Agent in a box - BoxLite Documentation

The other pattern. In Agent tools your agent runs on the host and reaches into a box; here the agent itself runs inside the box, and the box is its whole world. That trade is the point: the agent gets a real filesystem, a real shell, and real network access, and none of it is yours. Every page below installs one agent CLI, gives it credentials, and drives it — all verified end to end.

In this section

Claude Code

Anthropic’s CLI, in a box where it can edit and execute freely. The flagship.

Codex

OpenAI’s Codex CLI, executing without host access.

Pi

The Pi coding agent, reading and writing inside the box.

OpenCode

OpenCode, with its provider configured without writing secrets to disk.

Hermes

Hermes from its official image — one-shot prompts or a session.

Which page do I want?

You are asking	Page
Which agent should I start with?	run claude code
How do I give the agent an API key safely?	secrets and security
How do I stop the agent reaching the internet?	network access
How do I keep its work after the box is gone?	volumes

​In this section