GitHub - RootCX/RootCX: Governed infrastructure for internal tools and AI agents

2 min read Original article ↗

Secure infrastructure for AI-coded internal apps

Documentation Discord License Stars

What is RootCX?

RootCX is production infrastructure for internal apps and AI agents. It ships as a single server called Core, available as a Docker image or through RootCX Cloud.

You build apps with your favorite AI tools (skills available). Core handles everything else: PostgreSQL database, SSO authentication, role-based permissions, audit logs, secrets vault, job scheduling, message queues, file storage, integrations, and deployment.

Cloud or self-hosted. Your code, your data.

Quickstart

rootcx init demo

init walks you through everything interactively: pick cloud or self-hosted, create an account, name your app, scaffold it, and deploy.

Installation

# macOS / Linux
curl -fsSL https://rootcx.com/install.sh | sh

# Windows
powershell -c "irm https://rootcx.com/install.ps1 | iex"

Claude Code

npx skills add rootcx/skills
claude

Features

Database Shared PostgreSQL with auto-generated CRUD APIs
Auth OIDC SSO (Okta, Microsoft Entra ID, Google Workspace, Auth0)
RBAC Namespaced permissions, wildcard matching, role inheritance
Audit log Every insert, update, delete captured with before/after diff
Scheduled jobs Cron scheduling via pg_cron
Message queue Durable job queue via pgmq with automatic retry
Secrets vault AES-256 encrypted storage for API keys and credentials
Integrations Notion, Gmail, Outlook, Salesforce, Slack, GitHub, Stripe, and more
Agent tools Every app exposes tools (query, mutate, describe) for agents
MCP Connect any MCP server to give agents access to external tools
Channels Connect agents to Telegram, Slack, email
File storage Upload and serve files scoped per app

Showcase

Production apps built on RootCX:

App Description
CRM Customer relationship management
Billing Invoicing and payment tracking
Task Manager Team task and project management

Architecture

RootCX Architecture

Community

License

RootCX is source-available under the FSL-1.1-ALv2 (Functional Source License). Use, modify, and redistribute for any purpose other than offering a competing product. Converts to Apache 2.0 after two years.