Your agent ships 70% of the app. We make the other 30% safe.
If you build production apps on Cloudflare with Claude Code or Cursor, you know the pattern: the agent gets you most of the way in an afternoon, then you spend days on the parts that actually carry risk — auth boundaries, Stripe webhooks, transactional email, audit logs, multi-tenant isolation, deploys.
Why we built this
That last 30% isn't slow because you're sloppy. Agents get it wrong structurally — they write code that passes tests and reads fine, then fails exactly where it costs money. The numbers back it up: 84% of developers now use AI tools, but only 29% trust the output (down from 40%), and Veracode found 45% of AI-generated apps ship with exploitable OWASP vulnerabilities. Speed got cheap. Defensibility didn't.
What microservices.sh is
Production foundations for AI-built apps: verified, source-visible, Cloudflare-native modules your agent can inspect, compose, and ship. Each module carries a typed contract, pinned versions, cross-module permissions, and deploy-time safety checks — so the dangerous parts are already correct. Your agent reaches for governed primitives instead of hallucinated glue. That's the how: distributed over MCP and a CLI, straight into the tools you already drive.
Why it holds up
It's the only module-contract-governed, Cloudflare-native stack with MCP distribution. Boilerplates hand you a fork you own every bug of forever. BaaS hands your agent raw infra with no guardrails. AI app builders get you to demo day, not audit day. Here the source is visible, the versions are pinned, and every module is labeled by maturity — so you know what's production-ready and what's still in beta, with the exact checks shown. No black box, no lock-in: export the source and run it on your own Cloudflare anytime.
Who it's for
Agencies delivering client apps who need the dangerous 30% done once and reused safely. Technical founders who need "trustworthy-enough-to-sell" before an investor demo. Fractional CTOs who have to stake their name on code in a security review. Teams building multi-tenant SaaS on Workers who can't afford a tenant-isolation leak.
What you get out of it
Move fast with your agent and defend the result to the person who matters — a client, an investor, a security reviewer. Stop re-auditing the same auth and webhook code every project. Ship on a deadline without shipping a landmine.
Available now
Modules for auth, customer, booking, email, audit log, payments, webhook delivery, and multi-tenant gateway — each maturity-labeled. Browse the catalog to see the contracts and checks.
Try it locally, no account
Generate and inspect on a free local tier — no account required. One command:
pnpm create microservices-app@latestWhen you're ready, the first production tier with a custom domain is $19/mo — flat monthly, no metered surprises. Run the quickstart, or browse the modules at microservices.sh.