ENDPOINTS · SECURITY · IDENTITY · VAULT — ONE CONTROL PLANE
Your MSP runs on 25 tools.
It should run on one.
EliteMSP brings endpoint state, identity, approvals, audit evidence, telemetry, and governed automation into one tenant-aware control-plane foundation. It is actively closing the endpoint-to-remediation loop, and the PSA and customer-service spine is landing; complete customer workflows and production-scale operations remain ahead.
OPEN API SURFACE — OAUTH2 + WEBHOOKS + MCP FOUNDATIONS · AI EXPOSURE + AGENT POSTURE APIs · SELF-HOSTABLE
mTLS endpointsCERT IDENTITY · LIVE REVOCATION
TelemetryJETSTREAM · OPENSEARCH · QUARANTINE
AI postureATR · REMITS · MEMORY GUARD
VaultENVELOPE CRYPTO · PKI
LATEST REPO DELTAS
The product moved. The site now says so.
SUPERVISED AGENT MODE · SHIPPEDAn AI teammate that cannot act without a gate.Conversational Help Desk and incident sessions run behind pinned governance with full credential redaction and a supervised-session panel.
SPECIALIST AGENT FLEET · SHIPPEDSpecialists, not one monolithic prompt.A governed agent runtime with an orchestrator, persisted plans, a Verifier ledger, lifecycle specialists with cited outputs, and corpus evaluation with circuit breakers.
LLM ROUTER PHASES A–E · SHIPPEDIntelligent model selection, not a blind round-robin.ModelScorer ranks providers by capability and health; ProviderHealth acts as a circuit breaker; route_decision selects the right model per context with full audit trail.
SPOOLED SHORTHAND TELEMETRY · SHIPPEDRestart-safe telemetry, exact-head guarantee.Encrypted telemetry is spooled before upload with restart-safe FIFO recovery. Zero telemetry loss across daemon restarts and network disconnects.
DASHBOARD ACCESSIBILITY · SHIPPEDWCAG-compliant login, keyboard-first navigation.ARIA labels, focus management, and keyboard navigation hardened across the operator dashboard login flow and main surfaces.
R3 REMEDIATION · ADVANCINGGuarded endpoint work, not a blind shell.Windows service carries typed validation, Ed25519 signing, approval, audit, postcondition checks, cancellation, and rollback attempts. Field acceptance continues.
BOUNDED TWO-STEP COMPENSATION · SHIPPEDReversible service operations, not fire-and-forget.Compensation actions are materialized, bounded, and verified before commit. Unsafe operations roll back within a defined window.
DISK TREEMAP + MCP · SHIPPEDVisual disk analysis from the endpoint outward.The disk treemap service, endpoint.disk_scan MCP tool, and R3-integrated scan trigger give technicians visual context before touching a machine.
COMPLIANCE POSTURE · SHIPPEDEvidence, not attestation theatre.An evidence-driven posture engine with framework catalogs, tenant mappings, an operator workspace and posture alerts.
RAG KNOWLEDGE BASE · FOUNDATIONRetrieval that cannot cross an MSP boundary.pgvector-backed, per-MSP isolated chunk storage with server-side scope enforcement and RAG MCP tools.
PATCH & UPDATE MANAGEMENT · SHIPPEDKnow what is missing before you touch a machine.OS patch inventory, application update inventory, tenant update policies with rings, and patch and application-update compliance reporting.
ASSETS & LICENSES · SHIPPEDHardware lifecycle and software entitlement in one place.Hardware lifecycle, contracts and software licence management with their own operator workspace.
OPERATING GRAPH / VISUALIZED
The system is easier to trust when you can see the boundaries.
Four new visual studies map the product’s most differentiated foundations: local intelligence, governed action, durable telemetry, and model-aware routing.
01 / THE PROBLEM
Tool sprawl is a data problem.
A modern MSP runs 8–25 disconnected products. Each one holds a fragment of the truth — tickets in one, assets in another, contracts and passwords somewhere else entirely.
The AI these vendors bolt on top is capped by that fragmentation — by data quality, not model capability. No amount of prompt engineering fixes a broken schema.
SILO 01
PSA
tickets, billing
SILO 02
RMM
agents, patching
SILO 03
Docs
configs, passwords
SILO 04
Automation
scripts, workflows
SILO 05
Security
EDR, alerts
SILO 06
Procurement
quotes, licenses
↓
COLLAPSES INTO
↓
ELITEMSP
ONE PLATFORM · ONE SCHEMA
02 / THE WEDGE
One operational graph.
One source of truth.
Tenant, endpoint, identity, telemetry, drift, alert, approval, model, vault, AI exposure, agent behavior, memory security, and audit data share one control plane. AI and automation operate on that governed operational context — not disconnected vendor silos.
