incus-spawn / site

# isx

> An AI agent in your terminal can read your API keys, tokens and SSH keys. isx gives each agent a full Linux workstation of its own instead, branched instantly from a template you prepared once. On it the agent has full autonomy, while your computer stays out of its reach; in it there are no credentials, because a transparent proxy on your host adds the accounts you assign it, such as its own GitHub identity, to its requests as they leave. Free and open source, light enough for a laptop, on Linux and macOS.

A branch is to a template what a git worktree is to a repository, except that the working copy is the whole machine, toolchain, dependencies and running services included; it is instant and starts ready to work. It is an Incus system container by default, or a KVM virtual machine (`--vm`) for the strongest isolation: a sandboxed workstation, not a sandboxed process on your own machine or an application container with a fixed set of tools. The agent's work comes back as commits through a git remote isx manages, so you review an immutable commit, never a directory the agent can still change. isx works with Claude Code, Codex CLI, Pi, GitHub Copilot CLI and other coding agents, and with everyday tools like `gh`, `git` and `curl`, unchanged. An agent on your host can drive isx over MCP (`isx mcp`): branch machines from templates you approved, run commands in them, and delegate whole tasks to the agents inside. Install with `curl -fsSL https://isx.run | sh`, Homebrew, DNF, APT or JBang.

## Docs

- [Full documentation](https://isx.run/llms-full.txt): every page below as one Markdown file
- [Quick start](https://isx.run/docs#quick-start): install, one-time host setup, a first template and a first agent
- [Credential isolation](https://isx.run/docs#credential-isolation): how agents use their accounts with no credentials in their workstation
- [Branching](https://isx.run/docs#branching): creating workstations from templates, network modes, and fetching an agent's commits
- [Installation](https://isx.run/docs#installation): platforms, updating and uninstalling
- [Templates](https://isx.run/docs/templates): defining, building and rebuilding templates
- [Agents](https://isx.run/docs/agents): Claude Code, Codex CLI, Pi, Gemini CLI, Bob Shell and GitHub Copilot CLI, agent skills and environment notes
- [Tools](https://isx.run/docs/tools): built-in tools, and adding your own with YAML definitions
- [Configuration](https://isx.run/docs/configuration): files, credential accounts (several per service, chosen per instance) and caching
- [Delegating from an agent on your host (MCP)](https://isx.run/docs/mcp): `isx mcp`, approved templates, Claude Code and Codex workers, delegated tasks, a coordinator in an instance
- [Driving `isx mcp` from a program](https://isx.run/docs/mcp-protocol): structured results, task states, notifications, idempotency keys, activity counters
- [Driving isx from other tools](https://isx.run/docs/integrations): orchestrators such as Orca and herdr, with an instance per task, and host routes to a controller of your own
- [CLI reference](https://isx.run/docs/cli): every command, and the stable output formats for scripts
- [Compared with other sandboxes](https://isx.run/docs/sandboxes): a sandboxed process, workload or workstation, and where isx and the other agent sandboxes sit
- [FAQ](https://isx.run/docs/faq): URL clicks in Codex, the clipboard, and why there is no read-write project mount

## Optional

- [Why full system containers?](https://isx.run/docs/sandboxes#why-full-system-containers)
- [Source code on GitHub](https://github.com/Sanne/incus-spawn)
- [Issues](https://github.com/Sanne/incus-spawn/issues)