diff --git a/buf.gen.yaml b/buf.gen.yaml
new file mode 100644
index 0000000..ce04c1c
--- /dev/null
+++ b/buf.gen.yaml
@@ -0,0 +1,8 @@
+version: v2
+plugins:
+- remote: buf.build/community/neoeinstein-prost
+  out: crates/churn/src/grpc
+- remote: buf.build/community/neoeinstein-tonic:v0.4.0
+  out: crates/churn/src/grpc
+inputs:
+  - directory: crates/churn/proto
diff --git a/crates/churn/proto/churn/v1/churn.proto b/crates/churn/proto/churn/v1/churn.proto
new file mode 100644
index 0000000..77ef798
--- /dev/null
+++ b/crates/churn/proto/churn/v1/churn.proto
@@ -0,0 +1,25 @@
+syntax = "proto3";
+
+package churn.v1;
+
+service Churn {
+  rpc GetKey(GetKeyRequest) returns (GetKeyResponse);
+  rpc SetKey(SetKeyRequest) returns (SetKeyResponse);
+}
+
+message GetKeyRequest {
+  string namespace = 1;
+  optional string id = 2;
+  string key = 3;
+}
+message GetKeyResponse {
+  optional string value = 1;
+}
+
+message SetKeyRequest {
+  string namespace = 1;
+  optional string id = 2;
+  string key = 3;
+  string value = 4;
+}
+message SetKeyResponse {}
diff --git a/crates/churn/src/agent.rs b/crates/churn/src/agent.rs
index ed5d900..4303461 100644
--- a/crates/churn/src/agent.rs
+++ b/crates/churn/src/agent.rs
@@ -1,9 +1,74 @@
 use agent_state::AgentState;
 use refresh::AgentRefresh;
-
 mod agent_state;
-
 mod refresh;
+mod grpc_client {
+    use tonic::transport::{Channel, ClientTlsConfig};
+
+    use crate::grpc::{churn_client::ChurnClient, *};
+
+    pub struct GrpcClient {
+        host: String,
+    }
+
+    impl GrpcClient {
+        pub fn new(host: impl Into<String>) -> Self {
+            Self { host: host.into() }
+        }
+
+        pub async fn get_key(
+            &self,
+            namespace: &str,
+            id: Option<impl Into<String>>,
+            key: &str,
+        ) -> anyhow::Result<Option<String>> {
+            let mut client = self.client().await?;
+
+            let resp = client
+                .get_key(GetKeyRequest {
+                    key: key.into(),
+                    namespace: namespace.into(),
+                    id: id.map(|i| i.into()),
+                })
+                .await?;
+            let resp = resp.into_inner();
+
+            Ok(resp.value)
+        }
+
+        pub async fn set_key(
+            &self,
+            namespace: &str,
+            id: Option<impl Into<String>>,
+            key: &str,
+            value: &str,
+        ) -> anyhow::Result<()> {
+            let mut client = self.client().await?;
+
+            client
+                .set_key(SetKeyRequest {
+                    key: key.into(),
+                    value: value.into(),
+                    namespace: namespace.into(),
+                    id: id.map(|i| i.into()),
+                })
+                .await?;
+
+            Ok(())
+        }
+
+        async fn client(&self) -> anyhow::Result<ChurnClient<tonic::transport::Channel>> {
+            let channel = Channel::from_shared(self.host.to_owned())?
+                .tls_config(ClientTlsConfig::new().with_native_roots())?
+                .connect()
+                .await?;
+
+            let client = ChurnClient::new(channel);
+
+            Ok(client)
+        }
+    }
+}
 
 pub async fn execute(host: impl Into<String>) -> anyhow::Result<()> {
     let state = AgentState::new().await?;
diff --git a/crates/churn/src/grpc/churn.v1.rs b/crates/churn/src/grpc/churn.v1.rs
new file mode 100644
index 0000000..2717f7c
--- /dev/null
+++ b/crates/churn/src/grpc/churn.v1.rs
@@ -0,0 +1,36 @@
+// @generated
+// This file is @generated by prost-build.
