isx

Give your AI coding agents their own machines, not your credentials.

An AI agent in your terminal can read your API keys, your GitHub token, your ~/.ssh and every repo you have checked out. Your IDE and build tools execute anything the agent writes.

isx onboards agents the way you’d onboard a new teammate:

• A real machine of their own. Each agent gets a full Linux workstation: its own filesystem, init system, networking and process tree. It can dnf install, run Docker Compose, use strace and nested containers, because it is a real system, not an app container. One flag gives the agent a hardware-isolated KVM virtual machine instead, when you want the strongest isolation.
• Zero credential exposure. API keys and tokens never enter the machine in any form. A proxy on your host adds them to the agent’s requests as the requests leave the machine, so claude, pi, gh, git and curl work unmodified inside it. See Credential Isolation.
• Instant branches. Branch a prepared template like you’d branch a repo: an instant copy-on-write clone. Use it, throw it away, branch again from a clean state.
• **Full…