@remitlabs/api
v0.1.1
Published
Self-hostable fleet API for Remit: telemetry, policy, audit export, signed feed
Maintainers
Readme
@remitlabs/api
Self-hostable fleet API for Remit.
The API stores fleet state, findings, policy, audit events, and signed revocation records,
and serves the evidence dashboard. It runs on SQLite by default, with Postgres via
DATABASE_URL and PGlite for tests.
Run
npm i -g @remitlabs/api
REMIT_DEV_AUTH=1 remit --headlessREMIT_DEV_AUTH=1 is an explicit development-only identity mode. Production deployments
need a real OIDC/JWT identity provider; that integration is not built in 0.1.x.
What this is not
- Not multi-tenant. Do not expose a single instance to multiple organizations.
- Not a hosted service. You run it.
- Not a source of truth for safety. It stores evidence produced by the scanner, canary, feed, and router; it does not make a skill safe.
Security
Please do not open a public issue for a security problem. Email
[email protected] with [security] in the subject.
License
Apache-2.0. See LICENSE in the package tarball.
