---
title: "Host agent work · intentic"
description: "Run the sandbox on a server you own. You approve installed software, connect through a private tunnel and keep usage data in the sandbox."
url: "https://intentic.dev/features/host/"
---

Host

# Host the work. Keep control.

A sandbox is a Docker container on your laptop, desktop or server. Move it to a server so agents can keep working when your laptop is off.

[Create your workspace](https://app.intentic.dev)[Open the live workspace](https://intentic.dev/demo/)

acme-shop · /sandbox

![The sandbox hub: the acme-shop sandbox shown online with its installed version and its own URL, beside the list of everything it holds: environment, secrets, agent account, extensions, access, personas and computers.](https://intentic.dev/_astro/sandbox-overview.CoqweDaq_Z1UTjLH.webp)

- No code

 the platform stores no source, prompts or credentials
- MIT

 all of intentic is open source, platform included
- No open ports

 the sandbox makes a private outbound connection

## It runs on hardware you own

A private tunnel connects your browser to the sandbox. On a server, it keeps running without you.

Your browser

Chat, files, editor, terminal

your browser connects directly through a private tunnel

Your machine

Sandboxes, repos, credentials, capabilities

intentic platform

Stores your identity and sandbox URL. Does not handle commands or files.

## You control what is installed

A Dockerfile defines the sandbox's installed software. The agent can propose a change, but it waits for your approval before applying it.

acme-shop · /sandbox/environment

![The sandbox Environment tab: an overlay Dockerfile diff awaiting review, adding an imagemagick install, with Reject and Approve buttons.](https://intentic.dev/_astro/sandbox-environment.Ct3OJmq0_25cyzX.webp)

## See usage where it happens

The sandbox records the tokens and cost of each turn. The usage stays in your own ledger because the AI account is yours.

acme-shop · /sandbox/usage

![The sandbox Usage tab: a stacked spend-per-day chart split by Claude Code and Codex, with cost broken down by model and by agent.](https://intentic.dev/_astro/sandbox-spend.DRv5wwn2_12Dsj3.webp)

## What the platform actually holds

It stores your identity, sandbox URL and teammate access. It does not store your code, keys or transcripts.

### Stays inside your sandbox

- Your code and repos
- Every credential and token
- The agent's transcripts
- The container and its image

### All the platform holds

- Your identity (Google sign-in)
- The sandbox's name and URL
- Billing state
- Grants to invited teammates

Stored records use AES-256-GCM encryption. The product has no feature that can decrypt them.

## One sandbox, several people

The owner installs the tools; invited teammates share the sandbox, each signed in as themselves.

- Invite people by email. The sandbox enforces their access, not just the interface.
- Teammates can chat, work, review and open the web apps running in the sandbox.
- Removing someone's access takes effect immediately.

Y

You Owner

installs tools · connects systems · full control

S

Sam Teammate

chats, works & reviews · opens sandbox apps

A

Ada Teammate

chats, works & reviews · opens sandbox apps

each over its own private tunnel

one specialized sandbox

release-captain · on the owner's machine

running

[Guide Where does your code go when you use a cloud coding agent? A straight answer, the approaches that are not this product included.](https://intentic.dev/guides/where-your-code-goes-with-cloud-coding-agents/)

[Next Run → Many agents, one board](https://intentic.dev/features/run/)

[Create your workspace](https://app.intentic.dev)[Read the quickstart](https://intentic.dev/docs/quickstart/)