Neura Market
Code On Incus logo

Code On Incus

Free

Give each AI agent its own isolated machine with root, Docker, and systemd. Active defense detects and stops threats automatically..

FreeFree tier
#Python
Type
Saas
Visit Website GitHub (465 stars)

About Code On Incus

Code On Incus (COI) is an open-source tool that provides isolated full-system containers for AI coding agents. Each container runs with root access, systemd, and Docker, allowing agents to operate as if on a real server—run services, manage packages, use cron—without affecting the host system. COI includes active defense that automatically detects and stops threats like reverse shells, credential scanning, and data exfiltration. Credentials (SSH keys, environment variables, Git tokens) remain on the host unless explicitly mounted. Supports multiple AI coding tools including Claude Code, opencode, and pi, with configurable profiles, permission modes, session persistence, and snapshot management. Built by developers for developers who want visibility and control over AI agent behavior.

Key Features

Full system container with root access, systemd, and Docker for AI agents
Active defense: automatic detection and blocking of reverse shells, credential scanning, and data exfiltration
Credential isolation: SSH keys, environment variables, and Git tokens stay on host unless explicitly mounted
Supports multiple AI coding tools: Claude Code, opencode, pi (Aider and Cursor coming soon)
Configurable profiles and permission modes (autonomous or ask-before-action)
Persistent dev environments that survive restarts and reboots
Session resume capability
Resource and time limits via profiles
Network isolation
Snapshot management for rollback

Pros & Cons

Pros
  • Free and open-source (MIT license)
  • Active security defense that automatically stops threats
  • Provides true isolation with system containers (Incus), not just Docker
  • Keeps host credentials safe from AI agent environments
  • Supports popular AI coding agents out of the box
  • Persistent storage across sessions
  • Flexible configuration through profiles and config files
Cons
  • Requires Incus (not as widely known as Docker)
  • macOS support may be limited (mentioned but not detailed)
  • Linux host required; no native Windows support
  • Setup complexity may be higher than simpler container solutions
  • Still in early development (not a polished product)

Best For

Running AI coding agents with full machine access without risking the host systemPersistent development environments for AI tools that survive rebootsTesting AI agents in isolated environments with monitoringRunning multiple AI agents in parallel with isolation from each otherSecure experimentation with AI tools without exposing personal credentials

FAQ

What is Code On Incus?
Code On Incus (COI) is a free open-source tool that gives each AI coding agent its own isolated full-system container with root access, systemd, and Docker, while providing active security defense against threats.
How does COI protect my credentials?
COI keeps SSH keys, environment variables, and Git tokens on the host. They are never exposed to AI tools unless you explicitly mount them.
What AI coding tools are supported?
Currently supported: Claude Code, opencode, and pi. Aider and Cursor are coming soon.
Is COI a product or a startup?
No, COI is described as 'Not a product, not a startup - a tool that does the job.' It is built by developers for developers.
Can I use multiple AI agents simultaneously?
Yes, COI is designed for running multiple agents in parallel with isolation from each other.