reef

Contained AI agents on your servers.

Ask your agent

Read https://reef.clawbits.ai/llms.txt and help me start with reef.

One reviewed file decides what an agent can reach. reef holds every agent to it, in its own microVM on your own servers. Approve the file once, then create as many agents from it as you need.

DNSagentopenrouter.aigithub.comapi.openai.com

Anything not listed is blocked

A role lists what an agent may reach. The rest is refused at DNS, outside the guest.

agent$MSB_KEYhostsk-a1f3$MSB_KEYopenrouter.aisk-a1f3

Keys stay on the host

The VM holds a placeholder. The key is added on the way out, to one host. Rotate it live.

hermes.tomlapprovedhermes-2hermes-1hermes-3

Approve once, launch many

Review a role once. Every agent created from it inherits the policy, no approval per agent.

SSH CAserveanabobana-hermes

Terminals through your SSH CA

reef adds no auth of its own. A certificate from your SSH CA opens only the agents you own.

rolereef://vault/api-keyVaultAWS1Passwordhostsk-a1f3

Keys from your own store

Roles hold references. Values come from Vault, AWS or the store you already run.

roledatahermes v1hermes v2secretsportsvolumeimage

Safe updates

A role change builds the new VM and swaps only when it is ready. Volumes carry over.

Install it yourself

curl -fsSL https://install.microsandbox.dev | sh
curl -fsSL https://reef.clawbits.ai/install | sh

Go deeper