Your repo and your tools
It works in the folder you choose, with the languages, packages and tools already installed there. There is no fresh container to set up first.
Your machine
Your machine can be the agent’s computer.
By default, an agent’s computer runs in our cloud. Install the runner on a Linux machine you own, and an agent works there instead, in your repo, with your tools. The runner only connects out, so there is nothing to open on your network.
The Auteryn workspace, recreated. The machine, the repo and the timings are made up.
What changes
It works where your work already is.
The agent does the same work it does in the cloud: it runs commands, edits files and uses a terminal. On your machine it does that in your repo, with your toolchain, on your network.
Files stay on the machine
What the agent writes lands on your disk and is still there on its next run. There are no snapshots to take or restore.
Your processor and memory
A cloud sandbox has up to 2 vCPUs and 4 GB of memory. On your machine, builds and tests run on your hardware, at a lower priority than your own apps.
Business and Enterprise
Web reads from your network
Turn it on for an agent and the pages it reads go out through your machine’s connection, which helps with sites that turn away cloud servers. Web searches still run from our cloud.
Every read in the run says which way it went.
Add-on
A browser on your machine
Install the browser add-on and the agent can drive a real browser on your machine, on your network. You watch it work and can take control.
$ sudo apt update && sudo apt install -y auteryn-runner-chromiumWhen the machine is off
Choose per agent: use a cloud sandbox, or don’t run. If a run moves to the cloud, the chat says so and offers to retry on your machine.
How it works
Set it up once. Choose it per agent.
Adding a machine takes one command on it. After that, moving an agent between our cloud and your machine is one setting.
Add a machine
Give it a name, point it at the folder the agent should work in, and choose Confined. Auteryn gives you an install command for that machine. Org owners and admins can add machines.
Run the command on the machine
It checks the installer’s hash, installs the runner from our signed package repository and starts it. The runner connects out over port 443, and the machine shows as online.
The command is shortened here. The other lines are the installer’s own.
Choose it for an agent
In the agent’s Computer settings, pick Your machine. From its next run, its commands, files and terminal are on your machine. A machine serves one agent at a time, and you can move it to another.
Safety
Your machine stays yours.
In Confined mode the agent works in one folder, can’t see the rest of your home directory, and reaches us over one outbound connection. You can take the machine back at any time.
- Outbound only
- The runner opens the connection, over port 443. Nothing on your machine listens for Auteryn, so there is no port forwarding and no static IP.
- Confined is the default
- The agent runs as its own restricted account and works in the folder you chose. The rest of your home directory, with your SSH keys, cloud credentials and dotfiles, stays invisible to it.
- No root, no local network
- The agent can’t become root, so sudo fails. Its commands can’t reach your router, a NAS or other computers on your network. The internet stays reachable.
- Signed and checked
- The install command checks the installer’s SHA-256 before it runs it, and the runner comes from our signed apt repository.
- Only your team’s agents
- Only internal agents can use a machine. Guest and customer conversations never read the web through it, and only the machine’s owner and org admins can run an agent that uses its browser.
- Take it back any time
- Remove the machine and its credential stops working, the connection drops, and any agent using it moves to a cloud sandbox. The credentials and working files agents left there are removed. Your workspace stays as it is.
Plans
On every paid plan.
Machines are for internal agents. Every plan, Free included, keeps our cloud sandbox for the agents you don’t move.
Free0machinesAgents run in our cloud sandbox.
Pro1machineWeb reads stay in our cloud.
Business5machinesPlus web reads from your network.
EnterpriseCustommachinesPlus web reads from your network.
What the machine needs
The same list Auteryn shows before you add a machine.
- Ubuntu 22.04 or 24.04, or Debian 12 or 13
- An amd64 or arm64 processor
- An account that can run sudo
- systemd running (WSL without systemd isn’t supported, and neither are containers)
- Outbound HTTPS (port 443)
Put an agent on your machine.
Start free in our cloud. Move an agent to your own machine on any paid plan.