The Agent Runtime

The machine your agent controls end to end

Runtime, networking, and lifecycle controlled directly by your agent — no glue code, no manual setup.

Runs the stack you already use

OpenClaw

Codex

OpenCode

Claude Code

Langchain

n8n

Qdrant

Node

Python

Postgres

Clickhouse

What is Oblien

What the agent gets inside.

A real machine it controls natively. Spin one up for 30 seconds or run one for months.

Any stack, any framework

Node.js, Python, Go, Rust, or your own Docker image. Agents, apps, services - running in seconds.

Docker images. Real isolation.

Your existing images work unchanged - each workspace gets its own hardware-isolated VM, not a shared runtime.

Dashboard or API

Click through the UI or drive everything with the SDK and REST API - same environment, no feature gap.

Spin up. Ship it. Drop it.

Thirty seconds then gone, or months as a live product with a custom domain - you decide.

How it works

From zero to running in seconds.

Three steps. Whether it runs for 30 seconds or 30 months.

Spin up an environment

Name it, pick an image, hit run. Seconds later it exists - isolated, networked, ready. No provisioning, no waiting.

Your agent takes over

It executes commands, writes files, runs workloads. Workspaces talk to each other over a secure internal network - agents, services, jobs, all wired together. Nothing exposed unless you say so.

Ship it or drop it

Expose a port, get an HTTPS URL, attach a domain - live in seconds. Run it for thirty minutes or thirty months. Or delete it and leave nothing behind.

nothing exposed unless you say so

AI Agents

Isolated workspaces for every agent

Each agent gets its own Machine. They run concurrently, never interfere, and clean up after themselves.

Full OS with root access
Isolated from other agents
Auto-destroy on completion

Full Operating System

Every workspace is a real VM with its own kernel, filesystem, and init system. Not a container - a real machine.

Millisecond Boot

Workspaces are ready before your agent finishes its first inference. No cold-start penalty.

Hardware Isolation

Each VM runs on dedicated resources. A compromised workspace can never reach another.

Root Access

Install packages, compile code, run servers. Your agent has full sudo - no permission hoops.

AES-256 Encryption

Full-disk encryption at rest. Storage is securely erased on workspace deletion - no residual data.

Real Networking

Dedicated network interface per workspace. Outbound internet, DNS resolution, port exposure - not proxied.

Workspace-to-Workspace

Workspaces can communicate over an internal network. Build multi-agent systems that coordinate in real time.

Multi-Zone Routing

Route workspace traffic through the nearest zone for lowest latency. Switch regions instantly - no migration, no downtime.

Snapshots & Cloning

Freeze the entire machine state - memory, disk, processes. Restore later or clone a hundred times.

SSH Access

Direct SSH into any running workspace. Debug live, inspect logs, or hand off to a human operator.

Live Resize

Scale CPU, memory, and disk on a running workspace without restart. Pay only for what you use.

HTTPS Preview URLs

Expose any workspace port to the internet instantly. Auto-generated *.preview.oblien.com URL with TLS.

Ready-Made & Custom Images

Pick from Node.js, Python, Go, Rust, Redis, PostgreSQL and more - or bring your own image.

Managed Workloads

Run named background processes with independent lifecycles. Stream logs, monitor health, restart automatically.

Pause & Resume

Freeze the entire VM - processes, memory, everything. Resume instantly. Zero cost while paused.

TTL & Auto-Expire

Set a time-to-live on any workspace. Auto-stop or auto-delete when it expires. Extend with keep-alive pings.

Zero Trust Networking

All traffic blocked by default. Explicitly allow hosts, CIDRs, and ports per workspace. Dedicated outbound IPs available.

Real-time Metrics

Stream live CPU, memory, disk, and network stats via SSE. Track usage history across all workspaces.

Env Vars & Init Commands

Inject environment variables and startup commands at creation. Auto-delete on exit. Wait for full init.

Low Cost

Pay-as-you-go from $0.005/min. No idle charges on ephemeral workspaces. Free tier included.

See the API

A few lines to full control.

Create, control, and destroy workspaces with plain HTTP. No SDK required - any language, any framework.

AuthBearer token

Latency<50ms API response

FormatsJSON · SSE · WebSocket

workspace.ts

import { Oblien } from "oblien"
​
const client = new Oblien()
​
// Create a workspace
const ws = await client.workspaces.create({
  image:  "ubuntu-22.04",
  vcpu:   2,
  memory: 1024,
  zone:   "us-east-1"
})
​
// Execute a command
const res = await ws.exec("node -v")
console.log(res.stdout)
​

Runtime API

End-to-end control from inside

A REST + WebSocket server runs inside every workspace on port 9990. Full programmatic control - no external APIs, no proxies.

Run commands

Execute synchronously or stream real-time output. Up to 50 concurrent tasks with stdin and configurable timeouts.

Filesystem access

Read, write, delete, and stream the entire filesystem. Recursive trees, gitignore filtering, and atomic writes.

Interactive terminals

Multiplexed WebSocket PTY sessions with binary I/O, resize support, 64 KiB scrollback, and auto-reconnection.

Full-text search

Ripgrep-powered regex search with context lines, file type filters, and case control. Results grouped by file.

File watcher

Watch directories for create, write, and delete events over WebSocket. 50 ms debounce with smart excludes.

Workspace transfer

Move files directly between workspaces over the internal network. Streaming multipart with integrity checks.

REST, WebSocket, and SSH - same API, two access paths.

See the docs

	Serverless	Traditional VMs	Oblien
Boot time	Cold starts	Minutes	Milliseconds
Isolation	Shared runtime	Full VM	Full VM
State	Stateless	Persistent	Persistent
Root access	No	Yes	Yes
Filesystem	Ephemeral / none	Full disk	Full disk
Long-running	Timeout-limited	Always-on	Always-on
Pricing	Per-invocation	Hourly / reserved	Per-second, capped
Idle cost	Zero	Full price	Zero when stopped
Scale to zero	Yes	No	Yes
SSH access	No	Yes	Yes
Networking	Outbound only	Full control	Full control
Multi-tenancy	DIY	DIY	Built-in namespaces

Stop choosing between speed and power. Oblien gives you a real machine every time - it just happens to boot in milliseconds and cost nothing when you're not using it.

Claim 500 free credits

Launch workspaces

Spin up VMs with the CPU, RAM, and disk you need.

Monitor usage and set budgets

CPU, resident memory and network usage consume credits. Choose a finite namespace budget and top up when needed; idle memory still has a cost.

500 free credits on signup

No credit card required

Start free

Loading estimate…

Loading current discounts…

Get in touch

Questions, partnerships, or feedback - we're here.

Email us Discord Twitter