Servers and apps
Every server with its provider, IPs and environment, every app with its repository and URL, and which app runs where in production, staging or for a customer.
For developers, agencies and small ops teams
Every server, app and update. One place.
Inventory knows which app runs on which server, which dependencies are outdated or vulnerable, which runtimes reach end of life, which pull requests wait for review, and what is left to do, for your team and for your AI agents.
Early access: sign-up opens soon. Swiss-operated, hosted in Germany, no trackers.
Know what you run, and what needs doing
Spreadsheets, wiki pages and five dashboards drift apart. Inventory keeps the facts in one place and pulls the rest from where it lives.
Dependency updates
Upload Gemfile.lock, package-lock.json, pnpm and yarn locks, go.mod, requirements.txt or poetry.lock, by hand or from CI. See what is outdated by a major version and what has a known vulnerability (OSV).
End-of-life dates
Ruby, Node.js, Python, Go, PHP, Rails, Django, Laravel, PostgreSQL, MySQL, MariaDB and Redis versions are matched to their release cycles, so you see an end of life months before it happens.
Pull requests and issues
Connect GitHub, GitLab and Forgejo or Gitea, cloud or self-hosted, with a read-only token. Open PRs with CI status and stale markers, and issues, per app and across all apps.
Todos for humans and agents
Todos per app with priorities, markdown notes and PR links. AI agents such as Drover claim a todo through the API, post progress notes and attach their pull request.
REST API and CI
Everything you see has an API with scoped tokens. Push manifests from your pipeline, sync servers from your provisioning, or turn a vulnerability into a todo in one call.
Outdated, vulnerable and end of life, at a glance
Inventory reads the lockfiles you push and checks the public registries (RubyGems, npm, the Go proxy, PyPI), the OSV vulnerability database and endoflife.date. Lockfiles are parsed and thrown away; only package names and versions are kept.
- Direct and transitive packages, with the latest version and how far behind you are
- Advisories with severity, fixed versions and a link to the details
- One click turns a finding into a todo, for a colleague or an agent
Built for AI agents, too
Give an agent a token, and it works through your todos like a colleague: it claims one, reports progress, opens a pull request and links it. Two agents never get the same todo.
API=https://inventory.metastic.ch/api/v1
curl -X POST $API/todos/todo_…/claim \
-H "Authorization: Bearer $TOKEN"
# 200 {"status": "in_progress", "assignee": "drover", …}
# 409 when someone else has itConnect your Drover · How agent assignees work · API reference
Simple pricing
Every feature in every plan; plans differ only in limits. Planned pricing
Request early access
Sign-up is not open yet. Leave your email and we invite you as soon as there is a spot. We use the address only for that invitation.
Already have an invitation or an account? Log in.