Skip to content
BoxFetch
Create account

BoxFetch Originals

Bounded cloud workflows for AI agents

Each Original handles one narrow job. It checks the target, shows the plan, pauses for approval, executes the approved plan within declared boundaries, checks the result, and states exactly what cleanup can and cannot remove.

Create accountConnect an agent

Six initial BoxFetch Originals, free during beta

BoxFetch Original

Vercel Environment Variable Sync

Move selected secrets and settings into the correct linked Vercel project without pasting values into commands or logs.

Works with
An existing repository linked to a Vercel project.
Human approves
The human approves the exact variable names, target project, and target environments before changes.
Free during betaOpen details

BoxFetch Original

Neon Postgres Bootstrap

Create a new Neon database project or an isolated branch, receive the connection details safely, and verify that the database is reachable.

Works with
A Neon account that can create a project or isolated branch.
Human approves
The human approves the project or branch creation, region, and target account before it happens.
Free during betaOpen details

BoxFetch Original

Auth.js Google OAuth Setup

Add Google sign-in to a clean Next.js 15 or 16 app, calculate the correct callback URLs, and stop for the human-owned Google setup step.

Works with
A clean Next.js 15 or 16 app with a supported Auth.js setup.
Human approves
The human approves the application file changes, creates the Google OAuth client, and supplies the credentials through the protected setup path.
Free during betaOpen details

BoxFetch Original

Stripe Signed Webhook Receiver

Generate one bounded raw-body Stripe signature-verification boundary for an exact clean Next.js App Router target.

Works with
A clean Next.js 16.2.6 App Router app with Node 22 and pnpm 10.x.
Human approves
The human approves the exact dependency and file plan, configures the Stripe endpoint and three-event subscription, and supplies the signing-secret reference.
Free during betaOpen details

BoxFetch Original

Cloudflare R2 Prefix-Scoped Bucket

Create one new private Standard R2 bucket and prove a one-hour object credential is confined to one mandatory prefix.

Works with
One new private Cloudflare R2 bucket in an existing account, verified with AWS CLI v2.
Human approves
The human creates the bounded parent token, confirms the exact account and new bucket plan, and approves bucket creation and temporary credential issuance.
Free during betaOpen details

BoxFetch Original

GitHub Actions Exact AWS OIDC Trust

Prepare an observed-claim checkpoint, then create one zero-permission IAM role with exact GitHub repository, ID, environment, branch, audience, and subject trust.

Works with
One GitHub.com repository and protected environment with an existing AWS GitHub OIDC provider.
Human approves
The human configures the protected environment, observes and approves the bounded claim document, and approves one zero-permission role in the exact AWS account.
Free during betaOpen details

The BoxFetch app remains the authority for current availability and access. These six are our starting products, not a claim that every cloud workflow is supported.

What every BoxFetch Original is built to do

The job is narrow on purpose. Every Original follows the same sequence, and it says out loud where the sequence stops.

  • Inspect a declared target
  • Refuse unsupported or ambiguous targets
  • Create an exact plan
  • Stop at human checkpoints
  • Apply only approved actions
  • Verify the resulting state
  • Report unknown outcomes honestly
  • Preserve redacted evidence
  • Limit cleanup to resources attributed to the run