Skip to content
@merchantprotocol

Merchant Protocol

AI agents and production infrastructure for businesses that move fast

Merchant Protocol

Merchant Protocol

AI agents and production infrastructure for businesses that move fast.
We build open-source tools that help teams ship compliant software, automate business workflows, and scale without complexity.

Website Email Followers SOC 2 Open Source


What We Do

We're a Seattle-based engineering team focused on three things:

  1. AI Agents — Desktop and server-side agents that handle real business workflows, with a plugin ecosystem anyone can extend.
  2. Production Infrastructure — SOC 2 compliant Docker images, CI/CD pipelines, and deployment tools built for regulated industries.
  3. Marketing Technology — Privacy-first tracking, consent management, and audience tooling for modern growth teams.

Flagship Projects

Sulla — AI Agent Platform

Sulla is our open-source AI agent ecosystem. A desktop app, voice interface, plugin marketplace, and extensible architecture — built for businesses, not demos.

Repository What It Does
sulla-desktop Business-ready AI agent for desktop. Easy to install, free to run. Apache-2.0
sulla-recipes Plugin registry — browse, install, and contribute extensions.
sulla-voice-ai Voice interface for hands-free agent interaction.
sulla-commercial-plugins Premium plugins for advanced business workflows.
sulla-upgrade-responder Telemetry and update service for the Sulla ecosystem.
agents Reusable agent definitions and templates.
skills Modular skill packs that extend agent capabilities.
workflows Pre-built automation workflows for common business tasks.
integrations Connectors for third-party services and APIs.

Infrastructure & DevOps

Production-grade images and deployment tools designed for SOC 2, HIPAA, and PCI compliance from day one.

Repository What It Does
docker-nginx-php8.2-fpm Ubuntu 24.04 + Nginx + PHP 8.2 FPM + ModSecurity WAF + Wazuh SIEM. MIT
docker-nginx-php8.1-fpm Production Docker image for PHP 8.1 applications.
docker-nginx-php8.2-ffmpeg PHP 8.2 image with FFmpeg for media processing workloads.
protocol Push a tag, set one variable, every node deploys. Encrypted secrets, instant rollback, full audit trail. MIT
launchpad Orchestration and provisioning for new environments.
aws-cloudformation-templates Reusable CloudFormation templates for AWS infrastructure.
runpod-installation-scripts Setup scripts for GPU compute on RunPod.

Marketing Technology

Privacy-first tools for consent, tracking, and audience management.

Repository What It Does
ConsentGuard Lightweight, plug-and-play cookie consent banner. GDPR & CCPA compliant.
hero-pixel First-party tracking pixel for privacy-respecting analytics.
heropixel-wordpress-plugin HeroPixel integration for WordPress sites.
inbound Inbound lead capture and routing engine.
outbound Outbound campaign management platform.
content-planner Content calendar and publishing workflow tool.

Architecture & Principles

┌─────────────────────────────────────────────────────────────┐
│                      SULLA DESKTOP                          │
│              AI Agent + Voice + Plugin System               │
├──────────┬──────────┬───────────┬───────────┬───────────────┤
│  Agents  │  Skills  │ Workflows │ Integr.   │    Recipes    │
├──────────┴──────────┴───────────┴───────────┴───────────────┤
│                   INFRASTRUCTURE                            │
│     Docker Images  ·  Protocol CI/CD  ·  Launchpad          │
├─────────────────────────────────────────────────────────────┤
│                   MARTECH LAYER                             │
│  ConsentGuard  ·  HeroPixel  ·  Inbound  ·  Outbound       │
└─────────────────────────────────────────────────────────────┘

Our engineering principles:

  • Open source first — Our core tools are open source under MIT and Apache-2.0 licenses.
  • Compliance by default — SOC 2 Type II, GDPR, CCPA, and HIPAA considerations built in, not bolted on.
  • Zero-complexity deployment — If it takes more than one command to deploy, we haven't finished building it.
  • Plugin over platform — Extend, don't fork. Our agent ecosystem is designed for contribution.

