| title | Supported Agents |
|---|---|
| description | AI agent frameworks and runtimes compatible with OpenShell sandboxes. |
| keywords | Generative AI, Cybersecurity, AI Agents, Sandboxing, Claude, Codex, Cursor |
| position | 5 |
The following table summarizes the agents that run in OpenShell sandboxes. Most agent sandbox images are maintained in the OpenShell Community repository. Agents in the base image are auto-configured when passed as the trailing command to openshell sandbox create.
| Agent | Source | Default Policy | Notes |
|---|---|---|---|
| Claude Code | base |
Full coverage | Works out of the box. Requires ANTHROPIC_API_KEY. |
| OpenCode | base |
Partial coverage | Pre-installed. Add opencode.ai endpoint and OpenCode binary paths to the policy for full functionality. |
| Codex | base |
No coverage | Pre-installed. Requires a custom policy with OpenAI endpoints and Codex binary paths. Requires OPENAI_API_KEY. |
| GitHub Copilot CLI | base |
Full coverage | Pre-installed. Works out of the box. Requires GITHUB_TOKEN or COPILOT_GITHUB_TOKEN. |
| NemoClaw | NemoClaw | Blueprint-managed | OpenShell-backed agent stack. Follow the NemoClaw repository for setup. |
| Ollama | ollama |
Bundled | Run cloud and local models. Includes Claude Code, Codex, and OpenCode. Launch with openshell sandbox create --from ollama. |
For base image details and --from usage, refer to Sandboxes.
For a complete support matrix, refer to the Support Matrix page.