Demo
One overnight run. Five real findings.
On August 2nd, an agent ran five checks over a real ledger: 52 accounts across 28 projects, kept by the person who built MESS. By morning it had five findings, including a domain that had been expired for six weeks. Everything below is read-only sample data shaped from that run. No signup.
- acidtest.dev — expired six weeks earlier, in redemption period. Its checkout sat on the owner’s machine the whole time, unopened, hooks silent. The expiry is public record — RDAP will show you the same thing the agent saw.
- A production database, unreachable. A free tier paused it for inactivity: one project dark while seven siblings answer.
- A second domain, 20 days from lapsing. Auto-renew unconfirmed, and the card behind it a question only a human can answer.
- A site answering at the edge, dead at the origin. The CDN says 200; the server behind it stopped talking. Nobody had noticed.
- A deployment gone while its repo still points at it. DEPLOYMENT_NOT_FOUND on a project link that still looks alive from the outside.
Each finding got a decision from a human: the dead domain lapsed on purpose, and the unreachable database was already being shut down. The answers went back into the ledger, and neither question will be asked again.
The watchlist
See every project, worst first.
Five checks: domain expiry, production URL, free-tier database pause, renewal card, and accounts left behind by shut-down projects. The public checks run without a login, so they reach projects that aren't on any machine. This is the watchlist the morning after that run.
The watchlist · 25 projects
What a competent operator would keep an eye on, from what each project runs on. Read-only sample data — in the app, every project carries a prompt you hand any agent to run its checks.
- quietkittearing down8 accounts · 1 dead · 6 to kill · 1 to detach
Resend — quietkit · MailerLite · Buttondown · Kit · Beehiiv · Stripe — quietkit
shared, detach only: GitHub — fieldnotes (serves 15 other projects)
✓ Supabase — quietkit · ✓ vault scanned — it held four newsletter tools nobody remembered
- acidtestacidtest.dev3 watched · 3 checked · ⚑ 1
acidtest.dev — does not resolve — RDAP: the domain EXPIRED 2026-06-18 and is in redemption period. Recover it now or lose it. · last night
- offrampofframp.dev6 watched · 4 checked · ⚑ 1
Namecheap — primary domain registrar — offramp.dev expires in 20 days — worth confirming auto-renew and the card behind it. · last night
- shoeboxshoebox.site5 watched · 3 checked · ⚑ 1
shoebox.site — resolves, but the origin times out — the site is effectively down. · last night
- harperquinnharperquinn.vercel.app2 watched · 1 checked · ⚑ 1
harperquinn.vercel.app — returns DEPLOYMENT_NOT_FOUND — the deployment is gone while the repo homepage still points at it. · last night
- tinytool4 watched · 2 checked · ⚑ 1
Supabase — tinytool — unreachable while seven sibling projects answer alive — the paused-free-tier signature. It was parked 121 days ago. · last night
- harbor-househarborhouse.villa4 watched · 1 checked
checked for the first time ever — the site of a client Sam visits twice a year, on no machine anywhere. A public check reached it in seconds.
- market-flowroseharbormarket.com8 watched · 6 checked
domain safe through 2028; certificate healthy.
- driftislanddriftisland.co3 watched · 2 checked
- groundhop4 watched · 0 checked
- timepiece1 watched · 0 checked
- …and 14 more projects
Where rows come from
Logged by the agent mid-session.
The ledger the checks run over isn't filled in by hand. Your agent creates an account as part of the work you asked for, then records it in the ledger without being asked.
# you asked for a staging database. that is all you asked for.⏺ Created Supabase project auctionette-staging⏺ Wrote DATABASE_URL to .env.local# nobody asked for this part⏺ mess - log_account Supabase — auctionette-staging⎿ Logged. Owner unknown — asked and recorded.⚑ Nobody owns this: Sanity — harbor-house CMS (holds data)156 days since anyone confirmed it.
The ledger
Search every account at once.
The full ledger those logs land in. Try “supabase” to see every database account, or “quietkit” to see a project being shut down. In the app this is ⌘K from anywhere.
