// HACKER NEWS — CYBERSECURITY
Launch HN: Vendo (YC S26) – Let users build features on top of your product
An open-source customization layer.Your users build their own features and micro-apps, right on top of your product.
Vendo is for B2B SaaS teams whose customers keep asking for bespoke features. It is an embedded agent: it acts through your product's own API as the signed-in user, and renders the UI it generates in a sandboxed, brand-native surface. Your source code is never touched. Learn more at vendo.run, or read the docs at docs.vendo.run.
Every capture below is a real agent run in a demo host app, not a mockup.
Build views. Ask a question, get a live view composed from the host's own components and API.
Remix the UI. Hover a component, describe the change, apply it in place.
Automate across tools. Plain language in, standing automation out, every tool gated by approval.
Done is your app running and the agent answering from your own API. vendo doctor is the optional checkup, and every code it prints links to its exact
fix. Full
playbook: docs.vendo.run/install ·
Agent-readable: vendo.run/agents.md
Which one are you?
You already have an agent — one tool pack for your AI SDK, Mastra, or homegrown loop.
Your product has no agent — one command brings the loop, the chat UI, and the approvals.
Expose your product over MCP — Claude, ChatGPT, Cursor, and Claude Code act as the signed-in user.
Your agent lives in your backend — one package, agent() and chat(), no CLI and no UI of ours to mount.
Vendo runs a streaming agent with any AI SDK LanguageModel.
1 · Extract. Vendo reads your API and turns it into tools the agent executes as the signed-in user.