Neural Unified
Telegraph Services

A fleet of small, focused agentic microservices. Embeddings, crawling, identity, tunneling, application hosting, one-off backends — each one runs alone or composes with the rest. Distributed by nature — anyone can join the network. Open source, all of it.

§ 01 · The Services

shivvr 🔪

shivvr.nuts.services

Ephemeral semantic embedding service. Chunk text, embed with GTR-T5-base (768d), search by cosine similarity. Fully in-memory — no disk, no state. GPU on Cloud Run.

Open service →

grub 🕷

grub.nuts.services

Agentic web crawler with Ghost Protocol vision fallback, Camoufox stealth, MCP tools, and a bounded LLM agent loop. Eats through tough pages. Fast.

Open service →

auth 🔑

auth.nuts.services

One identity, every service. Magic-link, Google, GitHub. Issues short-lived JWTs for browser sessions and long-lived ahp_ tokens for scripts, agents, and MCP clients.

Get a token →

tunnel 🚇

tunnel.nuts.services

Reverse tunnel to a process running on your laptop. Authenticated via N.U.T.S., addressable over HTTPS. Skip the firewall holes.

Source →
§ 02 · Authentication

Get one ahp_ token from the auth dashboard. Pass it as a Bearer header to any service in the fleet — every service partitions storage by your email, so your data follows your account across grub, shivvr, and the rest.

# crawl a page through grub
curl -H "Authorization: Bearer ahp_..." https://grub.nuts.services/api/crawl

# ingest into a shivvr session
curl -X POST https://shivvr.nuts.services/sessions/my-session/ingest \
  -H "Authorization: Bearer ahp_..." \
  -d '{"text": "..."}'

Browser apps: redirect to https://auth.nuts.services/login?return_url=<your-callback> and stash the returned ?token= in localStorage. Full flow in the auth docs.

§ 03 · Deploy local

Every service ships as a self-contained Docker image on Docker Hub. Run any of them on your laptop or your own cluster — set DISABLE_AUTH=true for private networks, or point GNOSIS_AUTH_URL at https://auth.nuts.services to share identities with the managed fleet.

# grub — agentic web crawler
docker run -p 6792:6792 -e DISABLE_AUTH=true \
  deepbluedynamics/grubcrawler

# shivvr — semantic embedding service
docker run -p 8080:8080 deepbluedynamics/shivvr

# auth — your own nuts-auth instance
docker run -p 5000:5000 deepbluedynamics/nuts-auth

# point grub at your local auth
docker run -p 6792:6792 \
  -e GNOSIS_AUTH_URL=http://host.docker.internal:5000 \
  deepbluedynamics/grubcrawler