The Agent Runtime

The machine your agent controls end to end

Runtime, networking, and lifecycle controlled directly by your agent — no glue code, no manual setup.

Runs the stack you already use

OpenClaw

Codex

OpenCode

Claude Code

Langchain

n8n

Qdrant

Node

Python

Postgres

Clickhouse

What is Oblien

What the agent gets inside.

A real machine it controls natively. Spin one up for 30 seconds or run one for months.

Any stack, any framework

Node.js, Python, Go, Rust, or your own Docker image. Agents, apps, services - running in seconds.

Docker images. Real isolation.

Your existing images work unchanged - each workspace gets its own hardware-isolated VM, not a shared runtime.

Dashboard or API

Click through the UI or drive everything with the SDK and REST API - same environment, no feature gap.

Spin up. Ship it. Drop it.

Thirty seconds then gone, or months as a live product with a custom domain - you decide.

How it works

From zero to running in seconds.

Three steps. Whether it runs for 30 seconds or 30 months.

Spin up an environment

Name it, pick an image, hit run. Seconds later it exists - isolated, networked, ready. No provisioning, no waiting.

Your agent takes over

It executes commands, writes files, runs workloads. Workspaces talk to each other over a secure internal network - agents, services, jobs, all wired together. Nothing exposed unless you say so.

Ship it or drop it

Expose a port, get an HTTPS URL, attach a domain - live in seconds. Run it for thirty minutes or thirty months. Or delete it and leave nothing behind.

nothing exposed unless you say so

AI Agents

Isolated workspaces for every agent

Each agent gets its own Machine. They run concurrently, never interfere, and clean up after themselves.

Full OS with root access
Isolated from other agents
Auto-destroy on completion

Full Operating System

Every workspace is a real VM with its own kernel, filesystem, and init system. Not a container - a real machine.

Millisecond Boot

Workspaces are ready before your agent finishes its first inference. No cold-start penalty.

Hardware Isolation

Each VM runs on dedicated resources. A compromised workspace can never reach another.

Root Access

Install packages, compile code, run servers. Your agent has full sudo - no permission hoops.

AES-256 Encryption

Full-disk encryption at rest. Storage is securely erased on workspace deletion - no residual data.

Real Networking

Dedicated network interface per workspace. Outbound internet, DNS resolution, port exposure - not proxied.

Workspace-to-Workspace

Workspaces can communicate over an internal network. Build multi-agent systems that coordinate in real time.

Multi-Zone Routing

Route workspace traffic through the nearest zone for lowest latency. Switch regions instantly - no migration, no downtime.

Snapshots & Cloning

Freeze the entire machine state - memory, disk, processes. Restore later or clone a hundred times.

SSH Access

Direct SSH into any running workspace. Debug live, inspect logs, or hand off to a human operator.

Live Resize

Scale CPU, memory, and disk on a running workspace without restart. Pay only for what you use.

HTTPS Preview URLs

Expose any workspace port to the internet instantly. Auto-generated *.preview.oblien.com URL with TLS.

Ready-Made & Custom Images

Pick from Node.js, Python, Go, Rust, Redis, PostgreSQL and more - or bring your own image.

Managed Workloads

Run named background processes with independent lifecycles. Stream logs, monitor health, restart automatically.

Pause & Resume

Freeze processes and resume them later. Paused RAM remains allocated and billed under PAYG; monthly pricing stays fixed.

TTL & Auto-Expire

Set a time-to-live on any workspace. Auto-stop or auto-delete when it expires. Extend with keep-alive pings.

Zero Trust Networking

All traffic blocked by default. Explicitly allow hosts, CIDRs, and ports per workspace. Dedicated outbound IPs available.

Real-time Metrics

Stream live CPU, memory, disk, and network stats via SSE. Track usage history across all workspaces.

Env Vars & Init Commands

Inject environment variables and startup commands at creation. Auto-delete on exit. Wait for full init.

Flexible Billing

Choose capped pay-as-you-go or prepaid monthly capacity. Compare current resource prices in dollars before purchasing.

See the API

A few lines to full control.

Create, control, and destroy workspaces with plain HTTP. No SDK required - any language, any framework.

AuthBearer token

Latency<50ms API response

FormatsJSON · SSE · WebSocket

workspace.ts

import { Oblien } from "oblien"
​
const client = new Oblien()
​
// Create a workspace
const ws = await client.workspaces.create({
  image:  "ubuntu-22.04",
  vcpu:   2,
  memory: 1024,
  zone:   "us-east-1"
})
​
// Execute a command
const res = await ws.exec("node -v")
console.log(res.stdout)
​

Runtime API

End-to-end control from inside

A REST + WebSocket server runs inside every workspace on port 9990. Full programmatic control - no external APIs, no proxies.

Run commands

Execute synchronously or stream real-time output. Up to 50 concurrent tasks with stdin and configurable timeouts.

Filesystem access

Read, write, delete, and stream the entire filesystem. Recursive trees, gitignore filtering, and atomic writes.

Interactive terminals

Multiplexed WebSocket PTY sessions with binary I/O, resize support, 64 KiB scrollback, and auto-reconnection.

Full-text search

Ripgrep-powered regex search with context lines, file type filters, and case control. Results grouped by file.

File watcher

Watch directories for create, write, and delete events over WebSocket. 50 ms debounce with smart excludes.

Workspace transfer

Move files directly between workspaces over the internal network. Streaming multipart with integrity checks.

REST, WebSocket, and SSH - same API, two access paths.

See the docs

	Serverless	Traditional VMs	Oblien
Boot time	Cold starts	Minutes	Milliseconds
Isolation	Shared runtime	Full VM	Full VM
State	Stateless	Persistent	Persistent
Root access	No	Yes	Yes
Filesystem	Ephemeral / none	Full disk	Full disk
Long-running	Timeout-limited	Always-on	Always-on
Pricing	Per-invocation	Hourly / reserved	Capped PAYG / monthly
Idle cost	Zero	Full price	PAYG storage / fixed monthly
Scale to zero	Yes	No	Yes
SSH access	No	Yes	Yes
Networking	Outbound only	Full control	Full control
Multi-tenancy	DIY	DIY	Built-in namespaces

Stop choosing between speed and power. Oblien gives you a real machine every time - it just happens to boot in milliseconds and cost nothing when you're not using it.

Choose your plan

Get credits and resource limits for one or many workspaces.

Choose how to use your credits

Pay as you go for usage, or spend credits upfront on a monthly CPU, RAM and storage pool.

Track usage and coverage

Track your credit balance, spending and savings. Top up credits when needed. Managed proxy transfer is optional.

Try metered workspaces

Your introductory balance is separate from monthly plans

Start free

Choose how you pay

Per resource pool

Pay as you goRecorded usage with a monthly cap

Metered

Monthly capacityA shared pool for the paid month

Prepaid

Managed proxy transferOnly when using the managed proxy

Optional

Current pricesView live rates

Monthly compute has no extra credit allowance to exhaust

Retained storage is billed after compute coverage ends

Get in touch

Questions, partnerships, or feedback - we're here.

Email us Discord Twitter