OpenShell
OpenShell is a self-hosted runtime that lets autonomous AI agents run in isolated sandboxes with set limits on files, network, and credentials for developers and technical teams.
What it is good for
- Keeping AI agents from reading private files or secrets
- Setting limits on which websites an AI agent can reach
- Running AI agents in isolated sandboxes on your own machine
- Reviewing policy changes before an agent gains new access
At a glance
- Who it is for
- Setup
- Guided command-line setup
Level 4 of 5. You copy and paste commands into a terminal by following the instructions. Comfortable territory for vibe coders.
- Cost
- Free and open source
- Type
- Agent app
- Tasks
- Works with
- Docker, Podman, OpenCode, OpenRouter, Kubernetes, Helm
Momentum
- Rank this week
- Not ranked (last #15, week 43, 2026)
- Best rank
- #6 week 40, 2026
- GitHub stars
- 20,937
GitHub numbers as of Nov 2, 2026. Updated weekly.
On Hacker News
- OpenShell, A safe, private runtime for fleets of autonomous AI agents 508 points, 218 comments, Oct 22, 2026
Ranking history
Official links
Setup steps are on the official pages. We do not repeat them here, since they change.
Questions
- Is OpenShell free?
- Yes. It is free and open source (Apache-2.0 license).
- Do I need to know how to code to use OpenShell?
- You do not need to write code, but setup means copying and pasting commands into a terminal by following its instructions.
- What does OpenShell work with?
- According to its own documentation, it works with Docker, Podman, OpenCode, OpenRouter, Kubernetes, and Helm.
- What is OpenShell good for?
- Keeping AI agents from reading private files or secrets, setting limits on which websites an AI agent can reach, running AI agents in isolated sandboxes on your own machine, and reviewing policy changes before an agent gains new access.
Similar agents
- rtk
rtk is a command-line proxy that shrinks the output of developer commands before an AI coding agent reads it, to cut token costs.
- goose
goose is an agent app that runs on your computer and handles coding, research, writing, and automation tasks for developers and power users.
- herdr
herdr is a terminal app that keeps your coding agents running in the background and shows which ones need your answer for developers running several coding agents.
- Reasonix
Reasonix is a coding agent that reads a project, edits files and runs tests for developers working in a terminal, desktop app, browser or editor.
- OpenClaude
OpenClaude is a terminal coding agent that runs on many cloud and local model providers for developers who want one workflow.
- Crush
Crush is a terminal coding agent that works on your code with the AI model of your choice for developers who prefer the command line.