v2.4 — Kubernetes-native super-app platform

One login.
Many apps.
Zero boilerplate.

The super-app platform for engineering teams. Unified IAM, multi-provider LLM relay, and semantic code search — wired into a single Kubernetes-native runtime.

Get StartedRead the docs
120+
deploys / day
< 2h
app onboarding
99.9%
uptime SLA
zsh — boltz
$ npx @boltz.one/create-app billing
◇ Scaffolding micro-app billing…
✓ IAM session wired (ABAC + ReBAC)
✓ Zod contracts generated
✓ Models-Router relay attached
✓ Helm chart + Argo CD app created
→ ready in 2.1s. run bun dev
$
Trusted by platform teams shipping faster
NorthwindHypergridCedarVoltlineQuanta
Platform primitives

Everything an internal platform needs

Auth, routing, AI and contracts — composable primitives instead of glue code rewritten in every app.

Unified IAM

Policy-based access (ABAC + ReBAC) with STS — one session authenticates every app.

ABACReBACSTS
Super-App routing

Mount micro-apps under /apps/<code> with shared session — no re-login between apps.

/apps/*SSO
Context engine

Embeddings + call-graph indexing power semantic search, RAG chat and an MCP server for Claude Code.

MCPRAGembeddings
Models-Router

Multi-provider LLM relay (OpenAI, Anthropic) with failover and an OpenAI-compatible API.

relayfailover
SDK & Contracts

Zod contracts are the single source of truth — scaffolder + ce-cli generate typed clients and guards.

Zodce-cli
Kubernetes-native

Helm charts and Argo CD GitOps generated per app — autoscaling and rollbacks out of the box.

HelmArgo CD
How it works

From zero to deployed in four steps

01
Scaffold

npx @boltz.one/create-app generates a typed micro-app from a template.

02
Define contracts

Write Zod contracts once — clients, validation and OpenAPI are derived.

03
Platform handles the rest

IAM session, LLM relay and config wiring are provisioned automatically.

04
Deploy to Kubernetes

Helm + Argo CD ship it with GitOps, autoscaling and observability.

Developer experience

Code-first, type-safe, end to end

Zod contracts are the single source of truth — typed clients, server validation and OpenAPI fall out automatically. Turborepo + Bun monorepo, strict TypeScript, ce-cli scaffolder.

Strict TypeScript end to end — no untyped boundaries between services.
Turborepo + Bun monorepo with cached, parallel builds.
ce-cli scaffolds apps, contracts and Helm charts in one command.
contracts/billing.ts
import { z, contract } from '@boltz.one/sdk' export const createInvoice = contract({ scope: 'write:billing', input: z.object({ org: z.string(), amount: z.number().positive(), }), output: z.object({ id: z.string() }), }) // → typed client, server guard, OpenAPI
Context engine

Semantic search & RAG over your whole platform

Embeddings plus call-graph indexing make every repo searchable by meaning. An MCP server exposes it to Claude Code, and the Chat/RAG layer answers questions grounded in your actual code.

MCP serverembeddingscall-graphRAG chat
where is the STS token minted?
0.94
iam/sts/mint.ts
mintSessionToken(subject, scopes) — issues short-lived STS
0.88
iam/middleware/guard.ts
validates JWT, attaches resolved policy context
0.81
sdk/auth/session.ts
client-side session refresh against STS endpoint
Production-grade by default

Built on the infrastructure you already trust

Kubernetes-native
runs on any cluster
Helm + Argo CD
GitOps delivery
Harbor
private registry
Autoscaling
HPA + KEDA
OTel observability
traces & metrics
End-to-end TLS
mTLS internal
JWT validation
edge + service
Multi-tenant
org isolation
<500ms
semantic search p99
~50ms
relay overhead
99.9%
uptime SLA
< 2h
app onboarding

Ship your next micro-app today

One login, one IAM, one runtime. Onboard a new app in under two hours.

Get StartedView on GitHub