Diagrid Catalyst

Diagrid Catalyst is a centralized platform for running and operating the Dapr runtime to power durable workflows, agents, and other development APIs as-a-service. Catalyst exposes the full power of the Dapr APIs for building distributed applications using a unified and open programming model, while platform teams retain centralized visibility, governance, and operational control.

Deployment options

Catalyst offers multiple deployment options with varying levels of isolation, control, and operational responsibility — from a fully managed cloud service to completely air-gapped environments.

Plan	Hosting Option	Control Plane	Data Plane	Description
Catalyst Cloud	Multi-tenant	Diagrid	Diagrid	Shared infrastructure across all Catalyst Cloud customers. Fastest way to get started with zero setup.
Catalyst Enterprise	Dedicated	Diagrid	Diagrid	Diagrid-managed, but the Catalyst Data Plane runs on a separate Kubernetes cluster provisioned exclusively for the customer.
	Self-Hosted	Diagrid	Customer	Catalyst Control Plane managed by Diagrid with the Catalyst Data Plane running on customer infrastructure for full data residency control.
	Air-Gapped	Customer	Customer	Fully offline, network-isolated deployment with no external connectivity. Used for regulated and defense environments.

See the Catalyst hosting model overview for a full breakdown.

Features

The same feature set is available on Catalyst Cloud (fully managed SaaS) and Catalyst Enterprise (dedicated or self-hosted).

Organize and run workloads

Projects

Top-level container with its own HTTP/gRPC endpoints, ingress/egress addresses, and role scopes. Use for dev/staging/prod, teams, or isolated apps.

App IDs

Per-workload identity with an API token, runtime spec, autoscaling, health checks, and optional app connection for outbound traffic.

Components

Declarative Dapr components scoped to App IDs, with transparent secret extraction and resiliency policies for retry, timeout, and circuit breakers.

Managed Services

Catalyst-hosted Pub/Sub broker, Key/Value store, and Workflow store — enabled per project without provisioning your own infrastructure.

Regions

Geographical/physical deployment units within the Catalyst Data Plane, each on one Kubernetes cluster. Managed by Diagrid on Cloud, or deployed to your own cluster with Catalyst Enterprise Self-Hosted.

Hosting Options

Catalyst Cloud, Enterprise Dedicated, Self-Hosted, and Air-Gapped — pick the Catalyst Control Plane and Catalyst Data Plane topology that fits your environment.

Connect applications

Connectivity Concepts

How projects, App IDs, endpoints, and the egress/ingress addresses fit together in the Catalyst connection model.

Dev & Test with the Diagrid CLI

Use diagrid dev run to connect a local app to Catalyst, scaffold multi-app run files, and stream callbacks to your terminal.

Secrets

Transparent secret extraction for component metadata, or bring-your-own secret stores (AWS Secrets Manager, Azure Key Vault, HashiCorp Vault).

Manage Access

Invite users, assign Admin / API Operator / API Consumer / Viewer roles (global or project-scoped), and generate API keys for automation.

Observe workloads

Observability Overview

Metrics, API Logs, application logs, workflow replay, agent inspection, application graph, and OpenTelemetry tracing — all from the Catalyst console.

Workflows

Step-level drill-down, execution graph, and one-click rerun, resume, terminate, or purge for durable workflows.

Agents

Discover running agents, inspect inputs/outputs and tool calls, and review sessions for durable agents with memory.

App Graphs

Visualise service-to-service topology and dependency maps for the App IDs in a project.

Secure the platform

Roles & API Keys

Admin, API Operator, API Consumer, and Viewer roles applied globally or scoped to specific projects. Named API keys with configurable expiry for automation.

Secret Management

Transparent extraction of sensitive metadata into a Catalyst-managed secret store, or bring-your-own Vault / AWS Secrets Manager / Azure Key Vault.

App Connection Security

App ID API tokens, application tokens for callbacks, mTLS for app endpoints, and network allowlisting via project egress addresses.

Plans, Compliance & Support

Catalyst is SOC 2 Type II certified. Review data residency, VPC peering, SSO, and audit log availability alongside plan-specific controls.

Automate with the Diagrid CLI and APIs

Diagrid CLI

Install and use the diagrid CLI to manage organizations, projects, regions, App IDs, components, configurations, subscriptions, resiliencies, service accounts, users, and API keys.

Declarative Management

Use diagrid apply and diagrid export to manage App IDs, components, subscriptions, resiliencies, and configurations as YAML in Git.

Dev Workflow

Use diagrid dev run, diagrid listen, and diagrid call to connect local apps, stream callbacks, and smoke-test APIs from the terminal.

Catalyst APIs

Call the same runtime and management surface over HTTPS for GitOps, CI/CD, and custom tooling.