+#[allow(clippy::derive_partial_eq_without_eq)]
+#[derive(Clone, PartialEq, ::prost::Message)]
+pub struct GetKeyRequest {
+    #[prost(string, tag="1")]
+    pub namespace: ::prost::alloc::string::String,
+    #[prost(string, optional, tag="2")]
+    pub id: ::core::option::Option<::prost::alloc::string::String>,
+    #[prost(string, tag="3")]
+    pub key: ::prost::alloc::string::String,
+}
+#[allow(clippy::derive_partial_eq_without_eq)]
+#[derive(Clone, PartialEq, ::prost::Message)]
+pub struct GetKeyResponse {
+    #[prost(string, optional, tag="1")]
+    pub value: ::core::option::Option<::prost::alloc::string::String>,
+}
+#[allow(clippy::derive_partial_eq_without_eq)]
+#[derive(Clone, PartialEq, ::prost::Message)]
+pub struct SetKeyRequest {
+    #[prost(string, tag="1")]
+    pub namespace: ::prost::alloc::string::String,
+    #[prost(string, optional, tag="2")]
+    pub id: ::core::option::Option<::prost::alloc::string::String>,
+    #[prost(string, tag="3")]
+    pub key: ::prost::alloc::string::String,
+    #[prost(string, tag="4")]
+    pub value: ::prost::alloc::string::String,
+}
+#[allow(clippy::derive_partial_eq_without_eq)]
+#[derive(Clone, Copy, PartialEq, ::prost::Message)]
+pub struct SetKeyResponse {
+}
+include!("churn.v1.tonic.rs");
+// @@protoc_insertion_point(module)
\ No newline at end of file
diff --git a/crates/churn/src/grpc/churn.v1.tonic.rs b/crates/churn/src/grpc/churn.v1.tonic.rs
new file mode 100644
index 0000000..8b748e3
--- /dev/null
+++ b/crates/churn/src/grpc/churn.v1.tonic.rs
@@ -0,0 +1,350 @@
+// @generated
+/// Generated client implementations.
+pub mod churn_client {
+    #![allow(unused_variables, dead_code, missing_docs, clippy::let_unit_value)]
+    use tonic::codegen::*;
+    use tonic::codegen::http::Uri;
+    #[derive(Debug, Clone)]
+    pub struct ChurnClient<T> {
+        inner: tonic::client::Grpc<T>,
+    }
+    impl ChurnClient<tonic::transport::Channel> {
+        /// Attempt to create a new client by connecting to a given endpoint.
+        pub async fn connect<D>(dst: D) -> Result<Self, tonic::transport::Error>
+        where
+            D: TryInto<tonic::transport::Endpoint>,
+            D::Error: Into<StdError>,
+        {
+            let conn = tonic::transport::Endpoint::new(dst)?.connect().await?;
+            Ok(Self::new(conn))
+        }
+    }
+    impl<T> ChurnClient<T>
+    where
+        T: tonic::client::GrpcService<tonic::body::BoxBody>,
+        T::Error: Into<StdError>,
+        T::ResponseBody: Body<Data = Bytes> + Send + 'static,
+        <T::ResponseBody as Body>::Error: Into<StdError> + Send,
+    {
+        pub fn new(inner: T) -> Self {
+            let inner = tonic::client::Grpc::new(inner);
+            Self { inner }
+        }
+        pub fn with_origin(inner: T, origin: Uri) -> Self {
+            let inner = tonic::client::Grpc::with_origin(inner, origin);
+            Self { inner }
+        }
+        pub fn with_interceptor<F>(
+            inner: T,
+            interceptor: F,
+        ) -> ChurnClient<InterceptedService<T, F>>
+        where
+            F: tonic::service::Interceptor,
+            T::ResponseBody: Default,
+            T: tonic::codegen::Service<
+                http::Request<tonic::body::BoxBody>,
+                Response = http::Response<
+                    <T as tonic::client::GrpcService<tonic::body::BoxBody>>::ResponseBody,
+                >,
+            >,
+            <T as tonic::codegen::Service<
+                http::Request<tonic::body::BoxBody>,
+            >>::Error: Into<StdError> + Send + Sync,
+        {
+            ChurnClient::new(InterceptedService::new(inner, interceptor))
+        }
+        /// Compress requests with the given encoding.
