Sandbox Agent Platform Marketplace Mesh Network x402 Payments CLI Dashboard ↗

🔗 DCDN Mesh Network

Decentralized private networking for users, servers, and AI agents. Connect anything to anything via WireGuard tunnels routed through DCDN's global node network.

🔒 Built on WireGuard — open standard, audited cryptography, cross-platform. No proprietary VPN clients needed.

Overview

DCDN Mesh creates encrypted private networks between your devices, servers, and AI agents:

Devices — laptop, phone, desktop connect to mesh with the CLI or mobile app
Servers — connectors expose local subnets (home network, cloud VPC) to the mesh
Sandboxes — DCDN sandboxes auto-attach to your mesh for private resource access
Agents — marketplace agents can request scoped mesh access to call your private APIs

All traffic is relayed through DCDN's 8 multi-region nodes. Node operators earn revenue from relay traffic.

Quick Start

1. Install CLI

curl -fsSL https://dcdncloud.com/cli/install-mesh.sh | bash

2. Login & Create Network

dcdn-mesh login YOUR_API_KEY
dcdn-mesh init my-network

3. Connect Your Device

sudo dcdn-mesh up

4. Connect a Server (Connector)

# On your server:
sudo dcdn-mesh up --connector
dcdn-mesh expose 192.168.1.0/24

5. Check Status

dcdn-mesh status
dcdn-mesh peers

CLI Reference

Command	Description
`dcdn-mesh login <key>`	Authenticate with API key
`dcdn-mesh init [name]`	Create a mesh network
`dcdn-mesh up`	Connect to mesh (client mode)
`dcdn-mesh up --connector`	Connect as network connector
`dcdn-mesh down`	Disconnect
`dcdn-mesh status`	Connection status + traffic
`dcdn-mesh peers`	List connected peers
`dcdn-mesh ping <ip\|name>`	Ping a peer over mesh
`dcdn-mesh expose <CIDR>`	Expose a local subnet
`dcdn-mesh routes`	List exposed routes
`dcdn-mesh networks`	List your networks

API Reference

Networks

POST /api/v1/mesh/networks — Create network

GET /api/v1/mesh/networks — List my networks

DELETE /api/v1/mesh/networks/{id} — Delete network

Peers

POST /api/v1/mesh/peers — Register peer (returns WireGuard config)

{
  "network_id": "net-abc123",
  "name": "my-laptop",
  "type": "client",          // client, connector, agent, sandbox
  "public_key": "WG_PUBLIC_KEY",
  "os": "macos"
}

Response includes assigned mesh IP, relay info, and ready-to-use WireGuard config.

GET /api/v1/mesh/peers?network_id=... — List peers

DELETE /api/v1/mesh/peers/{id} — Remove peer

POST /api/v1/mesh/peers/{id}/heartbeat — Peer heartbeat

GET /api/v1/mesh/config/{peer_id} — Full WireGuard config + peer list

Routes

POST /api/v1/mesh/routes — Expose a subnet

{ "peer_id": "peer-xyz", "cidr": "192.168.1.0/24", "description": "Home network" }

GET /api/v1/mesh/routes?network_id=... — List routes

DELETE /api/v1/mesh/routes/{id} — Remove route

Policies (Zero Trust)

POST /api/v1/mesh/policies — Create access rule

{
  "network_id": "net-abc123",
  "name": "Block sandbox SSH",
  "priority": 10,
  "source_peer_type": "sandbox",
  "dest_ports": "22",
  "action": "deny"
}

GET /api/v1/mesh/policies?network_id=... — List policies

PATCH /api/v1/mesh/policies/{id} — Update policy

DELETE /api/v1/mesh/policies/{id} — Delete policy

Policy Templates

POST /api/v1/mesh/policies/templates/{name}?network_id=...

Template	Description
`sandbox-restricted`	Block SSH + admin ports from sandboxes, log all
`agent-readonly`	Allow HTTP + DB read, block SSH, log all
`log-everything`	Log all traffic (no blocks)
`deny-all-agents`	Block all agent + sandbox traffic

Access Log

GET /api/v1/mesh/access-log?network_id=... — Audit trail

DNS over Mesh

POST /api/v1/mesh/dns — Create private DNS record

{ "network_id": "net-abc123", "name": "staging-db", "type": "A", "value": "10.200.42.3" }
// Auto-suffixed to staging-db.mesh.local

GET /api/v1/mesh/dns?network_id=... — List records

GET /api/v1/mesh/dns/resolve/{name}?network_id=... — Resolve name (split DNS)

Peer names auto-resolve: my-laptop.mesh.local → peer's mesh IP.

Service Discovery

POST /api/v1/mesh/services — Register service

{ "peer_id": "peer-xyz", "name": "postgres", "port": 5432 }
// Auto-creates DNS: postgres.mesh.local → peer IP

GET /api/v1/mesh/services?network_id=... — Discover services

High Availability

POST /api/v1/mesh/ha — Create HA group

{ "network_id": "net-abc123", "name": "db-ha", "route_cidr": "192.168.1.0/24" }

POST /api/v1/mesh/ha/{id}/members — Add connector to HA group

GET /api/v1/mesh/ha?network_id=... — List HA groups + members

Automatic failover: if active connector fails health check, standby takes over.

VPC Bridge

GET /api/v1/mesh/vpc-bridge/config?network_id=...&cloud=aws|gcp|azure

Returns setup instructions and Terraform snippets for connecting cloud VPCs to your mesh.

Public Stats

GET /api/v1/mesh/public/stats Public

Sandbox Integration

Attach a sandbox to your mesh network at creation time:

POST /api/v1/sandbox
{
  "name": "my-sandbox",
  "size": "basic",
  "mesh_network_id": "net-abc123"   // ← attach to mesh
}

The sandbox gets a WireGuard interface and can reach all peers + exposed routes in your network. Apply policies to control what sandboxes can access.

Agent Mesh Access

Grant a marketplace agent scoped access to your mesh:

POST /api/v1/marketplace/call/my-agent
{
  "message": "Query staging database",
  "mesh_access": {
    "network_id": "net-abc123",
    "allowed_hosts": ["10.200.42.3:5432"]   // scoped!
  }
}

⚠️ Security tip: Always apply the sandbox-restricted or agent-readonly policy template before granting mesh access to agents or sandboxes.

Architecture

┌────────────┐    WireGuard     ┌────────────┐    WireGuard     ┌────────────┐
│   Device   │◄────────────────►│  DCDN Node │◄────────────────►│   Server   │
│  (Client)  │   encrypted      │  (Relay)   │   encrypted      │(Connector) │
└────────────┘                  └─────┬──────┘                  └────────────┘
                                      │
                                ┌─────▼──────┐
                                │Coordinator │  Policy, Auth,
                                │ (Control)  │  Key Exchange,
                                └────────────┘  Route Table

Pricing

Tier	Peers	Traffic	Price
Free	5	1 GB/mo	$0
Starter	25	50 GB/mo	$5/mo
Pro	100	500 GB/mo	$15/mo
Business	Unlimited	Unlimited	$49/mo

Pay-per-use also available via marketplace USD balance ($0.01/GB).

vs. Cloudflare Mesh

Feature	CF Mesh	DCDN Mesh
Protocol	WARP (proprietary)	WireGuard (open)
Decentralized	❌	✅ Node operators earn revenue
Agent integration	Workers VPC only	Sandbox + Marketplace + MCP
Zero Trust	CF One ($$)	Built-in policy engine
Service Discovery	❌	✅ Auto DNS
Free tier	50 nodes	5 peers