Content
<p align="center">
<img src="dashboard/public/favicon.svg" width="120" alt="sandboxed.sh" />
</p>
<h1 align="center">sandboxed.sh</h1>
<p align="center">
<strong>Self-hosted cloud orchestrator for AI coding agents</strong><br/>
Isolated Linux workspaces with Claude Code, OpenCode & Amp runtimes
</p>
<p align="center">
<em>Formerly known as "Sandboxed.sh"</em>
</p>
<p align="center">
<a href="https://sandboxed.sh">Website</a> ·
<a href="https://relens.ai/community">Discord</a> ·
<a href="#vision">Vision</a> ·
<a href="#features">Features</a> ·
<a href="#ecosystem">Ecosystem</a> ·
<a href="#screenshots">Screenshots</a> ·
<a href="#getting-started">Getting Started</a>
</p>
<br/>
<p align="center">
<img src="screenshots/hero.webp" alt="sandboxed.sh Dashboard" width="100%" />
</p>
<p align="center">
<strong>Ready to deploy?</strong> Jump to the <a href="#choose-your-installation-method">installation comparison</a>, or go straight to the <a href="docs/install-docker.md">Docker guide</a> / <a href="docs/install-native.md">native guide</a>.
</p>
---
## Vision
What if you could:
**Hand off entire dev cycles.** Point an agent at a GitHub issue, let it write
code, test by launching desktop applicatons, and open a PR when tests pass. You
review the diff, not the process.
**Run multi-day operations unattended.** Give an agent SSH access to your home
GPU through a VPN. It reads Nvidia docs, sets up training, fine-tunes models
while you sleep.
**Keep sensitive data local.** Analyze your sequenced DNA against scientific
literature. Local inference, isolated containers, nothing leaves your machines.
---
## Features
- **Dual Runtime Support**: Run Claude Code or OpenCode agents in the same
infrastructure
- **Mission Control**: Start, stop, and monitor agents remotely with real-time
streaming
- **Isolated Workspaces**: Containerized Linux environments (systemd-nspawn)
with per-mission directories
- **Git-backed Library**: Skills, tools, rules, agents, and MCPs versioned in a
single repo
- **MCP Registry (optional)**: Extra tool servers (desktop/playwright/etc.) when
needed
- **Multi-platform**: Web dashboard (Next.js) and iOS app (SwiftUI) with
Picture-in-Picture
---
## Ecosystem
sandboxed.sh orchestrates multiple AI coding agent runtimes:
- **[Claude Code](https://docs.anthropic.com/en/docs/claude-code)**: Anthropic's
official coding agent with native skills support (`.claude/skills/`)
- **[OpenCode](https://github.com/anomalyco/opencode)**: Open-source alternative
via [oh-my-opencode](https://github.com/code-yeongyu/oh-my-opencode)
- **[Amp](https://ampcode.com)**: Sourcegraph's frontier coding agent with
multi-model support
Each runtime executes inside isolated workspaces, so bash commands and file
operations are scoped correctly. sandboxed.sh handles orchestration, workspace
isolation, and Library-based configuration management.
---
## Screenshots
<p align="center">
<img src="screenshots/dashboard-overview.webp" alt="Dashboard Overview" width="100%" />
</p>
<p align="center"><em>Real-time monitoring with CPU, memory, network graphs and mission timeline</em></p>
<br/>
<p align="center">
<img src="screenshots/library-skills.webp" alt="Library Skills Editor" width="100%" />
</p>
<p align="center"><em>Git-backed Library with skills, commands, rules, and inline editing</em></p>
<br/>
<p align="center">
<img src="screenshots/mcp-servers.webp" alt="MCP Servers" width="100%" />
</p>
<p align="center"><em>MCP server management with runtime status and Library integration</em></p>
---
## Getting Started
### Choose your installation method
| | Docker (recommended) | Native (bare metal) |
| ------------------------ | ---------------------------------------------- | --------------------------------------------------- |
| **Best for** | Getting started, macOS users, quick deployment | Production servers, maximum performance |
| **Platform** | Any OS with Docker | Ubuntu 24.04 LTS |
| **Setup time** | ~5 minutes | ~30 minutes |
| **Container workspaces** | Yes (with `privileged: true`) | Yes (native systemd-nspawn) |
| **Desktop automation** | Yes (headless Xvfb inside Docker) | Yes (native X11 or Xvfb) |
| **Performance** | Good (slight overhead on macOS) | Best (native Linux) |
| **Updates** | `docker compose pull` / rebuild | Git pull + cargo build, or one-click from dashboard |
### Docker (recommended for most users)
```bash
git clone https://github.com/Th0rgal/sandboxed.sh.git
cd sandboxed-sh
cp .env.example .env
# Edit .env with your settings
docker compose up -d
```
Open `http://localhost:3000` — that's it.
For container workspace isolation (recommended), uncomment `privileged: true` in
`docker-compose.yml`.
→ **[Full Docker setup guide](docs/install-docker.md)**
### Native (bare metal)
For production servers running Ubuntu 24.04 with maximum performance and native
systemd-nspawn isolation.
→ **[Full native installation guide](docs/install-native.md)**
### First-time setup
After installation, follow the **[Getting Started Guide](docs/getting-started.md)** for:
- Configuring your backend connection
- Setting up your library repository
- Exploring skills and tools
- Creating your first mission
### AI-assisted setup
Point your coding agent at the installation guide and let it handle the
deployment:
> "Deploy Sandboxed.sh on my server at `1.2.3.4` with domain `agent.example.com`"
---
## Development
### Setup git hooks
Enable pre-push formatting checks to catch CI failures locally:
```bash
git config core.hooksPath .githooks
```
This runs `cargo fmt --check` before each push. If formatting issues are found,
run `cargo fmt --all` to fix them.
---
## Status
**Work in Progress** — This project is under active development. Contributions
and feedback welcome.
## License
MIT
Connection Info
You Might Also Like
markitdown
MarkItDown-MCP is a lightweight server for converting URIs to Markdown.
firecrawl
Firecrawl MCP Server enables web scraping, crawling, and content extraction.
servers
Model Context Protocol Servers
Time
A Model Context Protocol server for time and timezone conversions.
Filesystem
Node.js MCP Server for filesystem operations with dynamic access control.
Sequential Thinking
A structured MCP server for dynamic problem-solving and reflective thinking.