Skip to main content
Install
Beta

A portable open-source operating system for agents. ~6 ms coldstarts, 32x cheaper than sandboxes. Powered by WebAssembly and V8 isolates.

Works with
PiPi
Claude CodeClaude Code*
CodexCodex*
OpenCodeOpenCode*
AmpAmp*
*Coming Soon
agents.ts
import { AgentOs } from "@rivet-dev/agent-os-core";

const vm = await AgentOs.create();

// Create an agent session
const { sessionId } = await vm.createSession("pi");

// Stream events (tool calls, text output, etc.)
vm.onSessionEvent(sessionId, (event) => console.log(event));

// Send a prompt and wait for the response
await vm.prompt(sessionId, "Write a Python script that calculates pi");
Read the Docs
View Package Registry

A new operating system architecture.

Built from the ground up for lightweight agents. agentOS provides the flexibility of Linux with lower overhead than sandboxes.

WebAssembly

WebAssembly + V8 Isolates

High-performance virtualization without specialized infrastructure. The same battle-hardened isolation technology that powers Google Chrome.

Battle-tested technology

You're probably using this technology right now to view this page. Bring the same power to your agents. No VMs, no containers, no overhead.

Performance benchmarks

agentOS vs. traditional sandboxes.

Cold startWhat's measured: Time from requesting an execution to first code running.

Why the gap: agentOS boots a lightweight VM inside the host process. No network hop, no disk image. Sandboxes must boot an entire environment, allocate memory, and establish a network connection before code can run.

Sandbox baseline: E2B, the fastest mainstream sandbox provider as of March 30, 2026.

agentOS: Median of 10,000 runs (100 iterations x 100 samples) on Intel i7-12700KF.

Lower is better

agentOS
6.1 ms516x faster
Fastest sandbox
3,150 ms

Workload: Pi coding agent session with MCP servers and mounted file systems

Memory per instanceWhat's measured: Memory footprint added per concurrent execution.

Why the gap: Lightweight VMs share the host process. Each additional execution only adds its own heap and stack. Sandboxes allocate a dedicated environment with a minimum memory reservation, even if the code inside uses far less.

Sandbox baseline: Daytona, the cheapest mainstream sandbox provider as of March 30, 2026. Default sandbox: 1 vCPU + 1 GiB RAM.

agentOS: ~131 MB for a full Pi coding agent session with MCP servers and file system mounts.

Lower is better. Sandboxes reserve idle RAM per agent.

agentOS
~131 MB8x smaller
Cheapest sandbox
~1024 MB

Cost per execution-secondWhat's measured: server price per second / concurrent executions per server

Why it's cheaper: Each execution uses ~131 MB instead of a ~1024 MB sandbox minimum. And you run on your own hardware, which is significantly cheaper than per-second sandbox billing.

Sandbox baseline: Daytona, the cheapest mainstream sandbox provider as of March 30, 2026. Default sandbox: 1 vCPU + 1 GiB RAM at $0.0504/vCPU-h + $0.0162/GiB-h.

agentOS: ~131 MB baseline per execution, assuming 70% utilization (industry-standard HPA scaling threshold). Select a hardware tier above to compare.

Lower is better. Assumes one agent per sandbox, needed for isolation.

agentOS
$0.00000058/s32x cheaper
Cheapest sandbox
$0.000018/s

Measured on Intel i7-12700KF. Cold start baseline: E2B, the fastest mainstream sandbox provider as of March 30, 2026. Cost baseline: Daytona, the cheapest mainstream sandbox provider as of March 30, 2026 (1 vCPU + 1 GiB default). Cost assumes 70% utilization on self-hosted hardware vs. per-second sandbox billing. Benchmark document

Meet your agent's new operating system.

Embed in your backend.

Your APIs. Your toolchains. No complex agent authentication needed. Just JavaScript functions or hooks.

Mount anything as a file system.

