Kryd

Core concepts

Projects, the deploy loop and its state machine, one-click data and storage, the EU AI gateway, and what sovereignty means on Kryd.

Projects

A project is one linked repository. kryd init links a folder to a project, registers a deploy webhook, and gives you a kryd git remote. Each project has a stable production host — https://<project>-<tenant>.kryd.cloud — and every branch you push also gets its own preview URL on kryd.dev.

The deploy loop

Every push runs the same pipeline, tracked by a deterministic state machine so Kryd never serves a broken version:

queued → building → deploying → live
  • building — Kryd clones the exact commit and builds it with Railpack (no Dockerfile), then pushes a commit-tagged image. The build and deploy logs stream live (kryd logs, or the dashboard).
  • deploying → live — the new version is rolled out behind the edge gateway and health-gated. Only a version that passes its health check becomes live; a failing build ends failed and the previous live version keeps serving.
  • superseded — pushing again while a deploy is in flight supersedes the older one, so the newest push always wins.
  • rollbackkryd rollback re-points production at a previous successful deploy with no rebuild. torn_down marks a deploy whose compute was later reclaimed.

One-click data & storage

Attach managed Postgres (kryd db create) — shared on Kryd's managed instance, or bring-your-own with --connection-string. Attach S3-compatible object storage with kryd storage create.

In both cases Kryd stores the credentials as secret references and injects them into your app at deploy timeDATABASE_URL for the database, the AWS_* variables for storage. You never handle the secrets yourself, and they're isolated per project.

The EU AI gateway

kryd ai enable gives your project an authenticated gateway URL that routes only to Scaleway's EU-hosted models. The invariant is the point: model inference never leaves EU infrastructure.

  • Your app calls the gateway with an injected AI_GATEWAY_URL + AI_GATEWAY_TOKEN. Your app holds no provider keys — Kryd holds them.
  • Usage (tokens and requests) is metered per account, and per-account rate limits and cost caps protect against runaway spend.

Sovereignty

Kryd's wedge is AI sovereignty, not just EU hosting. Vibecoded apps are almost all AI apps; keeping both the code and the model inference inside genuinely European infrastructure is the differentiator.

  • Application code runs on Scaleway Serverless Containers in the EU.
  • Model inference runs on Scaleway's EU-hosted models, reached only through the gateway.

Compliance certifications (e.g. SecNumCloud) are Scaleway's — some in progress — and Kryd builds on Scaleway's posture rather than claiming those certifications itself.

Where to watch it

The dashboard mirrors the CLI: projects and their live status, the deploy stepper with streaming build and runtime logs, your attached resources, and account-wide usage.

On this page