AgentRaaS sits between your AI agents and every real-world action — guaranteeing exactly-once execution, proven under real concurrent load, not just claimed. Self-hosted or cloud.
Thousands of teams run n8n, Flowise, Langflow, Dify, Ollama, and LocalAI on their own Docker infrastructure — to cut SaaS fees, and to stay inside GDPR / EU AI Act data-residency rules. AgentRaaS is built to sit inside that stack, not replace it: one more Docker Compose service, zero data leaving infrastructure you control.
Result: the customer is charged twice, and you find out from a support ticket, not a log.
Result: two duplicate contacts, a messier pipeline, and a sales team that stops trusting the data.
Result: the client gets the same update twice — and starts wondering what else is off.
Result: your team approves the same request twice, or gets paged twice for one incident.
Your agent sends the request to AgentRaaS instead of the API directly.
AgentRaaS atomically claims a dedup slot for that exact request in Redis.
First call: forwarded to the real API, the result gets cached.
Retry or duplicate: the cached result comes back — never a second real execution.
Model Context Protocol is the standard Claude Desktop, Cursor, and agent frameworks like LangChain, AutoGen, and CrewAI use to invoke tools. A stalled tool call gets retried just like a stalled HTTP request — same double-execution risk, different protocol. AgentRaaS's MCP gateway is a JSON-RPC proxy that applies the exact same atomic dedup guarantee to every tool call, not just webhooks.
n8n, Make, Zapier, or raw curl — change the target URL, nothing else.
POST /proxy/:service/:action
A clean per-service REST shape for scripts and internal tools.
POST /v1/sdk/:service/:action
Claude Desktop, Cursor, LangChain, AutoGen, CrewAI — any MCP client.
POST /mcp
# agent calls a tool via MCP POST /mcp {"jsonrpc":"2.0","id":"call_82f1","method":"tools/call", "params":{"name":"stripe.createCharge", "arguments":{"amount":4200,"customer":"cus_9f2k"}}} → 200 OK // first call — forwarded, result cached {"result":{"status":"success","charge_id":"ch_1N..."}} # network stalls — agent retries the identical call 400ms later → 200 OK // dedup slot already claimed — cached result, zero re-execution {"result":{"status":"success","charge_id":"ch_1N...", "deduplicated":true}}
AgentRaaS doesn't care what your agent is for — only that when it acts, it acts exactly once. If it can call an API, AgentRaaS can protect it.
Resolve tickets, send replies, trigger refunds — without a retry turning into two replies or two refunds.
Log leads, update deals, enrich contacts in HubSpot or Salesforce — once per real event, not once per retry.
Book meetings, send confirmations, post status updates to a client — exactly the number of times you meant to.
Post to Slack directly, or Microsoft Teams via Custom Actions — trigger approvals, hand off work between systems, SSRF-guarded.
Update inventory, create orders, notify shipping — protected the same way whether it's Shopify or your own warehouse API.
Not on the curated list? Register it as a Custom Action in minutes — same dedup, same audit trail, same protection.
Building client workflows in n8n or Make? Drop AgentRaaS in front of every client's Stripe, CRM, or messaging API so one retry storm doesn't double-charge a client account. The Agency plan adds a white-label dashboard per client tenant.
Every piece your agents need to take real actions safely, out of the box.
Proven under real concurrent load with an automated test suite — not just a claim.
Add your own Stripe, Twilio, or any provider's keys — encrypted at rest, no server access needed.
Not limited to the curated list — register any endpoint, SSRF-guarded, and agents can call it too.
A JSON-RPC gateway for Claude Desktop, Cursor, and any MCP client — every call protected the same way.
Stop hammering a broken upstream service. Trips open, recovers automatically.
Every action logged — who, what, when, status, duration. Searchable dashboard, CSV export.
* via Custom Actions — not a pre-built connector, but reachable the same way any endpoint is: register it once, agents call it by name from then on.
Open-core, fair-code licensed — Community is free and self-hosted only. Agency and Enterprise run either cloud-hosted or self-hosted.
Want to try it without installing anything? Start a free AgentRaaS Cloud account →
Full terms in LICENSE.md — a fair-code license modeled on n8n's Sustainable Use License. Enterprise features (src/ee/) are source-available under a separate commercial license.
The short, honest answers — full detail is in the docs and LICENSE.md.
Yes. Community, Agency, and Enterprise are all unlimited actions/month when you run them on your own infrastructure — no cap, no metering, no phone-home check. It's a term of LICENSE.md, not a "soft" limit we quietly enforce. The only metered tier is the free AgentRaaS Cloud account (500 actions/month) — because that one runs on our infrastructure, not yours.
Agency ($149/mo) adds multi-tenancy and white-label branding — built for agencies managing multiple client workspaces under one dashboard. Enterprise (custom pricing) adds everything needed for a production multi-team deployment: active-active HA clustering, inbound HMAC verification, PII/DLP redaction, and SAML/OIDC SSO with RBAC. Both run cloud-hosted or self-hosted.
Self-hosted means your audit log, credentials, and traffic never leave infrastructure you control — we don't see any of it. Stored credentials are encrypted at rest (AES-256-GCM), and the Enterprise tier adds PII/DLP redaction before anything touches the audit log, plus tamper-evident, SIEM-exportable logging for compliance-sensitive teams.
Yes — AgentRaaS is a proxy, not an SDK, so no-code tools work the same way code does: point the HTTP Request node at your AgentRaaS URL instead of the API directly. No custom node install required for any of them.
AgentRaaS claims an atomic dedup slot in Redis before anything real happens. The first call gets forwarded and its result cached; any retry or duplicate — even concurrent ones — gets the cached result back instead of a second real execution. This is tested under real concurrent load, not just claimed (see npm test).
The core engine (src/core/ — payload dedup, MCP gateway, dashboard) is MIT/Apache-2.0. Enterprise features (src/ee/ — SSO, HMAC, DLP, distributed rate limiting) are source-available under a separate commercial license. See LICENSE.md for the exact terms.