Everything your workspace needs to travel
Not just files. The whole working state: projects, environment, secrets, and the agents that help you ship.
One-command onboarding
ripple up adopts your projects, registers the machine, and writes an agent guide. New machines are ready in minutes, not afternoons.
Secrets that travel sealed
Env values are encrypted at rest with age and never leave a machine in plaintext. Pulls need explicit approval. Leases expire on their own.
Built for coding agents
A first-class MCP server with 134 tools. Agents read workspace state, plan setups, and request approvals — without ever seeing your secrets.
Files, not a sync folder
Workspaces mount as real folders in Finder — files hydrate on first open and work offline after. The same native integration is built for Windows Explorer and Linux; the Mac app ships today.
Team control that enforces itself
SSO with role mapping, per-org roles, and seat limits enforced at the credential layer. Change a role and old tokens stop working that second.
Self-host or cloud
One container and a Postgres, or our hosted control plane. Same product, same guarantees. Your call, switchable later.
Onboard a machine with one command
No wiki page, no afternoon of setup. ripple up finds your projects,
writes env contracts from what they already declare, and registers the machine.
The readiness report tells you exactly what's left — and how to fix it.
- Detects package managers, toolchains, and env contracts automatically
- Writes an AGENTS.md so coding agents understand the workspace
- Everything works offline. Sync is a feature, not a dependency.
Secrets never travel in plaintext
Most sync tools treat secrets like files. RippleRoot treats them like secrets: encrypted on your machine, sealed in transit, and released only to devices you approve — for as long as you allow.
- age x25519 encryption at rest; plaintext never touches the server
- New devices need an explicit approval before any pull
- Short-lived leases expire on their own — nothing lingers
One workspace, three doors in
Desktop app, CLI, and MCP server ship together. Same state, same guarantees — pick the surface that fits the moment.
Desktop app
Machine readiness, projects, secrets, agents, and cloud sync in one window. Approvals and device health at a glance.
CLI
31 commands, from ripple up to ripple doctor. Script-friendly output, shell completions, fully offline.
MCP server
Coding agents read state, plan setups, and request approvals over MCP. Metadata only — secret values are never returned.
Simple per-seat pricing
Start free. Pay when the team grows. Change or cancel any time.
Free
- Up to 3 seats
- All core features — sync, vault, agents
- Self-host with your own Postgres
- Community support
Team
- Everything in Free, unlimited seats
- SSO with role mapping
- Seat and role management, instant credential revocation
- Credential rotation automation
- Priority support
Enterprise
- Everything in Team
- Custom terms and invoicing
- Deployment and migration help
- Dedicated support
Your next machine sets itself up.
Sign in with Google, create your workspace automatically, and start free.
RippleRoot Cloud is ready
Your Google sign-in creates a personal workspace automatically. The free plan includes up to three seats, and billing stays optional until your team grows.
Debian and Ubuntu: download the .deb. Every build updates itself in place.