NVIDIA/OpenShell

Key features

• 01Kernel-level enforcement of file access, system calls, and network connections per agent sandbox
• 02Declarative policies for filesystem, network, and process rules
• 03Credentials injected only into requests to approved endpoints, never exposed to the agent
• 04Formal verification flags risky policy changes for human review before they apply
• 05Gateway control plane with Helm-based Kubernetes deployment
• 06SDKs for Python, TypeScript, Go, and Rust

Use cases

• Running coding agents that install packages and edit files without exposing your host machine
• Giving agents API access while keeping credentials out of their reach
• Deploying a shared agent gateway on Kubernetes with enforced network policies
• Reviewing and approving new access an agent requests before it is granted

Topics

FAQ

What is OpenShell?

A safe, private runtime that sandboxes autonomous AI agents, enforcing declared policies on files, system calls, and network access.

Is OpenShell free to use? What license does it have?

OpenShell is open source under the Apache-2.0 license. Check the license terms before using it in commercial products.

Is OpenShell still maintained?

Actively maintained. The last commit to OpenShell was on Oct 17, 2026.

What can I use OpenShell for?

Running coding agents that install packages and edit files without exposing your host machine Giving agents API access while keeping credentials out of their reach Deploying a shared agent gateway on Kubernetes with enforced network policies Reviewing and approving new access an agent requests before it is granted

Where can I get OpenShell?

The source code and installation instructions are on GitHub: https://github.com/NVIDIA/OpenShell