Mesa is a durable, POSIX-compatible filesystem with built-in version control, designed specifically for AI agents that produce, edit, and coordinate documents. Think Git semantics applied to any file type, at agent scale, exposed as a regular filesystem.

The problem
Every team building enterprise agents hits the same wall: how do you persist documents beyond ephemeral sandbox lifetimes, give agents fine-grained access control, and build human-approval workflows for sensitive edits? Swap "real-estate contracts" for case files, insurance claims, audit reports, or pull requests - the shape of the problem is identical.
Existing storage primitives fall short:
| Storage | What it gives you | What's missing |
|---|---|---|
| S3 / cloud FS | Durable storage | No versions, no branches, no diffs, concurrent clobber |
| GitHub / GitLab | Version semantics | Rate limits, poor large-file support, not agent-scale |
| Local sandbox FS | Fast reads/writes | Ephemeral, no persistence, no access control |
How it works
Mesa brings code-repository primitives to any file type:
- Branches so agents work in parallel without locking
- Automatic durability so no work is lost when a sandbox dies
- Fine-grained history with review, rollback, and replay per change
- Sparse materialization so massive document sets load instantly, fetching only needed files on demand
- Access control so different agents read/write only appropriate files
All exposed as a standard POSIX filesystem. Agents just read and write files - no git clone, no git push.
Usage
Mount via FUSE for any application in a sandbox or server:
curl -fsSL https://mesa.dev/install.sh | sh
mesa mount --daemonize
cd ~/.local/share/mesa/mnt && claude
Or use the TypeScript SDK for application-level mounting:
import { Mesa } from "@mesadev/sdk";
const mesa = new Mesa({ apiKey: process.env.MESA_API_KEY });
const fs = await mesa.fs.mount({
repos: [
{ name: "project-foo", bookmark: "session-123" },
{ name: "agent-skills", bookmark: "main" },
],
mode: "rw",
});
Each SDK mount point is fully isolated with its own access controls. Multiple agent sessions can run on the same multi-tenant server.
Status
Currently in private beta. Early design partners are using it in production across legal, healthcare, GTM, business operations, and coding agents. Public beta and v1.0 expected in the coming months. Contact: founders@mesa.dev.
Good fit for anyone building agents that deal with long-lived documents where you need audit trails, parallel execution, and human-in-the-loop approvals.