Skillget

OpenRod

mcp
Security Audit
Warn
Health Warn
  • License — License: Apache-2.0
  • Description — Repository has a description
  • Active repo — Last push 0 days ago
  • Low visibility — Only 5 GitHub stars
Code Warn
  • process.env — Environment variable access in .github/scripts/identity-check.js
Permissions Pass
  • Permissions — No dangerous permissions requested

No AI report is available for this listing yet.

SUMMARY

One-click sandboxes for AI agents, with egress policy, MCPs, skills and audit. Built on NVIDIA OpenShell.

README.md

OpenRod

One-click sandboxes for AI agents, built on NVIDIA OpenShell.
Create sandboxes, edit policy, and open agent sessions from one place, running on your own machine.

CI
npm
License

✨ What you can do
📦 Sandboxes & templates Create, manage and build image templates
💻 Agent sessions Open in the browser, your terminal, VS Code or Cursor
🛡️ Network policy Edit egress rules and policy templates
🔌 MCP servers & Skills Bring your own into any sandbox
📜 Activity Review what happened inside a sandbox
🌐 Remote hosts Run a persistent gateway on a Linux box over SSH, so work continues while your laptop sleeps

🚀 Quick start

You'll need

  • Node.js 22.13+
  • macOS (Apple Silicon) or Linux
  • OpenShell 0.1.2 with a local gateway
  • Docker, running: Docker Desktop on macOS (brew install --cask docker-desktop, then open it once) or Docker Engine on Linux. OpenRod builds sandbox images with it, including for Quick setup.
  • OpenSSH and OpenSSL

1. Install and start Docker (on Linux, install Docker Engine instead)

brew install --cask docker-desktop && open -a Docker

2. Install OpenShell (pinned to the supported release)

curl -LsSf https://raw.githubusercontent.com/NVIDIA/OpenShell/main/install.sh | OPENSHELL_VERSION=v0.1.2 sh

3. Run OpenRod

npx openrod --open

4. Open the link it prints

OpenRod console (open this link): http://127.0.0.1:4600/?token=<secret>

5. Connect your gateway. Go to Sandboxes → New sandbox → This computer, and you're in.

[!WARNING]
Treat that link like a password. Anyone who has it while OpenRod is running can use your gateway credentials.

CLI options & install globally 
npm install -g openrod
openrod --open

--port <number>  HTTP port, 1–65535 (default: 4600)
--host <host>    Loopback only: 127.0.0.1 (default), localhost, or ::1
--open           Open the console in your default browser
--no-open        Do not open a browser (default)
--help, -h       Show help
--version, -v    Show the installed version

If openshell isn't on your PATH, set OPENSHELL_BIN to its full path. Gateway registrations are read from ~/.config/openshell/gateways/<name>/ (only HTTPS/mTLS); you never paste keys into the browser.

How the token link works

Every start generates a new random secret. The page stores it in an HttpOnly cookie and reloads without the token in the URL, so a bookmark of http://127.0.0.1:4600/ keeps working until the console restarts. After a restart, or in another browser, copy the new link from your terminal.

🧭 Opening a sandbox

Open in How it works
Browser xterm.js session in a new tab
Terminal macOS Terminal or Linux x-terminal-emulator over SSH, a new session, or attach
VS Code Shown on every sandbox; the first open allows VS Code's server download for that sandbox
Cursor Shown when Cursor is one of the sandbox's agents

Details: docs/opening-sandboxes.md

🌐 Remote SSH hosts

Run a persistent second gateway in Docker on a Linux machine you reach over SSH. Your local gateway is never reconfigured.

  1. New sandbox → Where should it run? → Remote machine
  2. Pick an SSH alias and click Connect
  3. Sandboxes and templates now show Local and SSH · host-alias side by side

Needs: a Host alias in ~/.ssh/config, a Linux amd64/arm64 host with rootful Docker, and Python 3.

📖 Full guide, offline runtime upload and reconnecting: docs/remote-hosts.md

🛠️ Troubleshooting

Symptom Fix
No SSH hosts Add a concrete Host my-host entry to ~/.ssh/config, then refresh
Host key or auth rejected Run ssh my-host yourself and verify the host
Docker isn’t running or Local Docker is required to build images Install or start Docker on this computer (Docker Desktop on macOS, Docker Engine on Linux), then click Try again
Docker missing or inaccessible on the SSH host Install Docker Engine and grant the SSH user socket access
Local gateway missing Start and register it with the OpenShell CLI (HTTPS/mTLS only)
Sandbox not Ready Inspect its conditions in the console

More: docs/remote-hosts.md#troubleshooting

💾 What gets saved

OpenRod keeps config in ~/.config/openshell and state in ~/.local/state/openshell-console. Activity history and webhook credentials are not encrypted.

📖 Full list of files and effects: docs/data-and-state.md

🔒 Security

  • Your authority, your machine. OpenRod can do whatever your gateway credentials allow. Keys stay on the server and never reach the browser.
  • Loopback only. No login and no multi-user support. Don't proxy it or expose it on a LAN.
  • Per-launch token. Every request, stream and WebSocket needs the HttpOnly cookie.
  • Local data is not a vault. Protect your disk and backups.

Full threat model and vulnerability reporting: SECURITY.md

🧰 Development

cd ui
npm ci
npm run dev     # Vite dev server
npm test        # server and library tests
npm run build   # production frontend

See CONTRIBUTING.md · docs/architecture.md · ui/SETUPS.md

Apache-2.0 · Third-party notices in ui/THIRD_PARTY_NOTICES.md

OpenRod is an independent community project, not affiliated with, endorsed by, or supported by NVIDIA. NVIDIA and OpenShell are trademarks of NVIDIA Corporation.

Reviews (0)

No results found