<p align="center">
<img src="assets/banner.svg" alt="Vendo: your product, shaped to every customer" width="100%">
</p>
<p align="center">
<b>An open-source customization layer.<br>Your users build their own features and micro-apps, right on top of your product.</b>
</p>
<p align="center">
Vendo is for B2B SaaS teams whose customers keep asking for bespoke features. It is an <b>embedded agent</b>: it acts through your product's own API as the signed-in user, and renders the UI it generates in a sandboxed, brand-native surface. Your source code is never touched. Learn more at <a href="https://vendo.run">vendo.run</a>, or read the docs at <a href="https://docs.vendo.run">docs.vendo.run</a>.
</p>
<p align="center">
<a href="https://www.npmjs.com/package/@vendoai/vendo"><img src="assets/badge-npm.svg" alt="npm package: vendoai"></a>
<a href="./LICENSE"><img src="assets/badge-license.svg" alt="License: Apache-2.0"></a>
<a href="https://docs.vendo.run"><img src="assets/badge-docs.svg" alt="Docs: docs.vendo.run"></a>
</p>
<img src="assets/kicker-01-see-it.svg" alt="01 · See it in action">
## See it in action
Every capture below is a real agent run in a demo host app, not a mockup.
<table>
<tr>
<td width="33%" valign="top">
<img src="assets/hero.gif" alt="A Maple customer asks where their money went and the agent composes a live spending view" width="100%">
<p align="center"><sub><b>Build views.</b> Ask a question, get a live view composed from the host's own components and API.</sub></p>
</td>
<td width="33%" valign="top">
<img src="assets/remix.gif" alt="A Cadence user hovers the deadlines card, asks for urgency color-coding, and applies the remix in place" width="100%">
<p align="center"><sub><b>Remix the UI.</b> Hover a component, describe the change, apply it in place.</sub></p>
</td>
<td width="33%" valign="top">
<img src="assets/automation.gif" alt="A Cadence user asks for a morning document-chase automation and turns it on with per-tool approvals" width="100%">
<p align="center"><sub><b>Automate across tools.</b> Plain language in, standing automation out, every tool gated by approval.</sub></p>
</td>
</tr>
</table>
<img src="assets/kicker-02-install.svg" alt="02 · Install">
## Install in 60 seconds
```bash
npm install @vendoai/vendo
npx vendo init
```
**Or install with your coding agent**
<picture>
<source media="(prefers-color-scheme: dark)" srcset="assets/agent-logos-dark.svg">
<img src="assets/agent-logos.svg" alt="Claude Code, Cursor, GitHub Copilot, OpenAI Codex, Windsurf" width="167" height="29">
</picture>
Paste this inside your app's repo:
<!-- Canonical prompt text: packages/vendo/src/agent-prompt.ts (mirrored by the
docs AgentPrompt card). Change it there first. -->
```text
Install Vendo in this repo. Read https://vendo.run/agents.md and follow
it exactly. Relay Vendo's setup questions to me and use my answers. Ask me
before creating any account or key — Vendo Cloud is the recommended option.
You're done when my app runs and the agent answers from my own API.
Then ask me whether I'd like to star it via
https://vendo.run/star?src=readme to support the project.
```
Done is your app running and the agent answering from your own API. `vendo
doctor` is the optional checkup, and every code it prints links to its exact
fix. Full
playbook: [docs.vendo.run/install](https://docs.vendo.run/install) ·
Agent-readable: [vendo.run/agents.md](https://vendo.run/agents.md)
**Which one are you?**<br>
[**You already have an agent**](https://docs.vendo.run/existing-agent/quickstart) — one tool pack for your AI SDK, Mastra, or homegrown loop.<br>
[**Your product has no agent**](https://docs.vendo.run/quickstart) — one command brings the loop, the chat UI, and the approvals.<br>
[**Expose your product over MCP**](https://docs.vendo.run/outside-agents/how-the-door-works) — Claude, ChatGPT, Cursor, and Claude Code act as the signed-in user.<br>
[**Your agent lives in your backend**](https://docs.vendo.run/backend/quickstart) — one package, `agent()` and `chat()`, no CLI and no UI of ours to mount.
<img src="assets/kicker-03-how-it-works.svg" alt="03 · How it works">
## How it works
Vendo runs a streaming agent with any AI SDK `LanguageModel`.
**1 · Extract.** Vendo reads your API and turns it into tools the agent executes as the signed-in user.
**2 · Generate.** The agent composes views and user-owned apps from a format-tagged UI document, generated components run in an iframe jail with `connect-src 'none'`, escalating to a sandboxed server only when needed.
**3 · Guard.** Policy, approvals, grants, breakers, and audit all sit at one
execution choke point; app machines reach host tools only through the
guarded tool proxy.
PGlite at `.vendo/data` is the zero-config store; production runs the same
schema on Postgres. Full architecture: [docs.vendo.run](https://docs.vendo.run).
<img src="assets/kicker-04-packages.svg" alt="04 · Packages">
## Packages
`@vendoai/vendo` is the default composition (`vendoai` is a thin alias).
Install individual blocks when you want to compose Vendo yourself.
| Package | One job |
| --- | --- |
| `@vendoai/vendo/core` | Shared types, schemas, formats, validators, seams, and the browser-safe app-generation contract (`@vendoai/vendo/core/apps`) |
| `@vendoai/vendo/ui` | Headless React hooks, optional chrome, tree rendering, and the in-jail component kit |
| `@vendoai/vendo` | Default composition, public wire, React entry, `vendo` bin, and the app-generation, sandbox, persistence, actions, telemetry, automations, knowledge, MCP-door, guard and harness blocks |
Cloud-gated sharing, publishing, org overlays, and pinning activate with
`VENDO_API_KEY`; the open-source blocks remain self-hosted.
<p align="center">
<a href="https://github.com/runvendo/vendo">
<img src="assets/footer.svg" alt="Shaped to every customer. Star runvendo/vendo. Apache-2.0, docs.vendo.run, vendo.run, backed by Y Combinator" width="100%">
</a>
</p>