Tenant
→
Endpoint
→
State snapshot
→
Drift finding
→
Alert
→
Approval
→
Signed command
→
Audit event
OPEN TODAY — OAUTH2 · HMAC-SIGNED WEBHOOKS · TENANT-GATED MCP PROXY · LOOPBACK ENDPOINT MCP TOOLS.
03 / GOVERNED AUTONOMY
Automation that acts.
Never outside the gate.
Every governed remediation command is assessed, checked against the deny-by-default command ACL, signed through one Ed25519 chokepoint, and written to the tenant audit chain. AI can propose; it cannot bypass authorization.
STEP 1
Assess
The Decision Engine scores reversibility, blast radius, criticality, change category, and confidence.
→
STEP 2
Authorize
A deny-by-default endpoint ACL decides whether the command may be signed at all.
→
STEP 3
Sign
Authorized commands receive a fresh Ed25519 signature, nonce, and timestamp.
→
STEP 4
Audit
Authorization, approval, dispatch, and command-result events land in the tenant audit chain.
■ ED25519-SIGNED COMMANDS
■ APPEND-ONLY AUDIT CHAIN
■ DECISION-ENGINE RISK GATING
FULL SECURITY MODEL →
04 / ARCHITECTURE
Built like infrastructure.
Because it is.
CONTROL PLANE
Python / FastAPI
Modular monolith on Postgres 16 with row-level security forced on nearly every tenant table. JWT RS256, Argon2, RBAC, rate limiting, hash-chained audit.
ENDPOINT DAEMON
Rust
One binary for Windows, Linux, and macOS, implemented and tested for enrollment, telemetry, 18 typed command types, signed-command execution, Windows Event Log and Linux journald collection, package and inventory operations, and local triage. 200MB RAM design budget.
OPERATOR DASHBOARD
React 19
An attention-first command rail driven by one role-filtered registry, with contextual inspectors that keep approval, execution, result, verification and cancellation states separate — over OpenAPI codegen and CI drift guards that stop backend and frontend types diverging.
POSTGRES 16 + PGVECTOR · NATS · OPENSEARCH · LOKI · REDIS · MINIO — DOCKER COMPOSE TO KUBERNETES
DRIFT DETECTION, POLICY PACKS, IDENTITY SYNC & A MOBILE APP RUN ON THE SAME CORE — SEE THE PLATFORM →
05 / PRINCIPLES
The ones we won’t compromise on.
/ 01
Tenant isolation lives in the database.
Postgres RLS is enabled and forced on nearly every tenant-scoped table; the app role can’t bypass it. Missing tenant context means zero rows — not all rows.
/ 02
AI cannot bypass the signed pipeline.
AI-proposed remediations must clear Decision-Engine routing and the deny-by-default command ACL before the signing chokepoint produces a command. Authorization and results are audited.
/ 03
Open ecosystem, governed by default.
OAuth2 client_credentials and HMAC-signed webhooks are live today. The control plane now has a tenant-gated MCP proxy and the daemon exposes loopback-only MCP tools; broader public MCP lifecycle work remains intentionally bounded.
/ 04
Local intelligence without command authority.
Tiered on-device inference can triage telemetry offline, but it cannot mint or execute commands. Per-tenant daily and per-request USD cost caps plus health-aware provider routing are shipped; token-count ceilings are not claimed.
/ 05
Verify what you ship.
Every shipped component passes real tests against real backing services, locally and in CI. No “looks done but isn’t.”
06 / POSITIONING
They bolt AI on.
We built under it.
Halo, ConnectWise, Autotask, NinjaOne, Atera, Kaseya, IT Glue, Rewst, Liongard, Pax8, Thread — eleven platforms mapped, one shared structural gap: data in disconnected silos, AI capped by what it can see.
THE INCUMBENT STACK
✕Data fragmented across 8–25 products and vendors
✕AI retrofitted onto legacy schemas it can’t see across
✕Walled-garden APIs; integrations as a revenue line
✕Surprise AI credit overages billed at month end
✕Automation that can execute without audit or rollback
ELITEMSP
✓One tenant-aware operational data foundation
✓Endpoint-local triage grounded in live telemetry
✓OAuth2, signed webhooks, and governed MCP foundations
✓Local inference shipped; per-tenant USD cost caps shipped, token ceilings not claimed
✓Governed commands are risk-scored, ACL-checked, signed, and audited
712
REST OPERATIONS ACROSS 552 OPENAPI PATHS
1,608
RBAC ROUTE×PRINCIPAL TEST CASES
179
ALEMBIC MIGRATIONS AT ONE VERIFIED HEAD
6,050
CONTROL-PLANE TESTS COLLECTED
18
TYPED ENDPOINT COMMAND TYPES
Stop renting 25 dashboards.
EliteMSP is in active development, building in the open. Join the waitlist for early access.
PRODUCT UPDATES ONLY. SEE OUR PRIVACY NOTICE.