Skip to content
Calimero docs

Ship the app.Skip the infrastructure.

Write your app once and run it sealed on Calimero Cloud. Every node proves what it runs before it gets keys, every client checks that proof before it sends anything, and nobody operating the nodes, Calimero included, can read the data inside.

Calimero is a confidential cloud for collaborative apps. You write an app’s state and methods in Rust, and it runs as a WebAssembly component inside attested Intel TDX nodes. Each instance of the app has its own replicated log, so every write is applied in one order and the app keeps serving while most of its replicas run.

Clients check what a node runs before they send it anything, then talk to it over a sealed channel. People sign in with passkeys. Nobody operating the nodes, Calimero included, can read the app’s data.

You write no database, sync, encryption or server code. With Docker running, two lines install the command line and start a three-node cluster on your machine:

Terminal window
curl -fsSL https://raw.githubusercontent.com/calimero-network/core/master/scripts/install.sh | sh
meroctl local up

Then the background: how Calimero works, what an app sees, organizations, the security model and the reference.