Skip to content
moatboxdocs
Log in
All pages

moatbox documentation

moatbox runs coding agents inside private virtual machines called spaces and records what they do.

moatbox is a hosted service at https://app.moatbox.dev. You run coding agents (Claude Code, Codex, opencode) inside spaces. A space is a Firecracker microVM with its own disk, running on moatbox servers or on a server your team links. You reach it from the dashboard, over SSH, from your editor, or from the moatbox CLI.

Main ideas

Space. One virtual machine with a 50 GB disk, sized from 2 vCPU and 2 GB of memory up to 16 vCPU and 32 GB. A space goes to sleep after a stretch with no work and keeps its disk while it sleeps, and its memory unless saving or restoring the memory fails. Opening it, starting a run or connecting over SSH wakes it. See Spaces.

Run. One agent working on one task inside a space. You start a run from the space's Agents page with New agent, and the run page shows its timeline. See Running agents.

Gateway and approvals. Integration keys stay in the moatbox gateway instead of the space. The gateway holds risky actions for a person to approve or deny, and denies one that nobody decides on within five minutes. A delayed send goes out when its window ends instead, and a team rule can auto-approve chosen kinds of action. See Approvals and Integrations.

Environment. A team-level template for new spaces: repositories to clone, variables, secret files, a setup script, an AI profile and which integrations reach the space. Each save makes a new version. Running spaces keep their version until you upgrade them or turn on Apply changes to running spaces. See Environments.

Connect. Every space answers on the moatbox SSH gateway under the alias moatbox-<space>. The dashboard's Open in… menu prints the setup for your terminal or editor, and a space can also join your Tailscale tailnet. See Connect to a space.

All pages

Start

Spaces

  • Spaces: sizes, states, sleep and wake, auto-stop, time limits, trash, forks.
  • Environments: what new spaces start with, versions, the default environment, safe mode.
  • Connect to a space: SSH gateway, Open in…, moatbox login, CLI commands, Tailscale.

Agents

Keep and undo

Build on moatbox

Teams and CI

For agents

You can read every page as Markdown: add .md to its URL. /llms.txt lists all pages with their Markdown links, and /llms-full.txt holds every page in one file.