+        ///
+        /// This requires the server to support it otherwise it might respond with an
+        /// error.
+        #[must_use]
+        pub fn send_compressed(mut self, encoding: CompressionEncoding) -> Self {
+            self.inner = self.inner.send_compressed(encoding);
+            self
+        }
+        /// Enable decompressing responses.
+        #[must_use]
+        pub fn accept_compressed(mut self, encoding: CompressionEncoding) -> Self {
+            self.inner = self.inner.accept_compressed(encoding);
+            self
+        }
+        /// Limits the maximum size of a decoded message.
+        ///
+        /// Default: `4MB`
+        #[must_use]
+        pub fn max_decoding_message_size(mut self, limit: usize) -> Self {
+            self.inner = self.inner.max_decoding_message_size(limit);
+            self
+        }
+        /// Limits the maximum size of an encoded message.
+        ///
+        /// Default: `usize::MAX`
+        #[must_use]
+        pub fn max_encoding_message_size(mut self, limit: usize) -> Self {
+            self.inner = self.inner.max_encoding_message_size(limit);
+            self
+        }
+        pub async fn get_key(
+            &mut self,
+            request: impl tonic::IntoRequest<super::GetKeyRequest>,
+        ) -> std::result::Result<tonic::Response<super::GetKeyResponse>, tonic::Status> {
+            self.inner
+                .ready()
+                .await
+                .map_err(|e| {
+                    tonic::Status::new(
+                        tonic::Code::Unknown,
+                        format!("Service was not ready: {}", e.into()),
+                    )
+                })?;
+            let codec = tonic::codec::ProstCodec::default();
+            let path = http::uri::PathAndQuery::from_static("/churn.v1.Churn/GetKey");
+            let mut req = request.into_request();
+            req.extensions_mut().insert(GrpcMethod::new("churn.v1.Churn", "GetKey"));
+            self.inner.unary(req, path, codec).await
+        }
+        pub async fn set_key(
+            &mut self,
+            request: impl tonic::IntoRequest<super::SetKeyRequest>,
+        ) -> std::result::Result<tonic::Response<super::SetKeyResponse>, tonic::Status> {
+            self.inner
+                .ready()
+                .await
+                .map_err(|e| {
+                    tonic::Status::new(
+                        tonic::Code::Unknown,
+                        format!("Service was not ready: {}", e.into()),
+                    )
+                })?;
+            let codec = tonic::codec::ProstCodec::default();
+            let path = http::uri::PathAndQuery::from_static("/churn.v1.Churn/SetKey");
+            let mut req = request.into_request();
+            req.extensions_mut().insert(GrpcMethod::new("churn.v1.Churn", "SetKey"));
+            self.inner.unary(req, path, codec).await
+        }
+    }
+}
+/// Generated server implementations.
+pub mod churn_server {
+    #![allow(unused_variables, dead_code, missing_docs, clippy::let_unit_value)]
+    use tonic::codegen::*;
+    /// Generated trait containing gRPC methods that should be implemented for use with ChurnServer.
