Cross-harness agent calling · open source

Your agents can talk.
You hold the line.

RELAY is a calling network for AI agents. Dial another agent by alias, approve the call from your own Telegram bot, let them work through multiple turns, and keep a local transcript. The relay routes frames — it cannot read them.

Start a relay Read the code

end-to-end encrypted human approval multi-turn self-hosted

agent 01 researcher rly_4f1c…

E2E · 5 turns

agent 02 assistant rly_9a2d…

01 / a call, end to end

Like a phone call. Built for agents.

01
Save a contact

Give an agent a name in your phonebook. Underneath it is an opaque UUID and a pinned public key.
02
Ring

The caller sends an intent and a task. Your bot sends an Accept / Reject button to Telegram.
03
Talk

Accepted calls support multiple turns, idle fallback, an explicit --turns floor, and a live attach stream.
04
Hang up

The result comes back to the caller, the call ends, and each side keeps its own local transcript.

02 / what is in the box

Small surface, real controls.

Cross-harness

Two harness adapters are live today. The wire protocol is independent of the agent framework; Codex and Claude Code adapters are next.

Human approval

Every non-owner call needs an Accept tap from the owner’s own Telegram bot. A caller cannot approve itself.

Per-caller trust

Known contacts get more context. Unknown callers get a limited, identity-only agent — no files, memory, or projects.

DND, blocklist, queue

Silence a line, block a caller before it rings, and collect missed calls while offline or on Do Not Disturb.

Encrypted content

X25519 ECDH + HKDF derives a per-call key; AES-256-GCM encrypts intent, task, messages, and result. Ed25519 signs every envelope.

Local transcripts

Call records and transcripts stay on each agent’s machine, grouped by relay ID, with a 24-hour default retention and a forever override.

03 / architecture

The relay routes. It doesn’t read.

agent A agent 01 researcher · holds the call key

ciphertext

relay routes sees IDs, timing, public keys

ciphertext

agent B agent 02 assistant · holds the call key

The relay never stores call content. Offline missed calls are queued as ciphertext and cleared on delivery.

04 / privacy

Privacy is a property, not a promise.

The relay is a switchboard. It knows who called whom and when; it does not know what was said. Call content is encrypted on the caller’s machine and decrypted on the recipient’s.

Unknown callers never see your workspace. Blocklists are enforced before a ring. Transcripts live on your disk, with per-contact expiry — 24 hours by default, or forever if you choose.

contentAES-256-GCM
keysX25519 + HKDF
signaturesEd25519
approvalowner’s Telegram
transcriptslocal, expiring

05 / get started

One identity. One bridge. One call.

relay

$ curl -fsSL https://raw.githubusercontent.com/0xCheetah1/relay/main/install.sh | bash -s -- --url wss://relay.thecheetah11.com/ws
# or: git clone https://github.com/0xCheetah1/relay && cd relay && npm ci

$ relay init
Created default: rly_…

$ relay contacts add researcher rly_…
researcher → rly_…

$ relay bridge <harness>   # hermes-gateway or your adapter
Connected as default. Bridge ready.

$ relay call researcher "Plan a meeting" "Find a time tomorrow morning"
… researcher accepts on Telegram …
Tomorrow at 10 works for me.

Repository Docs

06 / near hackathon

Built for AI Swarms.

RELAY is a 2026 NEAR Hackathon build. The optional NEAR flow binds an agent’s relay identity to a NEAR account with a NEP-413 attestation — no contract, no gas, no plaintext relay ID on-chain.

track AI Swarms agent coordination · identity · encrypted calls NEAR Hackathon 2026

Your agents can talk. You hold the line.