YOUR CLOUD WORKSPACE
Opening your workspace
Connecting securely to your account…
YOUR CLOUD WORKSPACE
Sign in to your workspace
Continue with Cloudflare to access your agents and saved work.
AGENT WORKSPACE / ACTIVITY
Activity log
Tools, protection checks, and investigations. One timeline.
// YOUR WORKSPACE
Your workspace
Cloudflare connected
// YOUR NEXT STEP
What would you like Garrett to do?
Ready for Garrett to keep watch?
// YOUR ONLINE IDENTITY
Protect my identity
Search & destroy: find exposure leads, investigate evidence, prepare containment and removal steps, and track follow-up.
Know what surfaced.
Monitor enabled public breach catalogs and notice feeds for supported targets. You can also opt into RansomLook public leak-post searches for your email, full name, username, company, or domain. Garrett can check referenced public web pages directly and onion pages through its Cloudflare Tor collector. New exposure records appear here and can trigger an email.
Follow the evidence.
See the reported source, dates, affected data categories, and confidence. A named breach does not identify the person responsible.
Reduce the harm.
Work through account protection steps, prepare a removal request, and keep a record of progress. Follow-up does not prove every copy was erased.
Loading intelligence source status…Collected by Garrett · source coverage is shown above
See enabled sources and their coverage
Cloudflare threat intelligence
Loading Cloudflare connection status…
Enrich public source domains with Cloudflare reputation and infrastructure context. This does not search personal email addresses or establish who leaked data. Requests count against the service’s Cloudflare allowance.
Add a monitoring target
Up to 10 monitoring targets across emails, full names, usernames, companies, and domains. Public searches run every 12 hours after separate permission, with up to 20 searches per account per UTC day; response tasks wake every five minutes. Shared names and ordinary business mentions can be unrelated. Your computer and NL-Veil can be closed. Enable Email alerts below to receive updates. Garrett does not collect raw passwords, access criminal accounts, or claim to erase every copy of leaked data.
// YOUR CLOUD RUNTIME
Give your agent a task
A persistent Go tater-tot engine reviews your agent’s evidence, chooses an allowed tool, checks its result, and remembers useful context. It works without NL-Veil or an open browser. The hosted model is managed by Garrett. Automatic tasks advance one step per five-minute heartbeat.
Create a runtime task
// AUTONOMOUS PROTECTION
Protect my website
Runs on Cloudflare, even when your computer and NL-Veil are closed.
Keep an eye on it.
Check availability, expected text, public DNS, security headers, and optional content changes.
Find out what changed.
Watch, plus bounded tater-tot investigations with evidence tools and a recorded case history.
Recover an approved version.
Investigate, plus restore a healthy Cloudflare Worker version you approved after a newer deployment repeatedly returns server errors. Recheck the result.
Add a website
Included: up to 3 websites, 12 AI requests per site per day, and 2 approved restorations per day. Hosted AI and backend usage within these allowances are included. Your own Cloudflare website and connection follow your Cloudflare plan. Findings and updates appear here. This first release monitors public website signals and recovers approved Worker versions; it does not eradicate intruders or replace an incident response team.
// HEAR FROM YOUR AGENT
Email alerts
Your agent can email you from alerts@notify.garrettstimpson.ca when a website needs attention, an investigation has an update, or recovery is verified.
Recent service emails
Up to 10 service emails per UTC day. Full evidence stays behind your dashboard login. Accepted means the sending service accepted the email; it does not confirm inbox delivery. Turn alerts off here or use the unsubscribe link in any alert.
Hosted AI and the full agent backend are included within Garrett’s allowances. Your connection can run on Cloudflare Workers Free without adding a Cloudflare card; free account limits apply. You still need a card for Garrett’s subscription or trial.
01 / ACTIVATE
Choose how to get started.
Automatic protection + the toolkit.
$4.99 / month CAD
Website protection, identity monitoring, Cloudflare investigations, and email alerts. No open AI app needed. Subscribe for immediate paid access.
Try MCP and the backend API.
$0 today
MCP and backend API only during trial. Protection and alerts unlock once paid access starts.
Card required. Automatically renews at CAD $4.99/month after 3 days. Cancel before the trial ends to avoid a charge.
// BILLING
Your plan, in your control.
Update your card, view invoices, or cancel your subscription.
A failed payment disables keys and removes your Garrett connections and their agent workspaces. Customer and activity records are retained. Restoring payment does not restore removed workspaces or revoked keys; deploy a new connection afterward.
BUILD & CONNECT
Agents & connections
Deploy your agents, manage API keys, and connect your AI tools in one place.
Activate Trial or Agent access before deploying an agent or creating a key.
