Tillpad vs building it yourself

To build this yourself, you'd run each of these parts. For developers deciding whether to build agent storage. Pro is $9 a month.

What this service runs

One Cloudflare Worker serves the HTTP API, the marketing site, and MCP at /mcp. Files and raw email MIME sit in R2. File and note text is chunked (1,200 characters, 150 overlap), embedded with @cf/baai/bge-base-en-v1.5, and stored in Vectorize. Namespaced key-value data uses KV plus a D1 metadata row. Inboxes, messages, schedules, keys, usage periods, and wipe receipts are D1 tables.

Indexing is a queue. Schedules are claimed by a cron every 5 minutes and sent through another queue. Inbound mail arrives through Cloudflare Email Routing on the configured domain. Human billing is a Stripe subscription with metered overage. Agent billing is prepaid through Stripe machine payments, with no overage.

Every metered call can return 402 when the account has no active plan, or 429 when a hard cap is hit. The body includes a code, actions, and the budget. Run keys can also carry an operation budget that stops that key even when the account still has quota.

What you take on if you build it

You would store bytes, extract PDF and Excel text, chunk and embed, and delete vectors when a file is deleted. You would accept mail, enforce receive limits, sign webhooks, and purge temporary inboxes. You would run a timer that issues HTTPS calls, retries them, and disables a job after repeated failures. You would issue keys that can be limited to namespaces and tool names, and you would wipe a run namespace and sign a receipt.

You would also decide what happens at a cap: block the call, or bill more. Tillpad does both, depending on the plan. Human Pro bills overage up to 10 times the included amount, then blocks. Agent prepaid Pro blocks at the included amount, except for the key-value and storage top-ups.

The HTTP contract is openapi.json. The agent walkthrough is llms-full.txt.

Questions people ask

Does Tillpad include a third-party app catalog?

No. Building Tillpad yourself, or buying it, covers storage, search, receive-only email, schedules, keys, and metering. It does not cover a directory of other companies' APIs.

Can an agent prove a job's data was deleted?

Yes. Finishing a run key wipes the namespaces bound to that key and returns a signed receipt. GET /api/wipe-receipts/:id reads it later.