The base for your agents.

Not your files, no. The command line that starts each machine contains no 9p mount, no virtiofs and no shared folder of any kind, so there is nothing for the agent to read even as root. What it does have is an ordinary internet connection, which means it can reach the same network you are on — including services running on your own machine. Isolation here is of your disk and your account, and we would rather say that plainly than let you assume more.

It never goes into the machine’s record and never appears on a command line. Your computer hands it to the machine through the machine’s own firmware, and the machine writes it once on first boot into a private file only the agent’s user can open. That file lives on that machine’s disk until you delete the machine — so the key is out of your shell history and out of your process list, but it is not gone. If that is not acceptable, run Claude Code instead: it signs in with your subscription through the browser we are already streaming to you, and no key exists to store.

NIX is the built-in operator and is always on. Alongside it you can run Claude Code, OpenCode, Hermes or Open Claw in a real terminal, chosen per machine when you create it. All of them are installed into the base image when you build it, so a machine starts with the one you picked already running.

Three gigabytes each by default, so roughly three or four on a sixteen-gigabyte computer. AB01 works the ceiling out from your real memory and core count and will not let you set a default above it. A hard cap on how many run at once is there if you want it, but it is off until you set it — so nothing stops you from starting one machine too many.

Busy. Each machine is a full computer with a browser inside it, so three of them will spin your fans, warm the chassis and cost you real battery — this is not a background process you will forget about on a laptop running on its own power. Plugged in, a recent computer carries three or four without becoming unpleasant to work on. If you want them running all day, run them on a computer that is not the one you are typing on.

A computer that can run virtual machines, and QEMU. You build the base image once — ten to twenty minutes, mostly spent downloading a Debian cloud image and installing the agents into it — and every machine after that is an overlay on top of it.

Its disk is removed and it is gone. There are no snapshots yet, so there is nothing to roll back to and nothing left behind — deliberately, for now, but it does mean a machine you spent an hour setting up cannot be saved. Snapshots are the first thing on the roadmap for exactly this reason.

Free for one machine at a time. Ten dollars a month, or two hundred and fifty once, takes that limit off — and either way it runs entirely on hardware you already own, so there is no meter and nothing to rent. You pay whatever your model provider charges, directly to them, or nothing at all if you point it at a local model.

For a team around one computer, yes — several people can watch and drive the same machine at once. For a company, not yet: AB01 binds to your own machine, everyone signed in sees every agent on it, and a machine has no owner to enforce anything finer. That is why this is early access rather than a sign-up button.