| Provider | Label | Owner | Project | Cost |
|---|---|---|---|---|
| Vercel | fieldnotes / personal team | sam.reyes@gmail.com | auctionette, market-flow, groundhop, wavecheck, beacon, offramp-next, offramp, innerloop, papercuts, timepiece, shoebox | unknown |
| GitHub | fieldnotes (primary, CLI-authed) | sam@fieldnotes.dev | slowline, brambleton-temp, harperquinn, sam-site, timepiece, acidtest, cadence-framework, auctionette, market-flow, beacon, offramp-next, innerloop, tinytool, glyphkit, quietkit, papercuts | unknown |
| GitHub | gullstudio + personal (2 logins) | unknown | offramp, softland, softland-guide, driftisland, acidtest, wardstone-kb, harbor-house, clearwater-org | unknown |
| Namecheap | primary domain registrar | sam.reyes@gmail.com | beacon, offramp, driftisland, slowline, wavecheck | unknown |
| Cloudflare | R2 + Turnstile | sam.reyes@gmail.com | auctionette, shoebox, offramp, market-flow | unknown |
| Supabase | market-flow (1 account, prod + dev) | stalls@fieldnotes.dev | market-flow, market-flow-lead | $0 |
| Resend | market-flow transactional | stalls@fieldnotes.dev | market-flow, market-flow-lead | $0 |
| Stripe | Stallworks (live) | sam.reyes@gmail.com | market-flow, market-flow-lead | unknown |
| DreamHost | registrar (roseharbormarket.com)shared | jordan@meridianlane.com | market-flow, market-flow-lead | unknown |
| Flywheel | Stallworks WordPress (public site) | sam.reyes@gmail.com | market-flow, market-flow-lead | $15/mo |
| Airtable | PAT (market-flow, auctionette, acidtest) | sam.reyes@gmail.com | market-flow, market-flow-lead, auctionette, acidtest, basebroom | $0 |
| Resend | offramp Resend (Auth.js) | unknown | offramp | $0 |
| Resend | auctionette Resend | auction@fieldnotes.dev | auctionette | $0 |
| Resend | innerloop Resend | unknown | innerloop | $0 |
| Resend | tinytool Resend | unknown | tinytool | $0 |
| Resend | glyphkit Resend | unknown | glyphkit | $0 |
| Resend | papercuts Resend | unknown | papercuts | $0 |
| Resend | offramp-next Resend | unknown | offramp-next | $0 |
| Resend | quietkit Resend | unknown | quietkit | unknown |
| Resend | beacon Resend (send.beacon.dev) | mail@beacon.dev | beacon | $0 |
| Supabase | beacon prod | unknown | beacon | unknown |
| Supabase | beacon OAuth server — connected apps | sam.reyes@gmail.com | beacon | $0 |
| Supabase | tinytool | unknown | tinytool | unknown |
| Supabase | groundhop | unknown | groundhop | unknown |
| Supabase | auctionette (1 account, 2 projects) | auction@fieldnotes.dev | auctionette | $0 |
| Supabase | offramp-next | unknown | offramp-next | unknown |
| Neon | offramp + slowline (2 projects) | unknown | offramp, slowline | unknown |
| Kinsta | managed WordPress (clearwater) | sam@thorncroft.agency | clearwater-org | unknown |
| Google Tag Manager | clearwater containerclient's | unknown | clearwater-org | $0 |
| Microsoft Clarity | clearwater session recordingclient's | unknown | clearwater-org | $0 |
| Meta (Facebook Pixel) | clearwater pixelclient's | unknown | clearwater-org | $0 |
| Sanity | harbor-house CMS | unknown | harbor-house | unknown |
| Google Cloud (Maps) | Maps API (harbor-house) | unknown | harbor-house | unknown |
| DeepInfra | API (tinytool)paused | unknown | tinytool | unknown |
| Football API | groundhop data feed | unknown | groundhop | unknown |
| Fathom Analytics | papercuts analytics | unknown | papercuts | unknown |
| Loops | driftisland email | hello@driftisland.co | driftisland | $0 |
| Upstash | Redis (beacon + others via KV) | unknown | beacon, offramp, slowline | unknown |
| MailerLite | quietkit email marketing | unknown | quietkit | unknown |
| Buttondown | quietkit newsletter | unknown | quietkit | unknown |
| Kit | quietkit newsletter (kit.com) | unknown | quietkit | unknown |
| Beehiiv | quietkit newsletter | unknown | quietkit | unknown |
| Stripe | quietkit | unknown | quietkit | unknown |
| MongoDB Atlas | shoebox / Payload CMS | sam.reyes@gmail.com | shoebox | unknown |
| ImageKit | image CDN (auctionette) | auction@fieldnotes.dev | auctionette | $0 |
| ImageKit | image CDN (shoebox) | mail@shoebox.site | shoebox | $0 |
| UptimeRobot | auctionette uptime monitoring | auction@fieldnotes.dev | auctionette | $0 |
| Sentry | wavecheck error monitoring | unknown | wavecheck | unknown |
| npm | glyphkit package publishing | unknown | glyphkit | unknown |
| Anthropic | API (beacon) | unknown | beacon | unknown |
| Glama | MCP directory listing | samreyes@gmail.com | beacon | $0 |
| Smithery | MCP directory listing | sam.reyes@gmail.com | beacon | $0 |
52 accounts · 34 providers · 30 with no owner on record · ⚑ 18 flagged: data or money, no recorded owner
Open questions
The ledger knows what it's missing
Derived from the rows — no AI, nothing to configure. Each one ships as a prompt you hand your agent, and the answer lands back in the ledger.
Which email owns Supabase — groundhop?
Logged during the dig, owner unknown, untouched for 88 days. The agent that deploys it next can read the CLI auth state and answer this.
Where do the credentials live for Stripe — quietkit?
It’s on the kill list, and a teardown can’t close an account nobody can open. One sentence closes it.
What does Sentry — wavecheck cost?
No recorded price — one look at the billing page settles it. Unstated is unknown, never $0.
The handoff
Export one project as a document.
One click renders every account a project uses to plain markdown: owner, credentials location, who still has access. No AI in the pipeline.
# Account handoff — Stallworks Scope: accounts serving market-flow. **9 accounts** across **9 providers**, **4 owning emails**. ## Databases | Supabase | market-flow (prod + dev) | stalls@fieldnotes.dev | Free | market-flow/.env.prod | ## Payments | Stripe | Stallworks (live) | sam.reyes@gmail.com | — | Stripe CLI config | ## DNS | DreamHost | roseharbormarket.com | jordan@meridianlane.com | — | shared login | ## Still has access - Jordan (meridianlane.com) — the registrar login is shared. Revoke: DreamHost panel → account access. …