agent
Stakpak is an open-source AI agent for the terminal aimed at infrastructure work: generating infrastructure code, debugging Kubernetes, configuring CI/CD and automating deployments. Its README builds the pitch on safety. Dynamic secret substitution lets the model work with credentials without seeing the real values, and a privacy mode redacts things like IP addresses and AWS account IDs. Warden guardrails apply network-level policies that block destructive operations before they run, and MCP traffic uses mutual TLS. Curated DevOps knowledge ships as rulebooks, and you can add your own playbooks and policies; the agent also keeps persistent knowledge about incidents and your environment.
Install with Homebrew (`brew tap stakpak/stakpak` then `brew install stakpak`), a release binary from GitHub Releases, or a Docker image (`ghcr.io/stakpak/agent:latest`) that includes common tools such as docker, kubectl and cloud CLIs; the front page also shows a `curl | sh` installer. Then run `stakpak`: either create a Stakpak API key in a browser flow (the README says no card is required) or write `~/.stakpak/config.toml` with your own Anthropic, OpenAI or other provider keys. GitHub shows no detected license, so check the repository for the terms before using it at work.
Features
Why choose it
Trade-offs
Maintenance check
- Last commit
- 2026-07-06
- Commits, last 90 days
- 0
- Releases, last 90 days
- 0
- Latest release
- v0.3.88 (2026-06-10)
- Open issues
- 43
- Recent issues with at least one comment
- 3/11
Oldest week on the left; the latest four weeks are orange. Source: GitHub commit activity.
Status rule: archived on GitHub = Archived; last commit within 90 days = Active; 91 to 365 days = Slowing; older = Stale. All figures come from the GitHub API on the date shown.
Most discussed open issues
- #246 Custom MCP Server Support and Integration Framework4 comments · 2025-09-30
- #386 Unable to configure Azure OpenAI custom endpoint in Stakpak due to missing API version option; requests fail with "error decoding response b3 comments · 2025-12-17
- #744 🔒 API key leaked in error log when browser redirect auth receives invalid format2 comments · 2026-05-23
- #739 OpenAI Codex OAuth path sends non-streaming Responses request; ChatGPT account requires stream=true2 comments · 2026-05-15
- #247 Add Unit Tests for Core Modules2 comments · 2025-09-30
Issue titles are quoted from GitHub. Open the link to check whether a problem still applies to the version you use.
Who it fits
- You want a terminal agent for infrastructure work: infrastructure code, Kubernetes debugging, CI/CD and deployments.
- You want the model to use credentials without seeing them: secret substitution and a privacy mode that redacts IPs and account IDs.
- You want network-level guardrails that block destructive operations before they run.
- You need clear reuse terms: our data notes that GitHub does not detect a licence, so check before reuse.
- Your sessions must not go through a third party: using a Stakpak API key routes them through their service; bring your own keys instead.
- You need an actively updated tool: our data shows the last push on 2026-07-06.
How it differs
vs agentgateway★ 5.5kagentgateway sits between agents and tools and enforces policy for any agent. Stakpak is itself an agent with guardrails built in.
Compatibility
Quick start
Use cases
Alternatives
Featured in these lists
Comments
No comments yet. Be the first!