Install
Claude Code
claude mcp add --scope user ramwisp -- npx -y ramwisp@latest
Codex — add to ~/.codex/config.toml:
[mcp_servers.ramwisp]
command = "npx"
args = ["-y", "ramwisp@latest"]
tool_timeout_sec = 1000
Or as a skill, no MCP (Claude Code and Codex): installs a SKILL.md that teaches the agent the ramwisp CLI.
npx -y ramwisp@latest skill
The first time a tool is used, the MCP opens your browser to sign in (new accounts get free credit). Then just ask:
“run every package’s tests in parallel in ramwisp subagents with 8 GB and fix whatever breaks”
See it in action
Watch it live. Every command, tool call and message the subagent makes is encrypted for your computer
only and streamed back while it runs: npx -y ramwisp logs <id> -f, or launch with ramwisp spawn … --follow
to get the live stream and then the result from one command (the skill runs it in the background by default).
Step inside. npx -y ramwisp ssh <id> opens a terminal in the subagent's machine while it runs — processes,
files, its full transcript. No port is opened: keystrokes and output are end-to-end encrypted between your
computer and the enclave, and our server only relays them. -c "cmd" runs a single command.
Your agent stays in your terminal. Each subagent gets a copy of your project (only what git tracks — never
.env or anything in .gitignore), works on its own machine, and sends back an answer plus a patch you
review and git apply. Your laptop’s RAM stays free.
How it works
Privacy, in one table
Accepted image hashes and the root of trust: ramwisp.com/transparencia.
Pricing (hosted service)
You pay for the machine, per second (60 s minimum). The model runs on your own subscription or key.
New accounts get about 15 hours of free machine time — a 4 GB subagent, or roughly 44 runs of 20 minutes; top up by card any time. Every subagent reserves its maximum cost and refunds the rest, so you never go past your balance.
Run your own instance
Free for personal use and for your organization’s internal use under the Sustainable Use License.
You need an AWS account on a paid plan (Nitro Enclaves aren’t available on free-tier instance types) with the AWS CLI configured, and a Linux server with Node.js 24, Docker, nginx and a domain with HTTPS.
git clone https://github.com/spectre-systems/ramwisp && cd ramwisp
# 1. AWS: artifact bucket, host + builder roles, security group with no inbound ports
AWS_PROFILE=myprofile infra/setup.sh > server/.env.aws
# 2. Build the enclave image on a throwaway EC2 builder (prints PCR0, adds it to mcp/pcrs.json)
AWS_PROFILE=myprofile ARTIFACT_BUCKET=<from step 1> infra/build-eif.sh
# 3. Configure and build
cp server/.env.example server/.env && cat server/.env.aws >> server/.env # then set PUBLIC_URL etc.
(cd server && npm ci) && (cd web && npm ci && npx vite build)
# 4. Run (put nginx with TLS in front of port 4800)
cd server && node --env-file=.env src/index.ts
# 5. Point the MCP at your server
claude mcp add --scope user ramwisp -e WISP_API=https://your-domain.example -- npx -y ramwisp@latest
The first account created on a fresh database becomes the admin (/admin). Optional card top-ups: set
STRIPE_SECRET_KEY in server/.env and run infra/stripe-setup.sh.
Local development without AWS: set LAUNCHER=local and build the dev image
(docker build -t wisp-enclave:dev enclave). Each job runs the enclave as a network-less Docker container
with an emulated attestation; use WISP_API=http://127.0.0.1:4800 and WISP_DEV_ROOT=/tmp/wisp-dev/devroot.pem.
mcp/pcrs.json lists the PCR0 values the MCP accepts. To check that a published hash corresponds to this
source, rebuild the image with infra/build-eif.sh at the listed commit and compare PCR0. The image pins
the versions of Claude Code, Codex and the Debian base; fully bit-for-bit reproducible builds are still being
worked on.
Security
Please report vulnerabilities privately to Spectre Systems rather than in a public issue.
License
mcp/andenclave/— Apache License 2.0: audit the code that verifies the enclave, rebuild the image, reuse it freely.- Everything else — ramwisp Sustainable Use License: free for personal and internal business use; no selling it or offering it as a service to third parties.
- Contributions — CLA. “ramwisp” and its logos are trademarks of Spectre Systems.