+    #[async_trait]
+    pub trait Churn: Send + Sync + 'static {
+        async fn get_key(
+            &self,
+            request: tonic::Request<super::GetKeyRequest>,
+        ) -> std::result::Result<tonic::Response<super::GetKeyResponse>, tonic::Status>;
+        async fn set_key(
+            &self,
+            request: tonic::Request<super::SetKeyRequest>,
+        ) -> std::result::Result<tonic::Response<super::SetKeyResponse>, tonic::Status>;
+    }
+    #[derive(Debug)]
+    pub struct ChurnServer<T: Churn> {
+        inner: _Inner<T>,
+        accept_compression_encodings: EnabledCompressionEncodings,
+        send_compression_encodings: EnabledCompressionEncodings,
+        max_decoding_message_size: Option<usize>,
+        max_encoding_message_size: Option<usize>,
+    }
+    struct _Inner<T>(Arc<T>);
+    impl<T: Churn> ChurnServer<T> {
+        pub fn new(inner: T) -> Self {
+            Self::from_arc(Arc::new(inner))
+        }
+        pub fn from_arc(inner: Arc<T>) -> Self {
+            let inner = _Inner(inner);
+            Self {
+                inner,
+                accept_compression_encodings: Default::default(),
+                send_compression_encodings: Default::default(),
+                max_decoding_message_size: None,
+                max_encoding_message_size: None,
+            }
+        }
+        pub fn with_interceptor<F>(
+            inner: T,
+            interceptor: F,
+        ) -> InterceptedService<Self, F>
+        where
+            F: tonic::service::Interceptor,
+        {
+            InterceptedService::new(Self::new(inner), interceptor)
+        }
+        /// Enable decompressing requests with the given encoding.
+        #[must_use]
+        pub fn accept_compressed(mut self, encoding: CompressionEncoding) -> Self {
+            self.accept_compression_encodings.enable(encoding);
+            self
+        }
+        /// Compress responses with the given encoding, if the client supports it.
+        #[must_use]
+        pub fn send_compressed(mut self, encoding: CompressionEncoding) -> Self {
+            self.send_compression_encodings.enable(encoding);
+            self
+        }
+        /// Limits the maximum size of a decoded message.
+        ///
+        /// Default: `4MB`
+        #[must_use]
+        pub fn max_decoding_message_size(mut self, limit: usize) -> Self {
+            self.max_decoding_message_size = Some(limit);
+            self
+        }
+        /// Limits the maximum size of an encoded message.
+        ///
+        /// Default: `usize::MAX`
+        #[must_use]
+        pub fn max_encoding_message_size(mut self, limit: usize) -> Self {
+            self.max_encoding_message_size = Some(limit);
+            self
+        }
+    }
+    impl<T, B> tonic::codegen::Service<http::Request<B>> for ChurnServer<T>
+    where
+        T: Churn,
+        B: Body + Send + 'static,
+        B::Error: Into<StdError> + Send + 'static,
+    {
+        type Response = http::Response<tonic::body::BoxBody>;
+        type Error = std::convert::Infallible;
+        type Future = BoxFuture<Self::Response, Self::Error>;
+        fn poll_ready(
+            &mut self,
+            _cx: &mut Context<'_>,
+        ) -> Poll<std::result::Result<(), Self::Error>> {
+            Poll::Ready(Ok(()))
+        }
+        fn call(&mut self, req: http::Request<B>) -> Self::Future {
+            let inner = self.inner.clone();
+            match req.uri().path() {
+                "/churn.v1.Churn/GetKey" => {
+                    #[allow(non_camel_case_types)]
+                    struct GetKeySvc<T: Churn>(pub Arc<T>);
+                    impl<T: Churn> tonic::server::UnaryService<super::GetKeyRequest>
+                    for GetKeySvc<T> {
+                        type Response = super::GetKeyResponse;
+                        type Future = BoxFuture<
+                            tonic::Response<Self::Response>,
+                            tonic::Status,
+                        >;
+                        fn call(
+                            &mut self,
+                            request: tonic::Request<super::GetKeyRequest>,
+                        ) -> Self::Future {
+                            let inner = Arc::clone(&self.0);
+                            let fut = async move {
+                                <T as Churn>::get_key(&inner, request).await
+                            };
+                            Box::pin(fut)
+                        }
+                    }
+                    let accept_compression_encodings = self.accept_compression_encodings;
+                    let send_compression_encodings = self.send_compression_encodings;
+                    let max_decoding_message_size = self.max_decoding_message_size;
+                    let max_encoding_message_size = self.max_encoding_message_size;
+                    let inner = self.inner.clone();
+                    let fut = async move {
