devbox/your remote workshopView on GitHub ↗
SELF-HOSTED WORKSPACES FOR AI AGENTS ↗

Agents at work.
Life goes on.

Run Claude Code, Codex and Grok on your own server. A separate workspace for every idea. Your Mac, browser and phone keep you in the loop.

THE DEVBOX PLAYGROUND
Interactive demo · runs in your browser

Less explaining.
More trying it.

Create a workspace. Give an agent a task.
Make the call when it asks for access.

acme/webClaude Code · isolated workspace
ready
01 Workspace02 Working03 Your call04 Done
❯dev acme/web --agent claude
Workspace ready. Your agent is waiting for a task.

Local simulation. No server, agent account or SSH connection is used.

Make this your real workspace ↗
Real devbox dashboard · sanitized demo dataActual devbox dashboard with live workspace, terminal and sharing controls
BRING YOUR AGENTS
✳ Claude Code◉ Codex𝕏 Grok Build+ model proxy profiles

Close the laptop.
Keep the momentum.

Long refactors. Parallel ideas. Tests that run for hours. Give every agent a workspace on a machine that keeps going.

01

Pick a repository.

One command creates a container, a worktree and a branch. Your next idea gets its own space.

$ dev acme/web ▍
02

Let your agents work.

Run Claude, Codex or Grok in tmux. Build and test with a private Docker daemon and mapped ports.

checkout redesign Claude rate limiter Codex
03

Come back when it matters.

Get the question, approval request or finished result on your Mac or phone. Reconnect to the same conversation.

devbox
Ready for your review.
now

A server that fits
into your Mac.

The little things make remote development feel right. Your files, browser, clipboard and terminal stay connected.

YOUR MUSCLE MEMORY, PRESERVED.

A remote file.
A native Mac app.

Run open in your container. The listener maps the remote path to your mounted workspace and opens it on your Mac.

open design.pdf

Requires the Mac listener, path mappings and the SMB workspace mount.

PreviewIllustration
DESIGN / V1.0

A little context.
A better result.

design.pdf
Remote file → local app. No download dance.

Open it where it belongs.

Container commands open remote files in native Mac apps and dev servers in your browser.

Your workspace, in Finder.

SMB mounts put server files alongside local ones. Browse, edit and drag files with familiar tools.

Paste the context.

Send clipboard screenshots to your agent, or copy a file in Finder and press ⌘⇧V to stage it remotely.

Give agents room.
Keep the keys.

Review access requests, inspect usage and see what is happening across your workspace. Sensitive actions have a human in the loop.

  • Encrypted secrets vault on the host
  • SSH access through an approval broker
  • Separate approval for production writes
  • Private networking over Tailscale
Read the security model ↗
YOUR CALL
Dashboard showing an SSH key request with its reason, target host, and approve or deny actions
The agent requests access. You make the decision.
Native devbox iOS app displaying agent sessions and working or waiting states
ON YOUR LOCK SCREENdevbox Live Activity showing waiting, working and finished sessions

Away from the desk.
Still in the loop.

See what’s working. Answer an SSH request. Approve a production write. A native iOS companion keeps the important moments close.

Live ActivitiesDynamic IslandPush notificationsApprovals
Explore the iOS app ↗

Self-built with your Apple developer account.
Not currently distributed through the App Store.

A whole workshop.
Not just a terminal.

Pick what matters to you. Explore the practical details. Everything here maps to a real devbox capability.

Six ways to make remote work feel right.
01 / 11 CAPABILITIES
Sessions & agents

One idea, one workspace.

  • ↗
    Isolated sessions

    A Docker container, git worktree, branch and port range for each session. Work on the same repository in parallel.

  • ↗
    Claude, Codex & Grok

    Run Claude Code, Codex CLI, Grok Build and Antigravity. Claude profiles also support GPT, Grok, Gemini subscription proxies and OpenRouter API models.

  • ↗
    A private Docker daemon

    Docker-in-Docker sidecars let agents build images and run services inside their own session.

Explore 8 more capabilities+
  • ↗
    Persistent conversations

    Agents run in tmux. Disconnect, close your laptop and attach again where you left off.

  • ↗
    Shared agent tooling

    Provision MCP servers, shared configuration, skills and plugins. The session image includes headless Chromium/Playwright and code tooling.

  • ↗
    Codex Remote

    Browse a persistent project and conversation catalog without waking sessions. Explicitly continue in the original environment. Requires the custom server build; shell !commands are not routed.

