NVIDIA OpenShell provides sandboxed execution environments for autonomous AI agents. Agents run with exactly the permissions they need and nothing more, governed by declarative YAML policies that prevent unauthorized file access, data exfiltration, and uncontrolled network activity.Documentation Index
Fetch the complete documentation index at: https://mintlify.com/NVIDIA/OpenShell/llms.txt
Use this file to discover all available pages before exploring further.
Quickstart
Install the CLI and create your first sandboxed agent in two commands.
How It Works
Understand the gateway, sandbox, policy engine, and privacy router.
Sandbox Policies
Declare filesystem, network, process, and inference constraints in YAML.
CLI Reference
Full reference for every command, subcommand, and flag.
Get running in two commands
Install OpenShell
Create a sandbox and launch an agent
Protection layers
OpenShell applies defense in depth across four policy domains:| Layer | What it protects | When it applies |
|---|---|---|
| Filesystem | Prevents reads/writes outside allowed paths | Locked at sandbox creation |
| Network | Blocks unauthorized outbound connections | Hot-reloadable at runtime |
| Process | Blocks privilege escalation and dangerous syscalls | Locked at sandbox creation |
| Inference | Reroutes model API calls to controlled backends | Hot-reloadable at runtime |
Explore by topic
Gateways & Sandboxes
Deploy gateways locally, on a remote host, or behind a cloud proxy.
Providers
Manage agent credentials — injected at runtime, never written to disk.
Inference Routing
Keep inference traffic private by routing to local or self-hosted backends.
Supported Agents
Claude Code, OpenCode, Codex, Copilot, and more work out of the box.
Community Sandboxes
Use pre-built sandbox images or bring your own container.
Tutorials
Hands-on walkthroughs from first sandbox to custom policies.
OpenShell is alpha software — single-player mode. One developer, one environment, one gateway. Multi-tenant enterprise deployments are on the roadmap. Expect rough edges.