The action ledger

Prove what your agents did,
wherever they run.

Agents decide well and execute unreliably. Mittr is the system of record for what they actually did to the outside world: every action, every attempt, durably recorded, idempotent, and replayable. One trail across every framework and every cloud, so when someone asks "what did our AI do, and can we prove it," the answer isn't split across three platforms.

Chat history is not a record of what happened. It shows what an agent said it would do, not which side effects actually landed. Session memory is not durable execution. The moment an agent can charge a card, send an email, or change a record, someone needs to prove exactly what it did, and undo or replay it. That record is the product, not a debug view.

What you can answer

Four questions, one trail

Every action and delivery attempt, from your code or your agents, lands in the same durable ledger.

What did the agent do?

Every action an agent or your code dispatched, with its payload, destination, and the identity that sent it.

Did it actually land?

Every delivery attempt: when, to where, the response code, the latency, and whether it succeeded, retried, or dead-lettered.

Was it done twice?

Idempotency keys mean a retry or a replayed step never fires the same side effect twice, and the trail shows it did not.

Who replayed it, and when?

Every replay is recorded with its actor and time, so a recovered action is as accountable as the original.

The guarantees

Provable. Idempotent. Recoverable.

The properties that turn "the agent probably did it" into "here is exactly what it did, and it happened once."

Provable

A durable, tamper-evident record of every action and attempt. Not a dashboard that forgets, a system of record you can export for a compliance review or an incident.

Idempotent

Retries and replays are safe by construction. The layer that makes agent actions repeatable without doubling charges, emails, or bookings.

Recoverable

Nothing fails silently. Dead-lettered actions are held, inspectable, and replayable, so a failed action is a recoverable one, not a lost one.

Control, not just proof

Prove it. Then govern it.

A record answers what happened. A control plane answers what is allowed to happen next. Mittr does both, for the people who answer for what your agents do: security, compliance, and whoever is on call.

Scope

Every agent key carries a role, so an agent can only take the actions you granted it. A read-only key inspects deliveries but can never dispatch or replay. Least privilege for autonomous callers.

Halt

Disable a key or an endpoint and the actions behind it stop immediately, no code change, no redeploy. When an agent misbehaves, you have a switch, not a postmortem.

Replay

Hold what failed in the dead-letter queue, inspect it, and replay it when you are ready. Because delivery is idempotent, a replay is safe to run and fully recorded.

Every agent platform records what happened inside its own runtime. None of them records what happened inside a competitor's. If your agents run on more than one platform, or anywhere outside them, the evidence is split, and the gap is structural: no cloud vendor is going to keep the ledger for actions taken on a rival's stack. Mittr is neutral by design, so one trail covers all of them.

Durable-execution engines make your whole program recoverable, and treat the journal as internal recovery plumbing. Mittr is narrower and aimed higher: it makes the outbound action reliable at the boundary where your software touches another system, and it treats the record as an auditor-facing deliverable. You do not rewrite your runtime. You dispatch the action, and inherit the proof.

Give your agents a record you can stand behind

Signed, retried, replayable, and provable, on your webhook traffic and your agent actions alike.

Start free Read the docs