An integration platform with no builder UI. Flows are VejasScript — plain, readable code written by your coding agent, reviewed in git, and run natively by a single Rust binary on NATS. Humans keep two screens: monitoring for operators, and a business panel where non-technical experts validate and correct transcoding tables and thresholds. The agent owns how; the human owns what it means. The whole platform is drivable over MCP.
Vėjas is the old Baltic god of the wind. Wind moves things without anyone drawing the route.
Status: young, but real — two production customers so far, collecting NIS2 supplier-compliance evidence across eight EU countries today. Interfaces still move fast. Start here: ** the documentation** ·
ADRs. The bet, long-form:
The demo, 45 seconds — a real SAP NetWeaver and a real Salesforce org, bridged both ways by two readable flows; a domain expert corrects a business rule on screen, the change is shadow-replayed on the real events, promoted, and the next IDoc lives the corrected rule. The recording is also a green end-to-end test (the script) — the video cannot lie. Full video (mp4).
Measured, not claimed — reproducible on an 8-core dev machine (methodology and comparisons): cold start 11–13 ms, 6–8 MB RSS under load (49 MB with fifty live flows), 6.2 MB binary / 201 MB image, end-to-end p50 2 ms uncongested / p50 14 ms at a paced 1 900/s sustained with every event hop persisted in JetStream, 2 285/s through a real MQTT broker and back (QoS 1 both ways, PUBACK-gated). Same order of magnitude as engines that persist nothing, in ~25× less memory.
Below: a flow an agent wrote from one sentence, in VejasScript. Its transcoding table is seeded, samples come from the fixture, the emitted payload sits on top, and the whole script is editable in the panel. A domain expert corrects any of it without touching code:
Runtime— one Rust binary. Runs VejasScript flows in-process (a durable NATS consumer + the interpreter per flow), hot-reloads on edit, serves the panel and the MCP server. No Python, no subprocess. (ADR-0001, ADR-0009)Transport— NATS with JetStream, the only infrastructure dependency (persistence, KV, object store). Two containers, onedocker compose up
. (ADR-0002)Clustering— run N runtimes on the same NATS: flows load-balance and fail over natively (measured: an instance kill -9'd under load, every message still delivered exactly-all), singleton sources take a KV lease (graceful handoff 2.6 s, crash failover bounded by the TTL), and a clustered instance refuses local-file mutations — a live promote instead publishes aversion every instance converges on (measured: 60 ms convergence, lossless mid-burst). (ADR-0020/0021, measured inbench/)Language— VejasScript:source
in,emit
out,invoke
to compose services (pipeline-merge composition), transcoding tables and thresholds as editable literals.Packages— group flows and services, hot-addable; cross-package calls go throughEXPORTS
(private by default) or the bus. (ADR-0003, ADR-0004)Connectors— a typed Rust** driver SDK**(Driver
trait, Source/Sink). Bundled drivers:http-in
,timer
,http-poll
,oauth-poll
(a generic OAuth2 REST poller that stands in for much of a SaaS catalog),slack-out
,http-out
, plus the exec bridges (exec-source
/exec-sink
/exec-stream-source
/exec-rpc
), which wrap a program inany language over stdio, isolated by process. That is how theSAP connector ships: native Rust over the officiallibsapnwrfc
C library — BAPI/RFC calls, IDocs in and out over tRFC, no JVM (ADR-0014) — and theSalesforce connector (OAuth2 + Bulk API 2.0, streaming). An instance is a declarative.vjs
manifest, hot-addable, and an agent can write one from a prompt. The subject convention stays the whole interface, so an out-of-process connector is first-class. (ADR-0007, ADR-0011, ADR-0014)Secrets—secret("path/key")
resolves from a Vault (HashiCorp KV v2; an env backend for dev) at run time. A secret is never a literal, so it never lands in git, the panel, or the business surface. (ADR-0008)UI— no builder. Monitoring (pipeline graph, statuses, a live feed of the last processed events) + a business panel where experts review and correct the business surface (rendered from literals in the code). A correction isshadow-replayed on the flow's last real events— before/after diff, then promote or discard. You never click to draw a flow. (ADR-0005)** Versioning**— a candidate version of a flow replays** yesterday's real traffic**(time-travel) or shadow-follows** live**traffic (canary), diffed side by side per event; unproven code never emits for real. Promote publishes the version cluster-wide (measured: 60 ms, lossless), audited, rollback included. (ADR-0021)MCP & API— the runtime is its own MCP server; a flow that declarestool "…"
becomes a first-class MCP tool, and one that declaresapi "VERB /path"
becomes a synchronous HTTP endpoint with an auto-generated OpenAPI document. The platform grows its own tool and API surface as you write flows. (ADR-0006,docs/MCP.md)
docker compose up # nats + vejas, nothing else
claude mcp add --transport http vejas http://localhost:8686/mcp # or any MCP client
Develop and test:
cargo test --manifest-path core/Cargo.toml # language unit tests
core/target/release/vejas-runtime vjs-test tests/vjs # golden end-to-end cases
Security defaults: the panel/MCP port (8686) binds to localhost only — that
surface can write flows and run commands (exec connectors), so expose it
deliberately. Set VEJAS_TOKEN
and every write (POST, /mcp
included)
requires Authorization: Bearer <token>
. The webhook port (8787) only publishes events onto the bus.
Apache-2.0. A platform that argues against proprietary formats has to start with itself.