+                        let inner = inner.0;
+                        let method = GetKeySvc(inner);
+                        let codec = tonic::codec::ProstCodec::default();
+                        let mut grpc = tonic::server::Grpc::new(codec)
+                            .apply_compression_config(
+                                accept_compression_encodings,
+                                send_compression_encodings,
+                            )
+                            .apply_max_message_size_config(
+                                max_decoding_message_size,
+                                max_encoding_message_size,
+                            );
+                        let res = grpc.unary(method, req).await;
+                        Ok(res)
+                    };
+                    Box::pin(fut)
+                }
+                "/churn.v1.Churn/SetKey" => {
+                    #[allow(non_camel_case_types)]
+                    struct SetKeySvc<T: Churn>(pub Arc<T>);
+                    impl<T: Churn> tonic::server::UnaryService<super::SetKeyRequest>
+                    for SetKeySvc<T> {
+                        type Response = super::SetKeyResponse;
+                        type Future = BoxFuture<
+                            tonic::Response<Self::Response>,
+                            tonic::Status,
+                        >;
+                        fn call(
+                            &mut self,
+                            request: tonic::Request<super::SetKeyRequest>,
+                        ) -> Self::Future {
+                            let inner = Arc::clone(&self.0);
+                            let fut = async move {
+                                <T as Churn>::set_key(&inner, request).await
+                            };
+                            Box::pin(fut)
+                        }
+                    }
+                    let accept_compression_encodings = self.accept_compression_encodings;
+                    let send_compression_encodings = self.send_compression_encodings;
+                    let max_decoding_message_size = self.max_decoding_message_size;
+                    let max_encoding_message_size = self.max_encoding_message_size;
+                    let inner = self.inner.clone();
+                    let fut = async move {
+                        let inner = inner.0;
+                        let method = SetKeySvc(inner);
+                        let codec = tonic::codec::ProstCodec::default();
+                        let mut grpc = tonic::server::Grpc::new(codec)
+                            .apply_compression_config(
+                                accept_compression_encodings,
+                                send_compression_encodings,
+                            )
+                            .apply_max_message_size_config(
+                                max_decoding_message_size,
+                                max_encoding_message_size,
+                            );
+                        let res = grpc.unary(method, req).await;
+                        Ok(res)
+                    };
+                    Box::pin(fut)
+                }
+                _ => {
+                    Box::pin(async move {
+                        Ok(
+                            http::Response::builder()
+                                .status(200)
+                                .header("grpc-status", "12")
+                                .header("content-type", "application/grpc")
+                                .body(empty_body())
+                                .unwrap(),
+                        )
+                    })
+                }
+            }
+        }
+    }
+    impl<T: Churn> Clone for ChurnServer<T> {
+        fn clone(&self) -> Self {
+            let inner = self.inner.clone();
+            Self {
+                inner,
+                accept_compression_encodings: self.accept_compression_encodings,
+                send_compression_encodings: self.send_compression_encodings,
+                max_decoding_message_size: self.max_decoding_message_size,
+                max_encoding_message_size: self.max_encoding_message_size,
+            }
+        }
+    }
+    impl<T: Churn> Clone for _Inner<T> {
+        fn clone(&self) -> Self {
+            Self(Arc::clone(&self.0))
+        }
+    }
+    impl<T: std::fmt::Debug> std::fmt::Debug for _Inner<T> {
+        fn fmt(&self, f: &mut std::fmt::Formatter<'_>) -> std::fmt::Result {
+            write!(f, "{:?}", self.0)
+        }
+    }
+    impl<T: Churn> tonic::server::NamedService for ChurnServer<T> {
+        const NAME: &'static str = "churn.v1.Churn";
+    }
+}
diff --git a/crates/churn/src/main.rs b/crates/churn/src/main.rs
index ace2eb0..32526de 100644
--- a/crates/churn/src/main.rs
+++ b/crates/churn/src/main.rs
@@ -1,6 +1,9 @@
 mod api;
 mod cli;
 mod state;
+mod grpc {
+    include!("grpc/churn.v1.rs");
+}
 
 mod agent;