Getting Started

Try Sulla Desktop — our AI agent:

# Clone and run
git clone https://github.com/merchantprotocol/sulla-desktop.git
cd sulla-desktop && npm install && npm start

Deploy a compliant PHP app in seconds:

docker pull ghcr.io/merchantprotocol/docker-nginx-php8.2-fpm:latest
docker run -p 80:80 -v ./app:/var/www/html ghcr.io/merchantprotocol/docker-nginx-php8.2-fpm:latest

Add cookie consent to any site:

<script src="https://cdn.jsdelivr.net/gh/merchantprotocol/ConsentGuard/consentguard.min.js"></script>

Contributing

We welcome contributions across all our projects. Here's how to get involved:

  1. Browse open issues across our repos — look for good first issue labels.
  2. Submit a Sulla plugin — create a recipe and submit a PR to sulla-recipes.
  3. Report bugs or request features — open an issue in the relevant repository.
  4. Join the conversation — reach out at jonathon@merchantprotocol.com.

Seattle, WA · merchantprotocol.com · jonathon@merchantprotocol.com

Building tools we wish existed. Open source since 2016.

Pinned Loading

  1. protocol protocol Public

    Stupid-simple CI/CD for Docker apps. One-command deploy, encrypted secrets, automatic rollback, SOC 2 Type II ready.

    PHP 1

  2. docker-nginx-php8.2-fpm docker-nginx-php8.2-fpm Public

    Production-grade, SOC 2 compliant Docker image — Ubuntu 24.04, Nginx, PHP 8.2 FPM, ModSecurity WAF, Wazuh SIEM

    Just

  3. ConsentGuard ConsentGuard Public

    Lightweight, plug-and-play cookie consent banner. GDPR and CCPA compliant. Zero dependencies.

    JavaScript

Repositories

Showing 10 of 181 repositories
  • sulla-desktop Public

    Business-ready AI agent desktop app. Easy to install, free to run. Built with Electron and Lima VM.

    merchantprotocol/sulla-desktop's past year of commit activity
    TypeScript 12 1 33 2 Updated Sep 11, 2026
  • sulladesktop-docs Public

    Documentation site for Sulla Desktop — installation guides, configuration, plugin development, and API reference

    merchantprotocol/sulladesktop-docs's past year of commit activity
    CSS 0 MIT 0 0 0 Updated Jul 15, 2026
  • aws-soc2-cloudformation-infrastructure Public

    Production-ready, SOC 2 Type II compliant AWS infrastructure-as-code. Deploy a hardened VPC with ALB, Aurora MySQL, EFS, CloudTrail, and full compliance documentation in minutes.

    merchantprotocol/aws-soc2-cloudformation-infrastructure's past year of commit activity
    1 MIT 0 0 0 Updated Jul 15, 2026
  • sulla-resources Public

    Sulla Desktop resources: agents, skills, workflows, and integrations

    merchantprotocol/sulla-resources's past year of commit activity
    0 0 0 0 Updated Jul 8, 2026
  • sulla-lima-vm Public

    Fork of rancher-sandbox/lima with 3s SSH polling interval for faster Sulla Desktop boot

    merchantprotocol/sulla-lima-vm's past year of commit activity
    Go 0 Apache-2.0 0 0 20 Updated Jun 5, 2026
  • protocol-docs Public

    Documentation site for Protocol CLI — deployment guides, plugin development, and configuration reference

    merchantprotocol/protocol-docs's past year of commit activity
    CSS 0 MIT 0 0 1 Updated Jun 3, 2026
  • merchantprotocol/sulla-video-editor's past year of commit activity
    TypeScript 0 0 0 0 Updated Apr 28, 2026
  • sulla-recipes Public

    Plugin recipes registry for Sulla Desktop — browse, install, and contribute community extensions

    merchantprotocol/sulla-recipes's past year of commit activity
    0 0 0 0 Updated Apr 28, 2026
  • sulla-runtimes Public

    Docker runtime containers (python, shell, node) that execute Sulla functions. HTTP API, capability-token secret fetching, dual-arch images published to GHCR.

    merchantprotocol/sulla-runtimes's past year of commit activity
    Python 0 MIT 0 0 0 Updated Apr 25, 2026
  • protocol Public

    Stupid-simple CI/CD for Docker apps. One-command deploy, encrypted secrets, automatic rollback, SOC 2 Type II ready.

    merchantprotocol/protocol's past year of commit activity
    PHP 1 MIT 0 10 0 Updated Apr 17, 2026

People

This organization has no public members. You must be a member to see who’s a part of this organization.