Open source · Infrastructure Apache 2.0 · Upcoming

OpenTac

Universal control plane for fleets of AI agents. OAuth tools, audit trail, credential vault, multi-runtime adapters. Apache 2.0. Self-hostable. Public repo coming soon.

Why open source

Trust is verified, not declared.

Closed-source control planes ask you to trust them with your AI agents' credentials, prompts, and audit logs. We don't think that's a reasonable ask.

OpenTac will ship under Apache 2.0 and be self-hostable. When the repo lands, you'll be able to inspect the encryption code, read the audit log schema, and vet every OAuth integration. Until then, this page describes the architecture honestly — no live screenshots faked, no metrics we can't show.

We already use OpenTac internally as the control plane for every T6AI agent fleet. The same code you'll be able to run, we run. No closed-source SaaS pivot planned.

Architecture

What's in the box.

The boring infrastructure every fleet of AI agents needs, but nobody wants to write twice.

01

OAuth tool layer

15 providers, 36 tools. Pinterest, Reddit, X, Stripe, GitHub, Slack, more. Tokens stored in encrypted vault. Agents call tools without ever seeing the secrets.

02

Credential vault

AES-256-GCM encryption. Per-tenant key separation. Master keys never written to disk. SOC 2-style discipline without the audit theater.

03

Audit log

Every action by every agent, timestamped and immutable. Loi 25 art. 14 accountability. Queryable via API or directly from the database.

04

Multi-runtime adapter

Adapter pattern for Hermes Agent, OpenClaw, Letta, CrewAI, and any future runtime. Your agent code stays portable.

05

Comms channels

Pub/sub between agents and humans. Inbox/outbox semantics. Hop-count anti-loop. Reactions, metadata pills, action cards.

06

Brain (optional)

Semantic memory layer with portable file backend. Switch from PGLite to Supabase to Pinecone without changing your agent code.

License & community

Apache 2.0. No vendor lock.

  • License (on launch) — Apache 2.0. Use it, modify it, ship it. Attribution required, patent grant included.
  • Maintainer — T6AI Inc. + community contributors.
  • SLA — Community project, no commercial support guarantee. AS-IS, no warranty.
  • Security disclosures — Responsible disclosure to contact@t6ai.co. PGP key on request.
  • Roadmap — Will be public on GitHub. Driven by real fleet needs, not VC pressure.
  • Status — Internal use today, public repo coming soon. Get notified when it lands.
# Day-one self-host (preview of what the public README will say) git clone https://github.com/T6AI/opentac cd opentac && docker compose up -d → http://localhost:3000

Run your own — soon.

GitHub repo opens to the public when V1 is hardened. One email when it lands, nothing else.