Escanor

Escanor AI · The engineering operating system for AI-native teams

Your code ships.
Escanor keeps it running.

Connect your infrastructure, coding agents and production to one operational layer. Build, deploy, debug and recover without switching tools.

Sign up freeWatch the demoEnterprise? Book a call
GitHub
Vercel
AWS
Kubernetes
PostgreSQL
Cloudflare
Datadog
Slack

Escanor

Production healthy

>

Redis pool exhausted after deploy 8f92a1

Skip the video

From a 502 to a healthy deploy, in thirty seconds

A production API starts returning 502s. Escanor connects the stack once, a coding agent finds the cause and prepares the fix, a human approves the production deploy, and the change lands in the audit log.

  1. Escanor, the engineering operating system.
  2. Ten tabs to fix one bug. One place to fix it.
  3. Connect a provider once. Every agent reaches it.
  4. Ask for the fix. The agent traces the 502 and ships it.
  5. Production changes wait for your approval, and land in the audit log.
  6. Your code ships. Escanor keeps it running.

Ten tabs to fix one bug.

One place to fix it.

GitHub
Vercel
Datadog
AWS
Supabase
Slack
Kubernetes
Docker
Linear
Cloudflare

Production incident

API requests returning 502

api.orbitlane.io

Error rate
38.4%
Latency
+421%

Escanor

10 sources, one thread

  • Errors began 40 s after deploy 8f92a1
  • Redis connections at pool limit
  • Patch ready, tests running
  • GitHub
  • Vercel
  • Datadog
  • AWS
  • Supabase
  • Slack
  • Kubernetes
  • Docker
  • Linear
  • Cloudflare

Escanor MCP

Give your coding agent the whole stack.

One MCP connection lets your agent operate your infrastructure.

  • inspect
  • deploy
  • debug
  • query
  • restart
  • rollback
  • verify
Sign up free
Coding agentEscanor MCP
  • GitHub
  • Vercel
  • Kubernetes
  • AWS
  • Cloudflare
  • PostgreSQL

You

The production API is returning 502s. Find the cause and deploy the fix.

Escanor

  • Checking recent deploymentsDeploy 8f92a1 went live 40 s before the first 502
  • Inspecting application logsRedis connection pool exhausted
  • Comparing environment changesREDIS_POOL_MAX dropped from 50 to 5 in 8f92a1
  • Preparing patchPool size restored on branch fix/redis-pool
  • Running tests184 of 184 passed
  • Deploying to productionRevision live, rolling out to all regions
  • Deployment healthy
  • Error rate recovered
  • Incident resolved

Example session

Stop operating infrastructure. Start delegating it.

The agent writes the code and operates the environment it runs in.

You

Deploy the current branch

Agent

Plans the run and calls the tools it needs.

  • GitHub
  • Docker
  • AWS
  • Kubernetes
  • Vercel

Escanor

Routes each call to the right provider.

Production

Live

Revision rolled out, health checks passing.

Every machine and every agent in one workspace.

Servers, deployments, logs and agent sessions in one place, so you can step in when it matters.

Production API

Degraded

Logs

  • 03:14:08ERRORconnection pool exhausted
  • 03:14:09ERRORretry failed, attempt 3 of 3
  • 03:14:11WARNp95 latency 2.4 s
  • 03:14:14INFOagent 12 attached to prod-api

Agent 12

Running

Patching connection pool

Agent 13

Deploying

Deploying fix to staging

Servers

  • vm-01api38% cpu
  • vm-02worker12% cpu
  • vm-03database71% cpu

Deployments

  • 8f92a1production2 min ago
  • c41d07staging1 h ago
  1. One server and its logs
  2. The agents working on it
  3. Every machine and deployment

Incident response

When production breaks, Escanor goes to work.

Detected 03:14:08

Agent session

Cloud Run, 4 vCPU, 8 GiB
  • Waiting for a session

The system closes the loop.

Escanor checks every fix it ships, and what it learns goes back into what it watches.

Autonomy you can audit.

Every autonomous step runs in a controlled session, is verified before it ships, and leaves a record you can read.

Isolation

Fixes are written and tested in their own session, never on your production machines.

Cloud Run session

repository copytest runtime
Production, untouched until checks pass

Verification

A change ships only after its checks pass, and the result is checked again once it is live.

  • Tests pass before deploy
  • Health checks pass after deploy
  • Error rate back to baseline

Access control

Each provider connects with its own credential, so the agent reaches only what you have linked.

Auditability

Every tool call is recorded with who made it, what it ran and how it ended.

