# emisar

> emisar gives AI agents declared infrastructure actions instead of shell. Policy gates actions, approvals for risky changes, tamper-evident audit trail.

- **Category:** AI
- **Licence:** Other
- **Latest version:** v0.53.0
- **Open source:** open_core
- **Languages:** Elixir, Go
- **Platforms:** Docker, Kubernetes, Linux
- **Tags:** Mcp, Security, Devops, Mcp Server, Ai Agents, Infrastructure, Devsecops, Zero Trust, AI, Go, Elixir, Self Hosted, Policy As Code, Audit trail, Approval workflow, Infosec, Infra, Ssh Alternative, Remote Execution, Pack Management

## Description

emisar connects AI agents like Claude, Cursor, and ChatGPT to your infrastructure through a governed MCP server. Instead of SSH keys or raw shell access, agents discover and call versioned action packs — declared, schema-bounded operations for databases, containers, observability, cloud, and Linux systems. The control plane evaluates policy (allow, require approval, deny) per risk tier and action, with overrides for specific runners or groups. Every action runs on an outbound-only runner that re-validates arguments, verifies pack content hashes, redacts secrets from output, and writes a hash-chained local journal. The runner installs on Linux (systemd), macOS (launchd), Docker, Kubernetes (DaemonSet), or Nomad. The runner and MCP bridge are Apache-2.0 open source; the control plane is source-available under BSL-1.1 and currently offered as a hosted service. Free tier includes 3 runners and 7-day audit retention.

## Links

- [Homepage](https://github.com/andrewdryga/emisar)
- [Website](https://emisar.dev/)
- [Docker](ghcr.io/andrewdryga/emisar-runner)
- [Documentation](https://emisar.dev/docs)
- [GitHub Repository](https://github.com/andrewdryga/emisar)
- [Action Packs Registry](https://emisar.dev/packs)
- [Security & Compliance](https://emisar.dev/security)
- [Pricing](https://emisar.dev/pricing)
- [Status Page](https://status.emisar.dev)
- [Support](https://emisar.dev/support)
- [Changelog](https://emisar.dev/changelog)

---
Source: https://selfhost.directory/project/emisar