README

Governed AI agents that actually do the work

Melaya is a governed platform for AI agents that do real work — in the cloud or on your own machine — across your business systems, your browser, and real mobile apps.

Website · Documentation · MCP Server · Discord

This public repository contains the official SDKs and public developer documentation. The hosted platform, agent runtime, Device Control service and Browser Control service are proprietary and are not included here.

Looking for the remote MCP server? It lives at melaya-labs/melaya-mcp — one endpoint, https://api.melaya.org/mcp.

The products

	Melaya Agents — available now A visual builder for high-trust AI workflows: tools, models, memory, subagents, knowledge, evaluations, schedules, cost limits and human approvals, composed as a pipeline. Product · Docs
	Melaya Assistant — available now Work across your approved business systems in natural language, with permissions, execution and approvals still under your control. Product
	Device Control — flagship, available now Let an AI operate real Android apps the way a person does: tapping, typing, swiping and navigating through the visible interface. No vendor API, no integration. Per-app permissions and approval before sensitive actions. Product · Docs
	Browser Control — available now The same governed execution in real browser tabs, with live visibility and a human stop control. Ships as a browser extension for Chrome, Edge, Brave, Opera and Firefox. Product · Firefox add-on
	MCP Server — available now Give Claude, Codex, Cursor, ChatGPT or any compatible client access to Melaya's execution layer through one remote endpoint. 81 scoped tools across 8 permission domains, OAuth 2.1 + PKCE, no API key to paste. Product · Repo · Docs
	Melaya Marketing — available now One AI-native marketing cockpit. Connects your ads, search consoles, analytics, DNS and site, reads your real numbers server-side, and runs actions that do the work — SEO and page-speed audits, DNS hardening, wasted-spend cleanup — pausing for your approval before anything touches real money or your live site. Product

The catalog


6,912	103	26
scoped tools	specialized subagents	AI providers
81	9	8
MCP tools	official SDKs	MCP permission domains

Runtime catalog endpoints remain the source of truth; the numbers above move as the catalog grows.

Bring your own model

Cloud or local, per agent. Your credentials stay in encrypted Connectors, never in prompts or pipeline JSON.

Local models through Ollama and LM Studio run on a user-controlled runner, so the data never leaves the machine.

Why teams use Melaya

Minimum-tool agent permissions instead of an unlimited toolbox
Encrypted Connectors instead of credentials in prompts or pipeline JSON
Tenant-scoped projects and API keys
Human approval for consequential actions, enforced server-side
Run status, traces, costs, evaluations, outputs and cancellation
Cloud execution or a user-controlled local runner
Mobile and browser workflows for products that expose no suitable API
Nine official SDKs over the same public lifecycle

Quick start: pair a phone

import { Melaya } from "@melaya/sdk";

const melaya = new Melaya({
  apiKey: process.env.MELAYA_API_KEY!
});

const { code, expiresInSeconds } =
  await melaya.agents.phone.pair();

console.log({ code, expiresInSeconds });

const devices = await melaya.agents.phone.listDevices();
const apps = await melaya.agents.phone.listApps();

await melaya.agents.phone.setAllowedApps([
  "com.android.chrome"
]);

A Melaya platform key is required. "No app API required" means Device Control operates the target app through its user interface; it does not mean the Melaya SDK is unauthenticated.

Quick start: connect over MCP

No SDK, no key to paste. Add the endpoint to any compatible client and approve the scopes you want:

claude mcp add --transport http melaya https://api.melaya.org/mcp
# or
codex mcp add melaya --url https://api.melaya.org/mcp

Setup for Claude, ChatGPT, Cursor, VS Code, Le Chat, Gemini CLI, Zed, Cline, Goose and more: melaya-labs/melaya-mcp.

Official SDKs

	Language	Package
	Python	melaya
	TypeScript / JavaScript	@melaya/sdk
	Go	melaya-go
	Rust	melaya
	Java	org.melaya:melaya-sdk
	Kotlin	org.melaya:melaya-sdk-kotlin
	C# / .NET	Melaya.SDK
	Ruby	melaya
	PHP	melaya/sdk

The supported public surface includes authentication, projects, Connectors, credentials, pipelines, templates, Agent Builder tools, Device Control management, HITL, evaluations, events, billing, account operations, runner management, team management, MFA, the assistant, bug reports and the memory graph.

Internal operator APIs are intentionally absent.

Security rules for SDK users

Keep MELAYA_API_KEY in a secret manager or server environment.
Store model and external-service credentials in Connectors.
Do not put secrets in source, prompts, RAG documents, artifacts, or env_overrides.
Give agents the smallest practical tool and app allowlists.
Require human approval for consequential writes.
Validate errors and final state before reporting success.
Revoke unused platform keys and paired devices.
Redact credentials from proxy, APM, and WebSocket query logs.

See Security and trust.

Documentation

Full product documentation and interactive API reference: melaya.org/documentation.

Where to find us

Melaya is listed across the MCP registries and the product directories below. Every link was fetched and confirmed live on 2026-09-21.

Product directories

AI agent directories

MCP ecosystem

_{Also on LaunchKiwi · MakerHunt · LaunchNest · FoundrList · Launchpadly · LaunchIgniter · Launch Llama · The SaaS Dir · ProjectRadar · TopBusinessSoftware · HackerNoon}

License

The SDK code and public documentation are licensed under Apache-2.0. The hosted platform and engines are proprietary and are not included in this repository.

Third-party names and logos are used only for identification and do not imply endorsement.

_{Melaya Labs · melaya.org · Discord}

melaya / sdk

Package info

Security

Statistics