A confidential cloud for collaborative apps. Apps are WASM, written with the Calimero SDK; each app instance is replicated by its own Raft log across attested Intel TDX nodes, reached through a sealed channel the client opens only after verifying the node's attestation, and signed into with passkeys. Nobody operating the nodes can read the apps' data.
Full documentation: https://calimero-network.github.io/core/, organized into Cloud (start here), Build (write apps), Operate (run a cluster), Protocol Reference and Contribute (work on core). Coming from the earlier peer-to-peer release? The glossary maps its names to these.
| Crate | Description |
|---|---|
| merod | The node: init, run, config, local (a development cluster), inspect, kms disk-key, attest |
| meroctl | The command line: packages, app instances (context), organizations, teams, blobs, accounts, and ops for the operator |
| calimero-node | The node's inside: system group, app groups, the HTTP and Ops API |
| calimero-log | Multi-group Raft (openraft) over a sealed RocksDB store |
| calimero-sealed | The sealed HTTP transport, server and client |
| calimero-identity | Passkeys, sessions, API keys, confirmation challenges |
| calimero-client | Rust client: attestation check, sealed requests, sign-in |
| calimero-app-engine-wasmtime | Wasmtime engine for calimero:app components |
| calimero-sdk | The Rust SDK apps are written with, built into calimero:app components by calimero-app-build |
The full list is in crates/AGENTS.md.
cargo run -p merod -- local # 3 nodes on 127.0.0.1:2501-2503; keeps running, go on in another terminal
cargo install --path crates/meroctl
meroctl node add local http://127.0.0.1:2501/ --allow-mock
meroctl login --dev-passkey ./dev-passkey.json --name ada # signs up: an account and its personal organization
scripts/install-mero-app-build.sh # once: puts mero-app-build on PATH
mero-app-build apps/kv-store --out kv_store.wasm
meroctl context create --path kv_store.wasm --name kv --alias kv
meroctl call --context kv set --args '{"key":"a","value":"1"}'
meroctl call --context kv get --args '{"key":"a"}' --viewThe full walk-through, with the JavaScript and Python clients, is the Quickstart.
Nodes run on Linux; on macOS, run merod in Docker and meroctl natively.
See Install & first run.
| I want to… | Start here |
|---|---|
| Understand Calimero and try it | Cloud — overview, quickstart, writing apps |
| Write a Calimero app | Build — SDK, collections, examples |
| Run a cluster | Operate — install, deployment, merod/meroctl, configuration, the node API |
| Understand the model | Protocol Reference |
| Work on Calimero Core itself | Contribute — architecture, crate guide, development, testing |
The docs live in docs/ (Astro Starlight).
- calimero-network/mero-tee -- TEE images, mero-kms, signed releases
- calimero-network/mdma -- Calimero's cluster manager (VMs, placement, the rebalancer)
- calimero-network/mero-js -- JavaScript/TypeScript client
- calimero-network/calimero-client-py -- Python client
Apps build with calimero-app-build (mero-app-build) and are signed with tools/mero-sign.
MIT OR Apache-2.0