NVIDIA/OpenShell

Quickstart

You need Linux, macOS on Apple Silicon, or Windows with WSL 2 (experimental), plus Docker, Podman, or host virtualization. See the Support Matrix for details.

The installer sets up the CLI and a local gateway. The default sandbox image is minimal Ubuntu with no agent installed. To run a real agent, follow Run Your First Agent: it runs OpenCode against a free OpenRouter model and shows how to approve new access as the agent needs it.

curl -LsSf https://raw.githubusercontent.com/NVIDIA/OpenShell/main/install.sh | sh
openshell sandbox create --name demo

How It Works

OpenShell governs what agents can do in two ways: it instruments the kernel to enforce policy on every file access, system call, and network connection at runtime, and it uses formal verification to check what a policy change would allow before it is applied.

See Architecture for how the gateway, supervisor, and sandbox fit together.

• Kernel-level enforcement. Each agent runs in an isolated sandbox. Kernel controls confine which files it can access and which system calls it can make, and every network connection passes through a po
• Formally verified policy changes. Before a policy change is approved, OpenShell uses formal verification to flag risky new access it would grant, such as reaching a new host with credentials or callin

Explore Further

• Sandboxes: images, runtimes, GPUs, and lifecycle.
• Policies: filesystem, network, and process rules, with the advisor and prover for reviewing changes.
• Providers: credentials that work only at approved endpoints, including inference.
• Gateways: the control plane for sandboxes, policy, and access.
• Kubernetes: deploy the gateway with Helm. Your CNI must enforce NetworkPolicy.
• Extensibility: middleware, interceptors, and compute drivers.
• Tutorials: step-by-step policy and agent walkthroughs.
• Prerelease and development builds: try an upcoming release or the latest commit on main.

SDKs

SDKs connect applications to an OpenShell gateway. They do not install the CLI. Use the same OpenShell release for the SDK and the gateway when possible.

• Python — uv add openshell — README
• TypeScript — npm install @nvidia/openshell-sdk (GitHub Packages) — README
• Go — go get github.com/NVIDIA/OpenShell/sdk/go@latest — README
• Rust — cargo add openshell-sdk --git https://github.com/NVIDIA/OpenShell --tag — Installation and usage

概述

OpenShell is the safe, private runtime for fleets of autonomous AI agents. Agents are most useful when they can read files, install packages, call APIs, and use credentials. OpenShell gives them that capability without giving them unrestricted access to your data, secrets, or network. You declare what each agent can touch in a policy, and OpenShell enforces it.