, never share them, and delete them when you ask ([email protected]). Privacy.

    Fair questions

    Bronze statues and a lamp on the roof of the former Great Northern Telegraph Company building in CopenhagenStore Nordiske Telegraf-Selskab, Copenhagen. Fred Romero, CC BY 2.0.

    How is this different from a VPN?

    A VPN sends everything through one server. ce mesh links your machines to each other directly, so a file between two of your computers takes the short way, and nothing in the middle can read it.

    Why do agents need their own rights?

    An AI agent with your password can do everything you can. With ce mesh it carries a signed right that names the machines, the operations and the end date. Ask for anything else and it is refused, and you see the refusal.

    What runs where?

    The client runs on macOS and Linux today; Windows and phones are next. The directory that tells your machines about each other runs on three servers at once, so one of them going down changes nothing.

    Can I run it on my own servers?

    Yes. The same software runs on machines you own, with no account with us at all, and that is free.

    What does the relay see?

    Only encrypted packets and which two of your devices they are for. It cannot read them, and it is used only when two machines cannot reach each other directly.

    Leave your email and get an invite to your own network. Join