loading
Loading content
loading
Announcement
They compose real tools into a DAG, place agent nodes beside them, and run across the fleet. MCP from Claude Code, Cursor, or Codex.
the graph
Agents compose tools into a DAG and sit on it as nodes. One orchestrated run across the fleet.
the fleet
Each node is a container. Agent nodes included. The fleet runs them in parallel.
live tables
Findings land structured and deduplicated. One row per finding, not a folder of logs.
app mode
Internal tools or customer-facing surfaces over live tables. App Mode builds them; the SDK drives the same stack.
workflow nodes
Drop an AI Agent node next to tools and scripts. One graph. One fleet run.
Workflowsthe fleet
Each ready node takes one machine. More waiting nodes means more machines join.
ExecutionManaged
pool scales with the run
Self-hosted
hosts you enroll take jobs
live tables
One TQL line filters the live table. Each row marks new, resurfaced, or gone.
Databasesseverity = "critical" OR severity = "high"
app mode
Internal dashboards or external portals on the live table. Agents build in App Mode; wire them in with the SDK.
SDKHere are the most important parts, one row per feature. Building and running first, then the agent side.
Console and editor
canvas
Two nodes and one wire: the graph you edit is the graph that runs, with no Builder to Executions hop.
nodes
Open any node to configure inputs, read the command, and run it without leaving the canvas.
integrations
Connectors are ordinary nodes, so a run writes its results straight into the tools your team already works in.
distribute
One toggle fans a node's input into parallel jobs, split by line or by batch.
runs
Hit Play on a downstream node and Trickest reuses the upstream output from your last run instead of executing it again.
scale
Distribute fans a single node across the fleet, one task per machine, with the live count on the canvas.
snapshots
Every snapshot keeps its added, changed, and removed node counts so you know what you would be restoring.
debug
Error output renders in red beside stdout, so a failed run tells you what broke without digging through a log file.
schedule
The calendar button in the editor header turns blue once you schedule a workflow, and shows the repeat frequency.
secrets
Variables stay readable as ${{vars.NAME}}, while secrets live in their own encrypted store as ${{secrets.NAME}} and never come back out.
data
One tab switch turns workflow output into a queryable findings table.
tables
The console scans recent runs, detects table-shaped output, and lists every table ready to promote.
access control
Owners, writers and readers get exactly the access their role allows, and teams inherit that access in bulk.
Agentic updates
workbench
Each workflow gets its own tab strip: editor, tables, query, files, terminal, and changes, all scoped to that one workflow.
plans and subagents
Plans persist to a file across turns, and any step can hand off to subagents that run in parallel and report back.
tasks
Save a prompt as a task, pick a cadence and a model, and read the run history it leaves behind.
ai builder
Describe the scan and watch the agent place each step on your canvas and wire it up.
agent nodes
Put reasoning on the graph next to deterministic steps, so a run can triage its own results and still finish as one pipeline.
sandbox
Every sandbox is its own instance, not a microVM slice, so the agent edits files, runs commands, and builds a live preview.
visualizations
The agent drops a chart, table, or JSON card into the thread instead of walls of text.
Community is free with your own model key. Enterprise is one annual license for fleet, databases, and apps.
Explore, build, and run with Trickest on your own infrastructure.
Run and scale security operations across your team and organization.
Everything in Community, plus:
free for developers · enterprise custom
Pick your plan
One MCP line into Claude Code, Cursor, or Codex. Same engine. Same graph.
$ curl -fsSL https://trickest.io/integrate | sh -s -- --client claude-codeCLI, SDK, MCP, and REST API. Same auth. Same workflows and runs.
Architecture and limits for every surface. Open the page that answers the next question.
Get a personalized demo
A 30-minute walkthrough. We map the platform to your stack and answer pricing and deployment questions for your environment.