Open source · pre-release · on GitHub
From a GitHub repository to a hardened production deployment on your own cloud, keeping the infrastructure code.
1$ npx opscrew scan2◆ Scanning the repository3✓ Wrote opscrew/SECURITY_SCAN.md and .opscrew/scan.json.4OpsCrew scan of habit-tracker: 2 critical, 2 high, 1 medium, 0 low, 0 info5 CRITICAL Committed .env file with 3 values .env:16 CRITICAL Supabase service-role key in client code src/lib/admin.ts:47 MEDIUM .env files are not in .gitignore .gitignore8Full report: opscrew/SECURITY_SCAN.md9Next:
capabilities
Not just a server — the whole path to production.
Plans before every change
OpsCrew reads how your app is built: frameworks, services and environment variables. It asks only what it cannot tell, such as traffic and region.
Plans before every change
OpsCrew prepares your repository in a pull request: the Dockerfile, .dockerignore, .env.example and the health route, ready for your review.
Plans before every change
opscrew scan checks your repository for leaked secrets, exposed Supabase or Firebase data and risky configuration, free and without AI.
const nextConfig = {};const nextConfig = { output: "standalone",};Full report: opscrew/SECURITY_SCAN.md
OpsCrew scan of habit-tracker:2 critical, 2 high, 1 medium, 0 low, 0 info
Features
From reading your repository to checking the live site — agents that handle the DevOps work.
Code changes arrive as pull requests, with the branch and diff, ready for your review.
Lynis, ssh-audit and testssl.sh give a second, independent opinion, from pinned versions, for free.
OpsCrew hardens every server it creates and checks it again whenever you run opscrew secure.
Everything OpsCrew writes is a plain file in your repository, yours to keep.
Node.js, Python, Go, Java, Ruby, Rust and more, each with a fitting builder.
Agents
Specialized agents that work together on every step of shipping your app, from reading your repo to checking the live site.
Reads only, changes nothing
Reads how your app is built: frameworks, services and environment variables, with or without a model.
Prices every option
Proposes architectures with their estimated monthly cost, explains the choice, and records the one you pick.
Waiting for your approval
Writes the infrastructure code, shows the plan with its hash, and creates nothing until you approve it.
Checking the server
Hardens the server, checks it over SSH and from outside, and writes a plain security report.
Checking the live site
Checks DNS, HTTPS, the health route and headers, and that nothing reaches the server around Cloudflare.
How it works
Read the app, approve the plan, then deploy and check. Nothing changes without approval.
Run it in your app's repository. The agents read how the app is built and ask only what they cannot tell.
Compare architectures with their monthly cost and pick one. Provision shows the plan and its hash, and applies nothing until you approve.
Review the pull request like any other and merge it. The deploy runs, then secure and verify check the live result.
opscrew status
opscrew design
opscrew/prepare-deploy
Why OpsCrew
OpsCrew handles the repetitive operations work, so you and your team can focus on the app.
provisionadaptprovisionsecure --deepWorks with
OpsCrew uses the accounts and tools you already have, and leaves everything it sets up in them, as plain files.
Pricing
Free, open-source CLI and plugin; AI on your own key, no markup. Hosting is planned.
$9/month
Includes:
3 projects, then $3 each
Scheduled drift and security checks
Uptime, spend and domain alerts
Credential vault
Deploy history and rollback
$39/month
Everything in Pro, plus:
5 seats and 10 projects
Roles
Shared approvals
Audit log
Environments in the dashboard
Custom
Everything in Team, plus:
Single sign-on (SSO)
White-label for client work
Self-hosted option
SLA
AI on your own key, no markup
$0/month
Includes:
Every agent, every cloud
Hetzner, DigitalOcean, your server, Portainer
Deploys without downtime
Domains: buy or connect
AI on your own key, no markup
$0/month
Everything in the CLI, plus:
OpsCrew's steps as MCP tools
Every plan shown in a dialog
Claude cannot approve for you
Same plans, same hashes
Open source on GitHub
$0/month
No model, no account:
Leaked secrets
Exposed Supabase or Firebase data
Risky configuration
A report in your repo
Run it again any time
Get started
OpsCrew is not on npm yet. Run it from a clone today, or wait for the release.