  • ↗
    An optional second opinion

    Enable a separate critic to review an agent turn before completion is announced. Inspect its findings and review outcomes.

  • ↗
    Agent & account switching

    Change the harness or switch accounts in a running session, with conversation resumption where supported.

  • ↗
    Account pools

    Configure Claude and Codex accounts, project pinning, preferences, quota thresholds and rotation. Opt-in; provider terms apply.

  • ↗
    CLI session picker

    Start, attach, name, stop, resume and end sessions. Use scratch workspaces, recent targets, host selection, zsh completion and dev doctor.

  • ↗
    Repository workspaces

    Discover GitHub and Gitea repositories, browse project folders and follow clone progress. Inspect commits, push branches or push and create a pull request.

02 / 10 CAPABILITIES
Mac integration

A server with local instincts.

  • ↗
    Open files on your Mac

    Run open inside a container to open a file in its native Mac app. The listener maps server paths to your mounted workspace.

  • ↗
    Browser previews

    Run preview from the devbox to open a development server in your Mac browser, with the session’s port mapping.

  • ↗
    Finder over SMB

    Mount the workspace at /Volumes/dev. Browse, edit and move remote files in Finder; automount reconnects at login and network changes.

Explore 7 more capabilities+
  • ↗
    Clipboard images

    Paste a Mac screenshot into Claude Code, Codex or Grok. The clipboard bridge delivers the image to the remote agent.

  • ↗
    Files with ⌘⇧V

    Copy a file in Finder and paste it into the session’s shared /inbox. Larger files can go through the SMB mount.

  • ↗
    Native notifications

    Get notified when an agent finishes, needs an answer or permission, or gets stuck. Click through to the relevant Warp tab.

  • ↗
    Warp status & recovery

    See working, waiting and done states in terminal tabs. Restore exact sessions after Warp or macOS restarts.

  • ↗
    Mac setup checks

    Install the listener as a LaunchAgent, configure path mappings and use dev doctor to check the connection.

  • ↗
    Mac-native tools

    Optional Xcode MCP and mac-sync bridges let remote agents work with Xcode on your Mac. An OpenDesign bridge connects to its installed Mac runtime. Operations require the target Mac online and approved SSH.

  • ↗
    Mac usage telemetry

    Optionally include local Claude usage in the same statistics, with host filtering and project attribution where available.

03 / 8 CAPABILITIES
Dashboard & collaboration

See the work. Shape the work.

  • ↗
    Live web terminal

    Watch or take over a running session in your browser. Start sessions and manage workspaces from the same place.

  • ↗
    Usage & subscriptions

    Inspect plan usage by account, estimated costs, tokens and active time by project, with historical statistics.

  • ↗
    Scheduled prompts

    Set up cron prompts to run recurring agent work. Review and manage schedules in the dashboard.

Explore 5 more capabilities+
  • ↗
    Unpushed work

    Find branches and sessions with local changes or commits that have not reached the remote.

  • ↗
    Share a session

    Give a guest revocable, time-limited access to a live terminal and development-server previews, without access to your tailnet.

  • ↗
    Operations & activity

    Review notifications, activity, agent upkeep, account settings and host health without changing tools. Inspect notification decision history and send feedback on wrong or missing alerts.

  • ↗
    Accounts & model settings

    Inspect quota windows and reset times, connect provider accounts, configure models and context windows, and edit service settings.

  • ↗
    A host control room

    Inspect CPU, RAM, disk, network, uptime and backup health. Manual backup, update and reboot actions include confirmation flows.

04 / 6 CAPABILITIES
Phone & notifications

The important moments, closer.

  • ↗
    Native iOS companion

    View sessions, inspect what is running and manage approvals from an iPhone. Build the app with your Apple developer account; push and Live Activities require APNs setup.

  • ↗
    Live Activities

    Keep working, waiting and finished sessions visible on the Lock Screen and Dynamic Island.

  • ↗
    SSH & database approvals

    Approve or reject SSH requests and production database writes from the phone. Unlock the host vault from the app.

Explore 3 more capabilities+
  • ↗
    Push & priority alerts

    Use APNs or Pushover for phone notifications. Mark a session important when it needs a louder alert.

  • ↗
    Your connection

    Connect over Tailscale, or configure Cloudflare Tunnel and Access for access outside the tailnet.

  • ↗
    More of the workspace, on iPhone

    Browse overview, statistics, AI limits, hardware, folders and activity. Inspect terminal/session actions and run, toggle or delete schedules; create and edit schedules on the web.

