FAQ
Questions FDEs ask first
Is this a research project or a product?
Both. We’re a research lab first. The mini apps are what the research produced, they’re open source, and you can deploy them for clients today.
Do I have to rebuild my current setup?
No. Start with one mini app on one client, usually Knowledge, or Rules & Approvals with Operator Inbox, and add the rest when a client needs them.
Which agents work with it?
Claude Code, Codex and other harnesses connect over one MCP URL. Grants and memory live outside the harness, so switching agents doesn’t change them.
Where does the client’s data live?
On the client’s own Railway or Coolify account. We don’t host it, and the client owns the server.
What happens if I stop using Tealbrick?
The mini apps keep running on the client’s server, but Portal deploys, verified updates and support stop. The code is open source, so you or the client can keep maintaining it.
How is it priced?
Planning in the Portal is free. Mini apps you set up with us are free for 30 days. To keep a mini app after that, you buy one licence per client workspace, for any number of agents, and pay once. If you don’t, the mini apps keep running on the client’s server, but Portal deploys, verified updates and support stop. There’s no monthly bill from us.
The client’s first questions are about security. Here are the answers.
- Where does it run?
- On the client’s own Railway or Coolify account. Their data stays on their infrastructure, and nobody rents it to them.
- Can our team read the code?
- Yes. Every mini app is open source, so the security team reviews exactly what they run.
- What can each agent do?
- Only what it’s granted. Each agent gets its own grant per mini app, down to create, read, update and delete, checked on the server for every call. Anything not clearly granted is refused.
- Who decided what, and when?
- It’s all recorded. Rules & Approvals records why, Operator Inbox records who approved, and Marketplace logs every call.
Four more answers for the security review
- Instant revoke
- Disconnect an agent in the Portal and its next call fails, without touching the others.
- Verified releases
- Each deployment is checked against a recorded fingerprint, and drift is flagged.
- Short-lived access
- Opening a deployed app uses a one-time ticket that expires in 60 seconds.
- Least access by default
- Scribe is read-only. Local Runtime Bridge shows approved folders only, with commands off.