claude-managed-agents-selfhost
Use for enterprise hosted-control agents — the agent loop runs at the provider while execution happens on your own infrastructure — when you want a managed control plane but data and code must stay on your machines.
- Score
- 98.9322 signals
- Evidence
- 3,876 stars · 836 forks
- Last commit
- as last read from GitHub; most reads are from 2 Sep 2026 or later
- Listed
Install
No one-command install. Set it up from its source.
Alternatives · Sandbox
- microsandbox8,436 stars · 454 forks99.100
What it is
A hosted-control runtime pattern: the agent's reasoning loop is managed by the provider, but the actual execution (tool calls, code, data access) happens on infrastructure you operate. It separates the control plane (managed) from the data plane (yours) — the enterprise answer to "we want managed orchestration without sending our data out."
When to use it
For enterprise deployments where a managed agent loop is desirable for reliability and updates, but data residency and execution must remain on-premises. The trigger is "managed brains, our hands."
How to install / invoke
Run a worker that polls the provider for work using an environment key, and execute the dispatched actions on your infra, with the appropriate beta API header set. Pair with tunnels to reach your private MCP servers.
Notes
This is the hosted-control point on the spectrum between fully managed sandboxes and fully self-hosted ones. Choose it when control-plane convenience and data-plane ownership both matter. This space moves fast — re-check the current API surface before committing.
Related
microsandbox
Use as the OSS self-hosted sandbox when you need to run agent code on your own infra — libkrun-based microVM isolation with no per-sandbox vendor cost, the escape hatch from a managed runtime at high volume.
mcp-tunnels-cloudflared
Use to let a hosted agent reach a private-data MCP server behind your firewall — an outbound tunnel plus a proxy, with per-server OAuth — so internal tools are usable without exposing them to the public internet.