Your machine can be the agent’s machine.
Point an agent at a Linux box you own — the mini-PC on your desk, the workstation in the office. One command installs a signed runner. It dials out on port 443, shows up online in about a minute, and from then on the agent’s shell, files, and git run on your hardware, in your real repo, with your real toolchain.
- Outbound only
- The runner initiates every connection — outbound WSS on port 443. Nothing ever connects in to your machine. No port forwarding, no static IP.
- Your files are the state
- No snapshots to manage — the workspace lives on your disk and persists between runs. Long jobs keep running through a page refresh or a WiFi blip.
- Compute is yours, so we don’t meter it
- Runs on your machine use none of your sandbox-compute minutes. You pay for the model, not the machine.
- Offline is honest
- Machine unreachable? The run falls back to a managed sandbox and says so — or fails fast in strict mode. Your choice per agent.
one command — online in about a minute, and runs here aren’t metered.
Managed sandboxes are right-sized and metered. Your machine is neither — every core, all your RAM, your GPU. Runs on it use none of your sandbox-compute hours.
Web reads from your network
Switch it on, and when your agent reads a page it reads it through your machine, from your IP — which matters for sites that turn away datacenter traffic. Only agents you bound to this machine and switched on can do it: never another customer, never a guest, and there is no proxy pool — your connection carries your agents’ reads and nothing else. Reads are paced like a person, one connection per site. Web searches still run from our servers. And every read is labeled in the run timeline: via your machine or via cloud.
paced like a person, one connection per site
web searches run here
The same page, fetched twice — sites that turn away datacenter traffic answer your address.
Your cursor, your IP.
The same idea, with a full browser. Pages render on your hardware, on your network, streamed live to your workspace — and you can take the cursor whenever a human needs to click.
Your machine, in your pocket.
The workspace runs in any browser — including the one on your phone. Hand your agent a job by voice on the way out the door and it runs on your box, not a rented sandbox. Ask how it’s going and get an answer from the live run. Watch its terminal — your own tmux session, your own tools, one window over. A signal dip reattaches to the same shell, and closing the tab stops nothing.
recreated from live sessions · timings compressed
On paid plans. Ubuntu 22.04/24.04 or Debian 12+, amd64 and arm64. Revoke any time from the console — one click rotates the credential and drops the tunnel.