01
Status: Available Prospector
Freelance operations, end to end. Pulls jobs from your platforms, scores them against rules you write, drafts proposals you approve before anything sends, then tracks delivery and invoices.
Two products for the AI era, built by one operator.
Prospector runs a freelancer's whole pipeline: it finds and scores jobs, drafts proposals you approve before anything sends, then tracks the work through delivery. Vault is a password manager for AI coding agents: it hands an agent a short-lived lease, a temporary grant, never the raw key, with every access logged.
Nothing sends, and no secret leaves the vault, without your say.
Active leases
Live
STRIPE_SECRET_KEY
4:12
Time to live
The lease auto-expires. The agent must ask again; the raw key stays in the vault.
- Handle
- lease_9f3ac2…e10
- Scope
- read-only
- Delivered to
- sandbox, not model
Append-only audit log
Lease issued to claude-code 14:02:11
Used inside sandbox 14:02:13
Expires automatically 14:07:11
Works with the agents you already run
Claude Code Cursor Any MCP client
Six pieces. Two you can use today.
Two products ship now. The rest are named with their real status, including the one piece that is not for sale.
02
Status: Available Vault
A credential vault built for AI agents. Stores API keys and secrets encrypted, then hands a coding agent a short-lived lease instead of the raw key, with every access written to an append-only audit log.
03
Status: Coming soon Cortex
The runtime for every AI call in the suite: model choice, cost tracking, and an approval gate before an agent takes any outside action. Internal today; a developer tier is planned.
04
Status: Coming soon Synapse
Memory for AI apps. A managed vector database (the store that lets an AI look up relevant context) with per-customer isolation built in from the start.
05
Status: Coming soon Apparatus
Hosted capabilities an AI agent usually lacks: a voice channel, a browser, web search, a code sandbox, and more. One login, one bill, secrets handled by Vault.
06
Status: Private Wraith
The private network that fronts the operator's own admin tools. Not for sale; listed here for honesty about what the suite includes.
Two tracks, and you stay at the gate on both.
track a
-
Step 1: A job arrives
Prospector pulls it in from your connected platforms.
-
Step 2: Scored against your rules
It ranks each job on the criteria you wrote, so the noise drops out.
-
Step 3: A proposal is drafted
Grounded in your past work, in your voice. Nothing has sent yet.
-
Step 4: You approve, then it submits
Only on your explicit yes. Then it tracks the win through delivery and invoicing.
track b
-
Step 1: Your agent asks
A coding agent (Claude Code, Cursor, any MCP client) requests a credential it needs.
-
Step 2: Vault returns a lease
A short-lived grant bound to the run, not the raw secret itself.
-
Step 3: Used inside a sandbox
The credential goes to the sandbox, never into the model's context window.
-
Step 4: The audit log has the receipt
Who, what, which run, when. Append-only. The lease expires on its own.
Three guarantees, enforced in the system.
Not marketing lines. Constraints wired below the interface, where a UI toggle cannot undo them.
Never sends without you
Every outbound message needs your explicit approval, enforced deep in the system, not just in the UI.
Secrets never reach the model
Vault delivers credentials to a sandbox, never into the AI's context window, so a prompt-injection attack cannot leak what the model never saw.
One operator, one set of eyes
Built and reviewed by one person, so the pieces actually fit together instead of merely coexisting.
Start free. Pay when it pays you back.
Prospector and Vault both have a free tier. The full breakdown, including what each paid tier adds, lives on the pricing page.
creator
Built by Corey Rosamond at rosecraft.studio .
One operator. Eleven siblings. One set of eyes on every line.