AI is doing real work. People should be able to see it.
Businesses now let AI read their inboxes, post to their ledgers and email their customers. The people accountable for that work, the owner, the controller, the auditor, usually cannot see where the AI acts, what it can touch or who approved it. Stepflow gives them one page that shows it.
An AI can draft a runbook. Only a named person can make it live, and their name stays on the version.
Diagram tools draw. Automation tools execute. Governance platforms gate.
None of them shows, step by step, where an AI acts, which systems it touches and where a person decides. Stepflow is that layer, and it is light enough for a small team to use.
Four rules the product follows itself.
Show the boundary.
Every step says who acts, what it can touch and where a person decides. If a step can't answer those, it isn't finished.
People publish.
An AI can draft a runbook. Only a named person can make it live, and their name stays on the version.
Label the evidence.
A log an AI writes about itself is not independent proof. Every event says who reported it, so the trail never claims more than it shows.
Hold as little as possible.
Stepflow never stores credentials or calls your systems. A runbook is sensitive enough already.
Common questions
Pricing questions are on the pricing page.
What is Stepflow?
Stepflow is a runbook tool for agentic workflows. It maps each step of a workflow to a lane (Human, AI or Systems), records what each step can access and which person signs off, and keeps a hash-chained audit trail of every run. Your AI connects over MCP; Stepflow does not run the work itself.
Does Stepflow run my workflows?
No. Your AI and your tools do the work. Stepflow holds the map: who acts at each step, what they can touch and where a person decides. Running workflows post events back, so the map also shows what happened.
Which AI can I connect?
AI clients that support remote MCP (Model Context Protocol) with sign-in, starting with Claude. You bring your own AI and your own model account, so Stepflow adds no AI usage fees.
Can an AI change a live runbook?
No. AI connects with a draft-only token. It can read runbooks, edit drafts and post run events. Publishing, deleting and sharing need a person.
Does Stepflow store passwords or API keys for my systems?
No. Stepflow never connects to your systems. Each step names the system and its access level, and each runbook's register lists them.
How do I know the run log is accurate?
Every event is labeled. Self-reported means your AI posted it; system-reported means another system sent it. The label stops the trail from overstating what it proves. Every row is also hash-chained, so a later edit shows up when the chain is checked.
Who can see a runbook?
Only signed-in members of your workspace. There are no public links, and views and exports are logged.
Do you support SSO and audit-log export?
Not yet. Both are on the roadmap.
Built by someone who signs off on numbers.
Ash Emmett, founder
Chartered management accountant (ACMA, CGMA) with 13 years in FP&A, reporting and investment analysis across the UK, Hong Kong, the US and Mexico.
Stepflow is in build. At launch there is a 14-day trial. Until then, book a demo and tell us which workflow you would map first.