05 / 9 CAPABILITIES
Access & control

Agent autonomy, human decisions.

  • ↗
    Encrypted host vault

    Store secrets in an encrypted vault on the host and unlock it through the dashboard or iOS app. A control-plane restart locks the vault while sessions continue; iOS can alert you to unlock it.

  • ↗
    SSH key broker

    Agents request SSH access with a reason. A human approves; the session gets an ssh-agent socket instead of a private key file.

  • ↗
    Scoped, revocable grants

    SSH approvals can be time-limited. Review and revoke active grants in the dashboard.

Explore 6 more capabilities+
  • ↗
    Production database proxy

    Route production database access through a host proxy, with a separate approval step for writes.

  • ↗
    Private networking

    The control plane binds to the Tailscale network. Optional Cloudflare Access provides another authenticated route.

  • ↗
    Documented threat model

    Read the security model and deployment guidance before connecting sensitive systems or credentials.

  • ↗
    Scoped database access

    Configure read, DML and migration scopes. Preview SQL impact without executing it, approve exact writes and inspect their audit/results. PostgreSQL and MariaDB have engine-specific setup paths.

  • ↗
    Database onboarding

    Prepare access plans, inspect preflight checks and approve resumable setup operations while database credentials remain host-side.

  • ↗
    Deployment operations

    Run configured Coolify deployments, optionally pin an exact commit, or sequence a deploy after an approved successful database write. Supported application restarts require approval.

06 / 10 CAPABILITIES
Infrastructure & upkeep

A workshop that keeps going.

  • ↗
    Bring your own VPS

    Run the control plane on Ubuntu, with Bun, SQLite and Docker. Your repositories and infrastructure stay under your control.

  • ↗
    InstaBox overflow

    Start fresh agents on rented InstaBox VMs, with a remote desktop/browser and pause/resume controls. Paid optional capacity; VPS-only integrations and session migration are not available.

  • ↗
    Agent updates

    Nightly Claude maintenance supports safe pane restarts and conversation resume. Provider-specific controls manage other runtimes; Antigravity updates with the session image.

Explore 7 more capabilities+
  • ↗
    Deploys after CI

    Use the included automation to deploy main after successful CI. Configure it for your own installation.

  • ↗
    Resource limits & health

    Set per-session memory limits and inspect machines, storage and resource history in the dashboard.

  • ↗
    Backups & restore

    Borg backups and CLI backup/restore support recovery of volumes, secrets and the database.

  • ↗
    Storage housekeeping

    Recovery-verified storage cleanup and monitoring help keep the host maintainable.

  • ↗
    External watchdog

    Optional external monitoring and a watchdog can detect control-plane outages. Integrates with Beszel and Uptime Kuma.

  • ↗
    Health checks & rollback

    The optional CI deployment workflow includes post-deploy health checks and rollback. Configure monitoring and backup targets for your own host.

  • ↗
    Memory & storage protection

    Optional memory/OOM guards, disk budgets and cleanup that requires verified offsite archives support recovery-conscious maintenance.

54 source-backed capabilities. Optional integrations need their own setup.

Your next workshop
is one server away.

Open source under Apache 2.0. Bring a VPS and the agent accounts you already use.

A RUNNING START, FOR YOUR AGENT

Bring the plan.
Let your agent do the setup.

Choose your starting point. Copy a tailored prompt into your coding agent. It will inspect your environment and work from the real install guides.

01 / HOW WILL YOU USE DEVBOX?
02 / ADD THE BRIDGES YOU WANT
03 / BRING YOUR AGENTS
Ubuntu VPS + Tailscale + a Mac + your agent account.

This page only prepares text. Setup begins in the agent where you paste the prompt.

Ready to make it yours.
Is this a hosted service?

No. devbox runs on infrastructure you operate. You manage the server, accounts and optional integrations. There is no devbox subscription; your server and provider costs still apply.

Can I use it without a Mac?

The dashboard works in any browser on your tailnet. The CLI, native notifications, clipboard bridge, SMB automount and open/preview integration are designed for macOS.

Can I run several agents on the same repo?

Yes. Each session gets its own git worktree, branch, container and port range. Review and integrate their changes through your usual Git workflow.

What should I know before connecting credentials?

Read the security model. devbox provides access controls, but agents execute code on your infrastructure. Account pooling is optional and subject to your providers’ terms.