hotcell is an Apache-2.0 agent-sandbox daemon and SDK for running isolated environments on owned hardware. Real provider keys stay on the host while the gateway gives each sandbox a revocable token with model allowlists, rate limits, and spend caps. Linux containers support kernel-enforced default-deny egress, and Apple VZ microVMs provide a hardware-isolated option on Mac.
Features
- Local agent sandboxes
- Host-side key vault
- Per-sandbox tokens and spend caps
- Container and microVM drivers
Use Cases
- Isolated coding-agent execution
- Self-hosted sandbox services
- Model spend control
- Protecting production credentials
FAQ
hotcell is an Apache-2.0 agent-sandbox daemon and SDK for running isolated environments on owned hardware. Real provider keys stay on the host while the gateway gives each sandbox a revocable token with model allowlists, rate limits, and spend caps. Linux containers support kernel-enforced default-deny egress, and Apple VZ microVMs provide a hardware-isolated option on Mac. Core capabilities include: Local agent sandboxes, Host-side key vault, Per-sandbox tokens and spend caps.
Common scenarios include: Isolated coding-agent execution, Self-hosted sandbox services, Model spend control.
