A confidential cloud for collaborative apps.
Your app runs on attested TEE nodes. Nobody operating them can read its data, including us.
You write an app in Rust or JavaScript, compiled to WASM, and publish it as a signed package. Calimero runs each app instance on a small cluster of Intel TDX nodes, replicated by its own Raft log.
- Clients check the node before they talk to it. A client reaches a node over a sealed channel, which it opens only after verifying the node's hardware attestation. People sign in with passkeys.
- Nobody can quietly swap the code. New code or a new node image reaches an app's data only after the app's approver says so, on a page the node serves itself. Every such decision is attested.
Practically: shared documents, chat, issue trackers, spreadsheets, internal tools. Collaborative SaaS, without a vendor who can read the plaintext.
| I want to… | Go to |
|---|---|
| Deploy an app without running anything | Calimero Cloud |
| Understand how it works | Cloud overview · Protocol reference |
| Write an app | Build: the Rust SDK and cargo mero, in core |
| Call an app from a frontend or a script | mero-js · mero-react · calimero-client-py |
| Run a cluster yourself | Operate |
| See real apps | apps |
| Coming from the peer-to-peer release | Coming from v1 |
Try it locally from a checkout of core:
cargo run -p merod -- local # a 3-node development cluster on 127.0.0.1:2501-2503
cargo install --path crates/meroctl
meroctl node add local http://127.0.0.1:2501/ --allow-mock
meroctl login --dev-passkey ./dev-passkey.json --name ada| Repo | Description |
|---|---|
| core | The node (merod), the CLI (meroctl), the Rust SDK, cargo mero, and the docs. The heart of the stack. |
| mero-tee | TDX node images, mero-kms, signed releases, and the public attestation verifier. |
| app-registry | Where apps are published and installed from. Ed25519-signed manifests; published versions are immutable. Live at apps.calimero.network. |
| Repo | Language | Description |
|---|---|---|
| core/crates/sdk | Rust | The app SDK: macros, CRDT collections, events. |
| core/tools/cargo-mero | Rust | cargo mero: scaffold, build to WASM with an embedded ABI, test, and sign .mpk packages. |
| calimero-sdk-js | TypeScript | Write app logic in TypeScript, compiled to WASM. |
| mero-devtools-js | TypeScript | ABI parser and typed-client codegen from an app's ABI. |
| mero-mcp | — | MCP server: exposes a cluster and every app method as tools for AI agents. |
| calimero-skills | — | Agent skills for building on Calimero. |
| Repo | Language | Description |
|---|---|---|
| mero-js | TypeScript | Attestation check, sealed channel, passkey sign-in, calls, events, approvals. Browser, Node and edge. |
| mero-react | TypeScript | React hooks and provider over mero-js. |
| calimero-client-py | Python | Python client for automation and scripting. |
| swift-sdk | Swift | iOS and macOS. |
| kotlin-sdk | Kotlin | Android. |
| Repo | Description |
|---|---|
| apps | Every Calimero app in one monorepo: design tools, spreadsheets, chat, calls, document signing, games, and more. Shared toolchain, one CI, one release path to the registry. |
| workshop-apps | Apps built live at workshops, one per branch. |
| Repo | Description |
|---|---|
| homebrew-tap | macOS install for meroctl, cargo-mero and mero-abi. |
| install-sh | Install scripts for Calimero binaries. |
| design-system | Shared UI components and design tokens across Calimero frontends. |
Reference documentation for
coreis built from the repo and published at calimero-network.github.io/core, in five tracks: Cloud, Build, Operate, Protocol Reference and Contribute.
Issues and PRs are welcome across every repo. Questions and developer support: Discord.
Licensed MIT OR Apache-2.0.