  • 03:14:19agent-12session.provisionok
  • 03:14:27agent-12git.commit fix/redis-poolok
  • 03:14:44agent-12vercel.redeployconfirmation required
  • 03:14:49m.okaforvercel.redeployapproved

Human control

Destructive actions are held until a person approves them. Try it.

Agent 12 requests

vercel.redeploy on production

One operational layer for your whole stack.

Connect a provider once and every agent and teammate reaches it through the same tools.

Code

  • GitHub
  • GitLab
  • Bitbucket

Cloud

  • AWS
  • Google Cloud
  • Azure
  • DigitalOcean

Deploy

  • Vercel
  • Cloudflare
  • Netlify
  • Docker
  • CircleCI

Runtime

  • Kubernetes
  • Amazon EKS
  • Azure AKS
  • Argo CD

Data

  • PostgreSQL
  • MongoDB
  • Redis
  • Supabase
  • Neon

Observe

  • Datadog
  • Sentry

Communicate

  • Slack
  • Linear
  • Jira

Take Escanor with you.

Install the available desktop and phone builds, pair your devices, and keep your assistant close.

Checking for the latest builds…

Linux

Escanor Desktop · x86-64

AppImageChecking……
Debian packageChecking……

AppImage runs on most distributions; the .deb is for Debian and Ubuntu.

Installation & troubleshooting →

Windows

Escanor Desktop · x86-64

Installer (.exe)Checking……
Install and verifySteps, signing status, checksumsOpen →

Unsigned: SmartScreen asks you to confirm the first run.

Installation & troubleshooting →

macOS

Escanor Desktop

Apple siliconM1 and later…
IntelOlder Macs…

Not notarised: open it once, then System Settings › Privacy & Security › Open Anyway.

Installation & troubleshooting →

Android

Escanor phone app · Android 7+

StandardRecommended…
Phone controlAdds the Accessibility service…

Two apps: Standard for most people, Phone control if Escanor should operate your phone. See the difference below.

Installation & troubleshooting →

iPhone & iPad

Escanor phone app · iOS 15+

Unsigned IPAChecking……
Sideload guideSideloadly or AltStoreOpen →

Unsigned and not on the App Store: Sign and sideload it with your own Apple ID.

Installation & troubleshooting →

Web

Escanor dashboard · any browser

Sign up freeGoogle or emailOpen →Open the dashboardIf you are already signed inOpen →

Nothing to install. Sign in on any device and pick up where you left off.

Installation & troubleshooting →

Two Android apps: which one?

Both are the same Escanor app with the same account and version. Install one or the other: the second replaces the first. If you are not sure, take Standard; you can switch any time.

Standard

Recommended

For almost everyone. Everything Escanor does, without any access to the rest of your phone.

What it does

  • Chat, voice and “Hey Escanor”, approvals, automations, your computers and your machines.
  • Calls open the dialer with the number filled in; you press call.
  • No Accessibility service, no SMS, no notification access, nothing drawn over other apps.
  • Payment and banking apps keep working normally next to it.

Installing it

  • Installs with the usual Android prompts for a file from the web.
  • Play Protect may say “App scan recommended”: choose Scan app, then Install when it says the app looks safe.
Download Standard →

Phone control

Optional

Only if you want Escanor to operate your phone for you when you ask.

What it does

  • Everything in Standard.
  • Presses Home and Back, opens apps, scrolls, taps and types for you, using Android’s Accessibility service.
  • Places calls directly and shows “Hey Escanor” over the lock screen.
  • Switches itself off when you open a payment or banking app, so they keep working.

Installing it

  • Android is stricter with any app installed from a file that has an Accessibility service. Play Protect may block it, and in some countries, including India, Android refuses to install it from a browser or file manager at all.
  • After installing, Android 13 and later hide the Accessibility switch until you allow restricted settings for Escanor.
Download Phone control →

What you will see when you install from a file

  1. Chrome: “File might be harmful.” Chrome says this about every app file downloaded outside an app store. Choose Download anyway.
  2. Android: install unknown apps. Allow it for your browser or file manager when asked, then Install.
  3. Play Protect: “App scan recommended.” Escanor is not on Google Play yet, so Play Protect has not seen it before. Choose Scan app; when it says This app looks safe, choose Install.

Samsung phones with Auto Blocker on refuse every app installed from a file: switch it off in Settings › Security and privacy › Auto Blocker to install. Full install guide.

Need an older version? Browse all releases.

Start with your stack

Build without the operational overhead.

Connect your tools, give your agents the context they need, and keep control from one workspace.

Sign up freeBook a call
See the product demo

Drag the core · Move through the particles