Infrastructure for AI that acts.
Connect agents to tools. Control what they can do. Verify what actually happened. Voidex gives AI agents a controlled way to act across applications — and gives your team evidence of the outcome.
Free developer plan with simulated connectors. No card required.
Every action takes the same controlled path
Whether a request comes from an agent over MCP, a workflow, or your code, it is validated, evaluated, executed in a worker and checked against the real system before anyone calls it done. Scroll to follow one action.
- 1. Action
An agent, workflow or API call proposes a typed action. Input is validated against the tool’s JSON Schema before anything else happens.
- 2. Policy
- 3. Approval
- 4. Execute
- 5. Verify
- 6. Receipt
POST /api/v1/runs
{ "tool": "acme_ledger.create_invoice",
"connectedAccountId": "acct_…",
"input": { "customer": "Globex", … } }A receipt for every attempted action
- Independent checks. After a write, Voidex reads the target system again and compares fields, counts, totals or status transitions.
- Honest outcomes. Checks are passed, failed, inconclusive or not run. Only passed deterministic or human-attested checks make an action “verified”.
- Lost responses handled. If a non-idempotent call times out, Voidex does not blindly retry — it verifies the real state and asks for review.
- Tamper-evident. Receipts are hash-chained per workspace. The chain shows records weren’t edited later; it doesn’t by itself prove the claims are true — the checks do that.
Horizontal by design, honest about status
Generic REST / HTTPS
AvailableAny JSON API you control, behind host allowlists and SSRF protection.
Signed outbound webhooks
AvailableHMAC-SHA256 with timestamps; retries with backoff.
MCP endpoint
AvailableYour registered tools exposed to MCP clients — still policy-checked.
Acme Test CRM & Ledger
SimulatedLocal simulators with fault injection for development and Bench.
SaaS connectors (CRM, support, dev tools, ERP)
PlannedSalesforce, HubSpot, Zendesk, GitHub, Jira, ERPNext, Odoo and others are on the roadmap.
Model providers
PlannedProvider adapters are interface-ready; only a deterministic demo provider ships today.
Security principles we build to
Deny by default
No matching rule means no action. High-impact actions always need two approvers.
Least privilege
Server-enforced roles, scoped API keys, tenant isolation on every query.
Secrets stay secret
Credentials are encrypted, write-only, never sent to the browser or a model.
No arbitrary code
Workers run registered connector operations only — no shell, no user code.
Try the full loop in minutes
Connect the simulated CRM, run an action, approve a sensitive one, and read the receipt.