Get early access
CE MESH / EST. 1871 / LINE OPEN
Lay your own line.
In 1871 a Danish company ran a telegraph line from the Nordics to Shanghai. Our machines in East Asia and northern Sweden now talk directly: 275 ms, no relay.
One private network for your computers and AI agents: direct encrypted links, and a signed right for each agent.
Get early accessCE MESH / SCREENS
Six screens from the mesh: your devices, a new one joining, an agent's right, what was refused, the directory and who reaches what.
| Device | Link | Trip |
|---|---|---|
| MacBook, East Asia | direct | 275 ms |
| Desktop, Umeå | direct | this one |
| Build server, Helsinki | direct | 31 ms |
| Print farm | direct | 268 ms |
| Laptop, hotel wifi | relay | 304 ms |
| Old iMac | asleep | 3 h ago |
Your devicesEvery machine, how it is reached and how fast. Direct when the network allows it; a relay only when it does not.
On the new machine, run:
ce join
and type this code:
expires in 9:41one use
Add a deviceInstall ce, type a six-digit code, done. The code works once and expires in ten minutes.
| Holder | build-agent |
| May | files.read, build.run |
| On | Build server, Helsinki |
| Ends | in 7 days |
| Signed by | you |
validrevoke
An agent's rightAn agent holds a signed right, not a password. It names the agent, the machines, the operations and when it ends.
| Caller | Asked for | Time |
|---|---|---|
| build-agent | files.write | 14:02 |
| unknown key | screen.shot | 13:47 |
| support-agent | build.run | 13:31 |
| unknown key | files.read | 13:30 |
4 refused212 allowed
Refused callsEverything not granted is refused, and you see each refusal. A stranger on your network gets nothing at all.
| Replica 1 | leader | term 41 |
| Replica 2 | follower | in step |
| Replica 3 | stopped | test |
answering2 of 3 needed
The control planeYour network's directory runs on three machines at once. Turn one off and the network keeps answering.
| Mac | Desk | Build | |
|---|---|---|---|
| You | all | all | all |
| build-agent | none | none | 2 ops |
| support-agent | 1 op | none | none |
| Partner | none | 1 op | none |
Who reaches whatOne page says who can talk to which machine. People and agents are listed the same way, each with its own rights.
CE MESH / HOW IT WORKS
Most people have three or four computers that should be one network: a laptop, a desktop at home, a server, a machine in the workshop. ce mesh joins them, then lets your AI agents in with exactly the rights you write down.
One download for macOS or Linux. It runs as a small background service and starts with the machine.
$ ce join
Code: 482 913
Joined as Desktop, Umeå
6 of 10 devicesType the six-digit code from a machine that is already in. The new one gets its keys and appears in your device list within seconds.
Machines find each other and connect directly, through home routers and office firewalls. When no direct path exists, traffic goes through a relay and stays encrypted end to end.
Give an agent a right: which machines, which operations, for how long. You sign it; the agent carries it. Nothing else is open.
grant build-agent
may files.read build.run
on build-server
for 7 daysOne tap ends a right or removes a device. Every machine stops honouring it on its next check, usually within a second.
revoke build-agent
build-server stopped honouring 0.4 s
next call refusedThe telegraph companies paid out cable from ships to reach the far side of the world. Your line goes between your own machines, direct, and only the rights you write travel on it.
H.M.S. Agamemnon laying the Atlantic telegraph. The Met, CC0.
CE MESH / ONE DEVICE
Point at a note to light its part of the screen.
Build server
Helsinki · Linux · added 12 Oct
| Link | direct |
| Round trip from you | 31 ms |
| Last seen | now |
Rotated 2 days ago, next in 28 days
| build-agent | files.read, build.run |
| You | everything |
1build-agent asked for files.write
CE MESH / RIGHTS
Pick an agent, the machines and the operations. The slip is the right it would carry. Everything you leave out is refused.
CE MESH / PRICING
Free for one person. Free on your own servers. Teams pay per person.
For one person and their own machines.
Up to 10 devices, agents included, direct links, the relay when you need it, and every right you care to write. Run the whole thing on your own servers instead and it stays free.
For a company, a lab or a workshop with people and agents on one network.
Unlimited devices and agents, rights per person and per agent, a shared refused-call log, single sign-on with Google or GitHub, and a direct line to the people who build it.
$4per user / month
Join the team listCE MESH / JOIN
The first networks open to new accounts this week. Leave your email and we write once, with your invite. You pay nothing now.
We keep your email and name only to send your invite, never share them, and delete them when you ask ([email protected]). Privacy.
We'll email you once, with your invite.
CE MESH / QUESTIONS
A VPN sends everything through one server. ce mesh links your machines to each other directly, so a file between two of your computers takes the short way, and nothing in the middle can read it.
An AI agent with your password can do everything you can. With ce mesh it carries a signed right that names the machines, the operations and the end date. Ask for anything else and it is refused, and you see the refusal.
The client runs on macOS and Linux today; Windows and phones are next. The directory that tells your machines about each other runs on three servers at once, so one of them going down changes nothing.
Yes. The same software runs on machines you own, with no account with us at all, and that is free.
Only encrypted packets and which two of your devices they are for. It cannot read them, and it is used only when two machines cannot reach each other directly.
CE MESH / INVITE
Leave your email and get an invite to your own network.
