Let agents work.
Control what they can access.

View on GitHub Docs
CONTROL PLANE / LOCAL
WORKSPACE / 01Agent session
VM ACTIVE
OUTBOUND REQUEST / 0021
api.example.com
POST /v1/data
Policy says: ask before sending
Waiting for your decisionPENDING
INTERACTIVE EXAMPLE · NO REAL REQUEST IS SENT

A simple boundary.

An agent runs in a VM on your Linux KVM host. AutoMantle's gateway can allow, require approval for, or deny each outbound request.

The agent never sees real credentials.

AutoMantle replaces placeholder credentials with real credentials only when the request is allowed and the credential's scope permits it.

Use your preferred agent.

Run Claude Code, Codex, Cursor, Antigravity, OpenClaw, or another agent in an isolated Linux VM.