Cloud agent sandbox with persistent filesystem and on-demand compute
Spend controls, budgets and approvals for AI agents
Stage
MVP
MVP
Founded
Not given
Not given
Based in
US
Not given
Pricing model
Paid
Freemium
Pricing
Compute: $0.015 per GiB-hour (approximately $0.000004167 per GiB-second, billed by the second). Storage: $0.02 per GiB-month for retained incremental RootFS data and memory checkpoints. Network ingress and egress currently free. Object-store GET and PUT requests free. New users receive $5 free credi
Free plan: $0 during early access with 2 seats and 3 agents. Planned paid plans: Builder at $49/month with 5 seats and 25 agents; Scale at $199/month with 25 seats and 250 agents. Self-hosting is free.
Key features
Automatic filesystem growth as storage fills
Pause compute without losing work or paying compute charges
Resume to same environment on demand
Access files while paused without waking compute
Public HTTP services with auto-resume capability
Command-line interface (s0 CLI) for agent-native workflows
Incremental checkpoints to avoid full filesystem copies
Scoped API keys and team-based access controls
On-demand file reads without downloading entire filesystem
Onchain allowances and epoch budgets
Escalation through reporting tree
Session keys with automatic expiration
Constitutional governance with veto windows
Declared flows and human gates
Slack and Telegram supervision
Visual org builder and workspace
Apache-2.0 open source contracts and SDK
Inference budgets for model and API calls
Integration with Coinbase AgentKit and Safe
What makes it different
Persistent filesystem across pause/resume without duplicating data
Pay only for compute time used; paused sandboxes have zero compute charges
Automatic filesystem growth so agents can install and persist unlimited tools
Same API for both human users and AI agents
Bounded blast radius: compromised agents can only spend remaining epoch allowance on whitelisted targets
Passkey root stays on user's device; cloud holds only scoped, expiring session keys
Fully self-hostable open protocol with Apache-2.0 licensing
Approval workflows follow real organizational structure, not smart contract code
No token or cryptocurrency knowledge required to use the cloud platform