Run agents like production, not like a demo.
Give your AI coding agents a safe place to work. Kiwi runs them in isolated sandboxes, keeps your secrets on your machine, streams every move live, and never loses a run.
Bring your own LLM — Anthropic, Codex, or Gemini · self-hosted · no credit card
git clone https://github.com/runkiwi/kiwiBuilt on a stack you already trust
Everything you need to actually trust an agent
Reviewed changes, secrets that stay home, contained runs, and nothing lost.
A second pair of eyes on every changeBring your own LLM
One agent writes the fix, another approves it. No blind auto-edits.
Your secrets stay yours
Credentials pulled from your machine only when needed — never written to the sandbox. Close your laptop; the run keeps going.
Runs that can’t run away
Isolated, network-locked sandboxes with hard cost caps. No runaway host — or bill.
Watch your agent think
Every plan, edit, and test — live, with token and cost counts. No black-box runs.
Never lose a run
Restarts resume from the last checkpoint, not from scratch. Retries never double-charge.
Submit, run, resume
From your terminal to a fixed codebase — in three moves.
Submit
Point the CLI at your repo, give it a goal. Kiwi takes it from there.
Run
A sandbox spins up. One agent fixes, another reviews — secrets pulled only when needed.
Watch & resume
Stream every step, review the diff, and never lose a run.
Preview of the live Actor–Critic timeline. The web console is a monitoring board today — task submission runs through the CLI.
Trigger Controls
Trigger system actions on the active sandbox.
Start a run in a few commands
Run the self-hosted daemon, then submit a task from the CLI with your own Anthropic key. No credit card, no cloud account required.
# Spin up the distributed Control Plane locally
# (PostgreSQL, NATS JetStream, MinIO, API server, and LLMO)
docker-compose up -d
# Or deploy the enterprise BYOC Runner in your VPC
./kiwi-runner --saas-url wss://api.runkiwi.dev \
--runner-token "your-org-token"# Bring your own Anthropic key (encrypted at rest)
export ANTHROPIC_API_KEY="sk-ant-..."
# Submit a task to the Control Plane
./kiwi -server "http://localhost:8080" \
-task "Fix division by zero in Divide()" \
-file demo_project/math_utils.go \
-test-cmd "go test ./demo_project/..."Safe by default, from the very first run
- Your secrets stay on your machine — pulled just-in-time over the reverse tunnel, cached only in the daemon’s memory for the run, and never written to the sandbox.
- Every run is network-locked (--network=none), so a rogue agent can’t phone home or reach your host.
- Your Anthropic key is encrypted at rest and only decrypted to make a call (AES-256-GCM).
- Each org gets its own walled-off space, with per-org limits and an audit trail of every task.
- Budget caps stop runaway spend before a job even starts.
Watch every run on one board
Follow each run's phase, spend, and secret cache across your isolated sandboxes in real time. The web console is a monitoring board today — task submission runs through the CLI.