Platform
Where AI work becomes production work.
AI can reason through a task. StitchOps makes it repeatable, governed, and auditable across portals, desktop apps, terminals, and on-prem directories.
Three parts, one outbound connection.
Control plane
Cloud, multi-tenant. Holds workflow definitions, validates them against the action registry, dispatches work, records telemetry. REST and MCP on top.
Edge agent
On a dedicated worker VM in your environment. Connects outbound-only over TLS. Runs browser, desktop, terminal, file, and directory actions locally.
Credentials
In your vault or ours, referenced as {{secrets.name.field}}. Resolved on the worker at run time. The model never sees a value.
Authoring
Describe it. Review it. Save it.
Tell Stitch what needs to happen and get a runnable workflow. Or build on the canvas, call the API, or let your AI assistant do it over MCP.
Connect an assistant →Determinism
Discover once. Replay every time.
The successful path from an AI discovery session is saved as a deterministic workflow. It runs without a model in the loop, which for repeated workflows costs less and fails less.
| Run | Workflow | Time | Status |
|---|---|---|---|
| run_01j8k | offboard-closed-apps | 5.2s | ok |
| run_01j8h | rotate-portal-password | 12.4s | ok |
| run_01j8f | access-review-monthly | 188s | ok |
| run_01j8c | orphan-cleanup | 41.0s | failed |
| run_01j89 | oem-report-pull | 58.3s | ok |
Runs the systems with no API.
Anywhere a person can log in and act, a workflow can run the same steps.
Browser
Any web portal. Elements chosen by index, with vision as fallback.
Desktop
Windows thick clients through UI Automation, image, OCR, and coordinates.
Terminal and file
CLI sessions and files on the worker. Model-written code never executes.
Directory and API
LDAP and Active Directory from inside your network. Native connections to Google Workspace, Slack, Microsoft 365, Okta, and more.
AI proposes. StitchOps executes.
Typed tools only
Over 130 actions in the registry. Every step validates before it runs.
Elements by index
The model picks from a named list. The agent owns the coordinates.
Confirmation gates
Destructive actions wait for an explicit yes. Every request is tenant-scoped.
Deploy on one VM.
Windows or macOS
Signed Windows installer. macOS agent available.
One worker VM
An unattended desktop session. Automation never runs on end user devices.
Outbound only
HTTPS and WebSocket to the control plane over TLS 1.2+. No inbound rules.
Reaches your systems
Network access from the worker to the portals, apps, and directory it operates.
Start with one workflow that never had an API.
Fifteen minutes on your top three manual processes. We tell you which one to run first.