Menezis Platform / Regulation
Orchestrating agent action within explicit rules.
01 / The principle
Agents propose the movement; rules define its limits.
Menezis Platform opens infrastructure to AI code assistants without handing them the keys. Your assistant writes a stackfile; through MCP, Menezis validates it, the Judge scores it, and the deployment runs with Docker Compose on your connected node.
Infrastructure should be invisible: you describe what must run, the rules decide what may run.
02 / The loop
Your AI assistant writes the stackfile: services, parameters, resources. Nothing to configure by hand.
Menezis checks that the stackfile parses, that required fields are present, that every building block exists and that parameters pass type checks.
A mandatory Judge scores the stack with five analyzers: security (40%), policy compliance (30%), topology risk (15%), cost (10%) and operational readiness (5%). A stack with a hard-coded secret or a critical security finding is rejected and does not deploy.
The deployment runs with Docker Compose on your connected node. It counts as successful only once the node confirms the stack is running.
03 / Invariants
Between the control plane and your node agents, keys are exchanged with ML-KEM-768, the algorithm standardised in NIST FIPS 203, and traffic is encrypted with AES-256-GCM. By default, no command reaches an agent before that channel is established.
A deployment is reported as successful only when the node confirms it. A tool that cannot act yet refuses explicitly instead of pretending to succeed.
Deployments run on Docker Compose. The same stackfile can also generate Kubernetes manifests and systemd units for you to apply.
04 / The MCP toolset
The tools exposed by the Menezis MCP server to your AI assistant, grouped by role.
validate_stackValidate a stackfile (YAML) and return the parsing results.
generate_manifestGenerate deployment manifests for a stack (Docker Compose, Kubernetes, systemd) without deploying.
deploy_stackDeploy a stack with Docker Compose on a connected node, after the Judge’s verdict.
get_stack_statusGet the current status of a deployed stack.
get_service_logsRetrieve logs from deployed services.
manage_storageManage persistent storage volumes for deployments.
destroy_stackDestroy a deployed stack and optionally remove its volumes.
discoverDiscover available nodes and services in the infrastructure.
get_nodesRetrieve information about the nodes in the infrastructure.
cloud_plansList the cloud server plans available from supported providers.
cloud_provisionProvision a new cloud server from a supported provider.
provision_and_deployCompose a stack, generate cloud-init and provision a cloud server in one operation.
cloud_destroyDestroy a cloud server.
billing_statusGet billing information, usage and plan details.
billing_tasksManage billing payment tasks: retry queue, pending list, statistics.
scheduler_controlManage the background task scheduler: list, trigger, pause, resume, statistics.
05 / Pricing
Flat monthly prices, excluding VAT. Add-ons extend any instance unit by unit.
| Plan | Price / month | vCPU | RAM | NVMe |
|---|---|---|---|---|
| Nano | Free | 0.5 | 512 MB | 5 GB |
| Micro | €7.99 | 1 | 1 GB | 25 GB |
| SmallPopular | €14.99 | 2 | 2 GB | 50 GB |
| Medium | €29.99 | 4 | 4 GB | 80 GB |
| Large | €59.99 | 8 | 8 GB | 160 GB |
| BusinessPriority support | from €129.99 | 8 | 16 GB | 320 GB |
| Add-on | Price / month |
|---|---|
| +1 vCPU | €4.00 |
| +1 GB RAM | €3.00 |
| +10 GB NVMe | €2.00 |
Nano is free and always-on, limited to one per user.
Business is a starting price, extensible with add-ons.
06 / Questions
MCP (Model Context Protocol) lets an AI code assistant call Menezis tools directly. The assistant writes the stackfile; Menezis validates it, the Judge scores it, and the deployment runs with Docker Compose on your connected node.
The channel between the control plane and your node agents: ML-KEM-768 key exchange (NIST FIPS 203) and AES-256-GCM encryption. By default, the control plane sends no command to an agent until that channel is established.
Five analyzers score every stack: security (40%), policy compliance (30%), topology risk (15%), cost (10%) and operational readiness (5%). The Judge cannot be skipped, and a rejected stack does not deploy.
Deployments run on Docker Compose. From the same stackfile, Menezis can also generate Kubernetes manifests and systemd units that you apply yourself.
Nano is free: 0.5 vCPU, 512 MB of RAM and 5 GB of NVMe, always-on, limited to one per user.
Access to Menezis Platform is coming soon. In the meantime, write to contact@menezis.ai to talk about your architecture.