A runtime for agents
you can debug.
Built on object storage you own. Every run is recorded as a replayable, tamper-evident trail — so you can reproduce it, audit it, and prove what happened.
- pricing-faq.md12 KBIndexed
- product-overview.pdf482 KBIndexed
- release-notes-2026-05.md8 KBIndexed
- onboarding-guide.pdf1.2 MBSealed
What is our refund policy?
Refunds are processed within 7 business days from the original payment method.
What breaks when you ship an agent.
Agents are non-deterministic. When one goes wrong in production, you need to see what it did, reproduce the run, and prove it — and most tools can't give you that.
Agents are black boxes.
Your agent retrieves files, calls tools, and writes to memory. When the answer is wrong, you can't see which step caused it. Debugging is guesswork.
Runs don't reproduce.
The same input gives a different output every time. Once a run ends, the trace is gone — you can't replay the bug, and you can't prove how a past decision was made.
Your logs aren't yours.
Tracing tools keep their records in their database — mutable, sampled, and on their retention clock. You can't verify them independently, and you can't take them with you.
Run your agent.
Keep the receipts.
Storage you own.
The runtime sits on top.
Every file, knowledge base, run record, and memory lives in storage you own — S3-compatible, so boto3, aws-cli, and rclone work unchanged. Bring your data in, and the runtime records itself right beside it.
Files stay yours.
Cancel anytime — your bytes don't move. Any S3 client can pull them.
Keys stay yours.
Revoke and decryption stops. Enforced by structure, not policy.
Every artifact has a receipt.
Tamper-evident manifest digests you can verify against the chain.
S3 compatibility
It speaks S3 — really.
- Point your boto3 client at us.
- rclone, aws-cli, and the AWS SDKs all work today.
- Presigned URLs, public-read buckets, always-on AES256 at rest.
Tap a tab to switch SDK.
import boto3
s3 = boto3.client(
"s3",
endpoint_url="https://s3.kraterion.com",
aws_access_key_id="...",
aws_secret_access_key="...",
)
s3.upload_file("photo.jpg", "my-bucket", "photo.jpg")Retrieval you can check.
Flip one toggle and your files become a knowledge base. Hybrid retrieval — BM25 plus dense vectors, top-k 8. Every answer carries a citation you can verify against the exact source it came from.
- pricing-faq.md12 KB
- product-overview.pdf482 KB
- release-notes-2026-05.md8 KB
- onboarding-guide.pdf1.2 MB
- top-k8 · hybrid
- encodertext-embedding-3-small
Refunds are processed within 7 business days from the original payment method.
Wrap your agent.
Replay any run.
Wrap a LangGraph or Vercel AI SDK agent with one import — or point your OpenAI client at us. From then on, every retrieval, tool call, and memory write is recorded automatically, with nothing else to wire up.
from langgraph.graph import StateGraph
from kraterion.langgraph import WalrusCheckpointSaver
# Point your existing graph's checkpointer at Kraterion.
# Every run records itself — replayable, auditable, yours.
graph = builder.compile(
checkpointer=WalrusCheckpointSaver(project="support"),
)
result = graph.invoke({"question": "What is our refund policy?"})
# run recorded · receipt 3f4d…ae · replay with: kraterion replay 3f4d…aeWhat is our refund policy?
- recallquery: "user prefs"→2 notes29 ms
- searchquery: "refund policy"→4 hits62 ms
- readkey: "pricing-faq.md"→12 KB38 ms
Refunds are processed within 7 business days from the original payment method.
That recorded run is the foundation for everything else — replay it, trace any output back to its sources, or give the agent memory it can reach for.
Also reachable
from your AI assistant.
Plug Kraterion into Claude Desktop, Cursor, or any MCP-compatible client. Your knowledge, your tools, and persistent memory — over a different protocol, with the same scoped credentials.
{
"mcpServers": {
"kraterion": {
"url": "https://mcp.kraterion.com/mcp",
"auth": {
"type": "oauth",
"dcr": true
}
}
}
}- Claude DesktopFirst-party MCP host
- CursorEditor MCP support
- ZedEditor MCP support
- ContinueIDE assistant
- Any MCP clientImplements the spec
Your data.
Your logs.
Your exit.
Observability tools hold your traces in their database — mutable, sampled, on their retention clock. Kraterion keeps every file and every run record in storage you own. Encrypted by default, verifiable by anyone, and yours to take with you.
They hold the keys.
- AKIA7C4D8E1C…3Fread-onlyactive
- AKIA92AC6712…A1read-writeactive
- AKIA1A8B4C5D…99adminactive
Manual process · SLA 2-5 business days
- Keys live inside the provider boundary.
- Revoke is a support ticket, not a property.
- Exit means copying everything out — at $0.09/GB egress.
You hold the keys.
- kr_test_3f4d8e1c…a2read-onlyactive · revoke
- kr_test_92ac6712b1…7cread-writeactive · revoke
- kr_share_test_1a8b4c…99agentactive · revoke
Keys stop being issued immediately — by structure, not policy.
- Keys live with you. Plaintext never crosses the wire.
- Revoke is a policy property — enforced, not promised.
- Exit through any S3 client — at ~9× lower egress than AWS.
What that gets you
You own your data and your logs.
Pull raw bytes and full run records over plain HTTPS, from any region. No proprietary export, no vendor-held traces.
Sealed before it leaves you.
Encryption is the default, not a setting. The platform stores only ciphertext — files, run records, and memory alike.
Tamper-evident by structure.
Every run is recorded so it can't be altered after the fact. You don't take our word for it — you verify it independently.
Revocable access — enforced, not promised.
Remove access and reads stop — files and memory together. Not a policy. A property.
Built on infrastructure you own.
Ownership isn't a policy here — it's the stack. Each part runs on open infrastructure you can verify and walk away with.
Built for the rules AI is facing.
AI regulation keeps asking the same things — show what your AI did, keep the record, control the data. The way Kraterion is built answers all three.
Durable audit logs
Every run is a tamper-evident record you keep as long as you need.
Data control & erasure
Encrypted by default and revocable — lock data out or erase by destroying the key.
Traceability
Replay any run and trace every output back to its sources.
Five lines to a replayable agent.
Wrap an agent you already have. Run it, and Kraterion records the run. Replay it from its receipt — same inputs, same retrieval.
Pay for what you use.
Storage, retrieval, and run records on the same meter — generous free band on each, flat per-unit rate above it, no minimums or tier cliffs. Bring your own model keys; we don't mark up tokens.
- Storage$2.9750 GB$0.06 / GB-month
- Reads$1.605M ops$0.40 / M ops
- Writes$0.0510k ops$5.00 / M ops
- Egress$1.50200 GB$0.01 / GB
- Knowledge index$0.9010 GB-day$0.10 / GB-day
- Agent messagesfree$020k msgBYOK · your model key
Ship agents you can
debug, reproduce, and trust.
No card. Free band on every meter. Wrap an agent you already have.