Scoped project context
An agent can read the projects, deployments, redacted logs, and environment metadata its key is allowed to see.
Agent Workspaces · design partner program
Build with your agent. Keep production under your control.
We are shaping a separate workspace for coding agents that work alongside a Host Little app project. The first cohort helps us prove the workflow and safety controls before any self-serve code-execution product opens.
Use today
Give an agent a safe operating lane.
Existing App Hosting projects already have scoped controls for an agent that helps operate a deployment. This is not a computer for arbitrary code; it is a bounded way to inspect and propose changes to a project you own.
Explore App Hosting controlsProject agent access
Owner-controlled changes
Environment updates and redeployments wait for approval by default. Any autonomous window is explicit and time-limited.
Secrets stay out of the conversation
Secret values and owner-only database connections are not returned through the agent API.
The boundary matters
A useful agent does not need the keys to the kingdom.
The design partner program is an input channel, not access to a sandbox. We will not run untrusted code on the Host Little control plane, in an existing customer runtime, or on a developer workstation. A future workspace must earn that access through dedicated isolation, restricted networking, measured usage, auditable actions, and a tested emergency stop.
Now
Project-scoped API
Use explicit key scopes, redacted reads, approval-first writes, and bounded autonomous windows for existing projects.
Next
Private proof
Validate the workspace job, expected duration, repository permission, network needs, and cost ceiling with a small cohort.
Before access
Dedicated sandbox product
Release only after isolation, egress controls, resource limits, snapshots, metering, abuse response, and recovery have passed production checks.
We will be direct about what is available. Joining the program does not grant access to an agent computer, a production credential, or another customer's project.
Design partner cohort
Help design the right workspace.
Tell us what your agent needs to do, what it may touch, and the boundary you need. We will use that to select a small design partner cohort before opening any private beta.