Managed service providers
Every client console, one governed runtime.
client admin portals, RMM, and PSA have no API. StitchOps still runs them.
What teams here run first.
Every client adds a set of portals the PSA cannot reach, and every ticket is a technician clicking.
Client onboarding and offboarding across vendor consoles
One workflow per client, triggered from the PSA.
Credential rotation per client
Shared logins rotated and the vault updated, per client.
Evidence for client audits
User lists and settings pulled on a schedule, filed per client.
License reconciliation
Seat counts from each console into a table you can query.
How it runs
One worker VM. Every system.
The agent on a worker VM inside your network logs into client admin portals, RMM, and PSA with vaulted credentials, does the task the way technicians and service desk would, and logs every step.
See the platform →Worker
worker-01 · connected
- Windows Server 2022 · signed installer
- outbound only · TLS 1.3 · 0 inbound ports
- unattended session · dedicated VM
Capabilities
- browser
- desktop
- terminal
- file
- ldap / ad
Systems reached today
- client admin portalsbrowser14
- RMMbrowser9
- PSAbrowser6
- vendor consolesbrowser22
- on-prem AD across tenantsldap3
Secrets
31 references resolved on worker · 0 values sent to control plane
Evidence
Every run, on the record.
Status, timing and redacted results for each step, with the evidence a reviewer asks for attached to the run rather than reconstructed from screenshots later.
How security reviews go →| Run | Workflow | Time | Status |
|---|---|---|---|
| run_01j8k | offboard-closed-apps | 5.2s | ok |
| run_01j8h | rotate-portal-password | 12.4s | ok |
| run_01j8f | access-review-monthly | 188s | ok |
| run_01j8c | orphan-cleanup | 41.0s | failed |
| run_01j89 | oem-report-pull | 58.3s | ok |
Why technicians and service desk trust it.
Credentials stay yours
Referenced from your vault or ours, resolved on the worker. The model never sees a value.
Runs in your environment
An outbound-only agent on a dedicated worker VM. Screen content never leaves it.
Evidence on every run
Step-level logs and evidence make each run reviewable.
Start with one workflow that never had an API.
Fifteen minutes on your top three manual processes. We tell you which one to run first.