Free and self-hosted · Linux, macOS, and Windows

Let agents work.
Keep the keys.

Temporary, approved shell Sessions for AI agents on real Machines. No shared SSH credentials, no inbound ports, no VPN.

One Docker Compose stack. Unlimited members, Machines, and Agents.

Overview · Live topology
release-agentOperator

1 live Session

Deploy 2.4.042m left

Active Session

production-apiOnline

Linux · odyshell

2/2 Machines online1 live Session

No SSH keys handed to agents

OAuth approval in the browser

Every command attributable

One authority model

One Agent. One Machine. One expiring Session.

The agent asks through MCP. A Human approves in the browser. The Machine enforces the local ceiling.

01

Agent requests

The Agent selects a Machine, explains the purpose, and asks for 15 minutes to 24 hours.

02

Human approves

Standard Agents wait for explicit Organization approval. Operators can proceed without a new prompt.

03

Machine executes

Commands run through an outbound Client and appear with output in the Session timeline.

Traceability built in

See exactly what happened.

Open any Session to inspect who requested it, who approved it, which Machine was touched, every command, its output, and its exit state.

  • Human and Agent identities remain distinct
  • Operator promotion is explicit and revocable
  • Downgrading an Operator closes active Sessions

Deploy release 2.4.0

Session 8d3f...2a9c

Active
  1. Session requested

    release-agent · Operator

  2. Machine opened

    production-api · user odyshell

  3. Command completed

    $ pnpm deploy · exit 0

Made for agent tooling

MCP in. Shell out.

Agents discover Machines, request a Session, execute bounded commands, read output, and finish early using one canonical protocol.

agent.mcpOperator · production-api
session = odyshell.request_session({
  machineId: "production-api",
  durationSeconds: 3600,
  purpose: "Deploy release 2.4.0"
})

odyshell.run_command({
  sessionId: session.id,
  command: "pnpm deploy"
})

odyshell.finish_session(session.id)

Community infrastructure

Your control plane. Your data.

Run the complete product with Docker Compose on a workstation, homelab, private server, or VPS. Odyshell has no hosted tier, commercial limits, or required third-party services.

odyshell · self-hostedApache-2.0
git clone https://github.com/kapeka0/odyshell.git
cd odyshell
cp .env.example .env
docker compose up --build

Members

Unlimited

Machines

Unlimited

Agents

Unlimited

Give agents a shell, not your network.

Connect a Machine in minutes and keep every Session temporary, bounded, and visible.