AI product Open source · Apache-2.0

OpenShell

OpenShell is an open-source runtime from NVIDIA for running fleets of autonomous AI agents in isolated sandboxes. It lets agents read files, install packages, call APIs, and use credentials while enforcing declared filesystem, process, and network policies.

View repository Visit site

Overview

Each agent runs in a sandbox where kernel-level controls govern file access, system calls, and network connections. OpenShell also uses formal verification to review policy changes before approval, flagging newly permitted access such as connections to additional hosts with credentials or calls to new API methods. Credentials are withheld from agents and added only to requests bound for approved endpoints. The project provides a CLI, local gateway, sandbox lifecycle management, policy tooling, inference-provider routing, Kubernetes deployment, extensibility APIs, and Python, TypeScript, Go, and Rust SDKs.

OpenShell supports Linux, macOS on Apple Silicon, and experimentally Windows through WSL 2, with Docker, Podman, or host virtualization. It is licensed under the Apache License 2.0 and collects configurable anonymous operational telemetry.