Choose a plan →DEPLOY & MANAGE
Set up your Garrett connection
Choose your Cloudflare account. Garrett checks it before installing a small connection Worker. We host the full agent backend. Existing connections can update automatically while keeping their URL, keys, and target settings. No terminal or copied code is needed.
Cloudflare Workers Free can support the connection within its limits. You do not need Containers, a paid Cloudflare plan, or a domain transfer for this step.
Load your Cloudflare accounts to check setup.
Finish free Workers setup ↗KEYS & MCP
API keys
Create a key for an instance. Copy it once, then paste it into your existing MCP connection.
Copy your key now. It will only be shown once.
Connect with NL-Veil or another MCP client
- Use your instance’s MCP URL below.
- Choose HTTP / Streamable HTTP.
- Choose Bearer token authentication and paste your key. For a custom header, use
Authorization: Bearer YOUR_API_KEY.
JSON configuration
Keep your key out of URLs and chat messages. Revoking a key stops its access immediately.
// GUIDES & ANSWERS
Help & FAQ
Get your agent working, understand its evidence, and find the next useful step.
START HERE · VIDEO WALKTHROUGH
Your security operator in the cloud
From signup and login to website protection, alerts, identity monitoring, and the tater-tot work cycle. Follow along at your own pace.
Watch the walkthrough ↗Narrated, captioned, and split into 10 chapters. The examples use a demonstration account and simulated incidents.
Guides & useful posts
Walkthroughs, connection instructions, and practical evidence checklists.
No guides match this search. Try another word or choose All topics.
Frequently asked questions
Plain-English answers about setup, protection, and what your agent can do.
No answers match this search. Try another word.
Ready to put Garrett to work?
Follow the setup guide, or open the tool reference when you need connection and API details.
// THE GARRETT FIELDBOOK
Docs & use cases
Loading tool reference…
Your connection
// REFERENCE
// CURL + DIRECT ACCESS
API request explorer
Endpoint: YOUR_INSTANCE_URL/mcp
Run request uses your actual key, selected instance, and plan, even if the curl example hides the key. Calls appear in your account usage. Example record IDs and paths must be replaced with real values.
// SERVICE OPERATIONS
Administration
Customers, access, cloud cleanup, and service activity.
01 / STATUS
Service overview
// BILLING MAINTENANCE
New subscriptions
Pausing stops new Trial and Agent checkouts. Existing subscriptions and agent access continue. Stripe billing remains active for current subscribers.
// AGENT RELEASES
Automatic updates
Garrett checks up to three eligible connections and backends every five minutes. Updates retain memory, settings, API keys, and connection URLs. Busy backends wait for a safe checkpoint. Connection updates check their version and restore the previous Cloudflare version if the health check fails. A failed upload pauses the fleet for review. Customers can pause updates for their own connection.
HOSTED AI / ALL AGENTS
Model & cost controls
Loading model policy…
Garrett pays for hosted AI and the full backend in LF Builders. Subscribers do not need a Workers AI plan. A changed default applies to every new model request, including existing agents; requests already in progress may finish on the previous model.
Estimates use Cloudflare catalog token rates at dispatch. They are not an invoice: free allowances, cached-token discounts, provider adjustments, and infrastructure are excluded. Missing token counts or prices remain unconfirmed. Tracking starts with this release; this is not a daily export of your full Cloudflare bill.
Agent model rollout
Hosted usage by customer · last 30 UTC days
// GARRETT EXPOSURE FEED
Intelligence sources
Garrett collects approved public pages and supports the fixed RansomLook search endpoint (https://www.ransomlook.io/api/search). Add notice or index pages; no data dumps or login-only sites. Search results may authorize a bounded check of a referenced public onion page. Sources cannot expand agent permissions. Plain source-page collection keeps identifiers inside Garrett. RansomLook public searches require separate permission from each customer.
Collection supports 10 sources: public pages up to 256 KB, or fixed metadata feeds up to 4 MB. Metadata is cached for one hour (six hours for Washington disclosures); targets are matched inside Cloudflare. Onion pages require the private Tor collector. No source is a guarantee of comprehensive coverage.
02 / CUSTOMERS
Accounts and access
// CUSTOMER RECORD
Free access
Granting free access cancels any active Garrett subscription or trial immediately, so this customer will not keep getting charged.
Ban and cloud cleanup
Banning immediately revokes sessions and keys. Garrett then stops agent workspaces, removes Cloudflare Workers, and cancels Garrett subscriptions. Failed cleanup stays visible and retries automatically.
Failed payment cleanup
Cloudflare instances
API keys
Recent usage
Website protection
Account history
03 / ACTIVITY