S3, SQLite, Google Drive, or the host file system. No per-agent credentials needed.

Agents think in files. agentOS lets you expose any storage backend as a familiar directory tree. The host handles credential scoping, so agents never see API keys or secrets.

Granular security.

Fully configurable network and file system security. Control rate limits, bandwidth limits, and file system permissions. Set precise CPU and memory limitations per agent.

Your laptop, your infra, or on-prem.

Railway, Vercel, Kubernetes, and more. Deploy wherever your code already runs.

agentOS is just an npm package. No vendor lock-in, no special infrastructure. Your agents run in your stack, on your terms.

RivetRailwayVercelKubernetesECSLambdaGoogle Cloud Run

Agents that just work.

Every agent deserves a runtime that understands it.

Supports Claude Code, Codex, OpenCode, Amp, and more

Run any coding agent with a single unified API. Swap agents without changing your infrastructure.

Simple sessions API

Create, manage, and resume agent sessions with a few lines of code. State persists automatically.

Docs
Coming Soon

Embedded LLM metering

Track token usage, cost, and latency per agent. No per-agent API keys needed. The host handles credential scoping.

Docs

Universal transcript format

One transcript format across all agents. Powered by ACP. Compare, debug, and audit any session.

Docs

Automatic transcript persistence

Every conversation is saved. Replay sessions, audit behavior, and build on past context without extra code.

Docs

Infrastructure that disappears.

Deploy anywhere. Scale to anything. Forget about servers.

Runs on Rivet Cloud or your infra

Managed hosting or self-hosted. Same API, same experience, your choice of where it runs.

Docs

Easy to deploy on prem

A single npm package. No Kubernetes operators, no sidecar containers. Just install and run.

Docs

Low overhead

No VMs to boot. No containers to pull. Start in milliseconds with minimal memory footprint.

Mount anything as a file system

S3, GitHub, databases. No per-agent credentials needed. The host handles access scoping.

Docs

Extend with a sandbox when needed

agentOS handles most tasks, but pairs seamlessly with sandboxes for heavier workloads.

Docs

Orchestration without complexity.

Coordinate agents, humans, and systems out of the box.

Authentication

Authenticate agent connections with your existing auth model. Validate credentials and attach user state on connect.

Docs

Webhooks

Receive external events and route them into agents with lightweight HTTP handlers and durable queues.

Docs

Multiplayer & Realtime

Multiple clients can observe and collaborate with the same agent environment in real time.

Docs

Agent-to-Agent

Let agents delegate work to other agents through host-defined tools and shared orchestration flows.

Docs

Workflows

Chain agent tasks into durable workflows with retries, branching, and resumable execution built in.

Docs

Queues

Serialize agent work with durable queues for backpressure, async processing, and ordered execution.

Docs

SQLite

Give agents access to a persistent SQLite database through host tools for structured state and queryable memory.

Docs

Security without compromise.

The same isolation technology trusted by browsers worldwide.

Restrict CPU and memory granularly

Set precise resource limits per agent. No runaway processes, no noisy neighbors.

Docs

Programmatic network control

Allow, deny, or proxy any outbound connection. Full control over what your agents can reach.

Docs

Custom authentication

Bring your own auth. API keys, OAuth, JWTs. Agents authenticate on your terms.

Docs

Isolated private network

Each agent runs in its own network namespace. No cross-talk between tenants.

Docs

Powered by WebAssembly and V8 isolates

The same sandboxing technology behind Google Chrome. Battle-tested at planet scale.

Docs

agentOS Registry

Browse and install pre-built tools, integrations, and capabilities for your agents. From file systems to databases to API connectors.

Explore the Registry
After
Before
Unix Operators
agentOS Operators

Left: Unix timesharing, UW-Madison, 1978. Right: "Data flock (digits)" by Philipp Schmitt, CC BY-SA 4.0

From humans to agents

The operating system is changing for the next generation of software operators.

Learn more