Skip permissions,
responsibly.

Run coding agents in parallel, each in its own isolated container. Host yaac on your laptop, a server, or a Kubernetes cluster.

Download for Mac View on GitHub

Apple silicon · Linux: install from source

$ brew trust bsklaroff/yaac && \
  brew install --cask \
  bsklaroff/yaac/yaac-desktop
Works with
  • Claude Code
  • Codex
  • OpenCode
  • Pi

Pick a coding agent per workspace with a chat or terminal UI.

yaac with workspaces in two groups, two of them running and two queued, and an OpenCode chat summarizing the light theme it added

Click the image to zoom · ← → to switchTap the image to zoom
Features

Orchestrate your agents, scalably and collaboratively.

Agents run sandboxed, coordinate with each other, and stay visible to your team.

Sandboxing

  • Agents never see your secrets
  • gVisor container isolation
  • Customizable Docker image

Orchestration

  • Spawn and message sibling agents
  • Queue follow-up workspaces
  • Works fully sandboxed
$ yaac-mama list $ yaac-mama create --tool codex \ "Write e2e tests for auth" $ yaac-mama send 3f2a91c0 \ "Tests are in, rebase on main" $ yaac-mama queue \ --parent-workspace 3f2a91c0 \ "Write the changelog entry" $ yaac-mama history 3f2a91c0

Collaboration

  • Automatic sign-in over Tailscale
  • Share skills and config
  • View teammates' agents
AAda (you)ada@acme.dev3 running
GGracegrace@acme.dev2 running
LLinuslinus@acme.devidle
MMargaretmargaret@acme.dev1 running
KKenken@acme.devidle
How it works

One app, any number of servers.

Point the app at your laptop, your team's server, or a cloud cluster, and switch between them whenever you need.

Two ways to run

Feeling brave? Go containerless.

Install a cluster for full isolation, or run directly on the host like other agent managers.

KubernetesContainerless
Start withyaac cluster installyaac server start
Agents runIn gVisor-isolated podsOn your computer, as you
Git workspaceFresh clone per agentFresh clone per agent
CredentialsPlaceholders; the proxy swaps in real onesReal tokens in the workspace
NetworkPer-project allowlistUnrestricted
EnvironmentCustomizable Docker imageYour computer's own tools
Runs onkind on one machine, k3s on a few servers, or cloud-managed on AWS EKSAny Mac or Linux machine
Why Yet Another Agent Container

You own the software factory.

Building for an open-source, self-sovereign, cooperative future.

Self-hosted

Your code, credentials, and agent transcripts are stored on machines you control. Runs on open-source infrastructure.

Scalable

Start on your laptop, then scale out to a few servers or a cloud-managed cluster.

Collaborative

Host one server for you and your friends, or for your whole team.

FAQ

Questions

Is it open source?

Yes. yaac is fully open source under the MIT license.

Which agents does it support?

Claude Code, Codex, OpenCode, and Pi.

Can I use my existing subscription?

Yes. Sign in with the agent subscriptions or API keys you already have, under Settings → Credentials.

Do I need Kubernetes?

No. yaac server start runs agents directly on your machine, with no cluster. For isolation, yaac cluster install sets up a single-machine kind cluster for you, or installs onto a cluster you already run.

Where do my credentials live?

On your yaac server. Workspaces on Kubernetes only see placeholders; the egress proxy swaps in real tokens on outgoing requests, and only to hosts on the project's allowlist.

Can my team share one server?

Yes. Serve it on your tailnet and each teammate signs in as themselves, with their own projects and credentials. Everyone can see each other's workspaces read-only. See multi-user installs.

Does it run on Linux?

The server does, installed from source. The desktop app is macOS-only for now, but the full web app works in any browser.

What does yaac stand for?

Yet Another Agent Container.

Get yaac

Free, open source, and self-hosted.

Download for Mac View on GitHub 
$ brew trust bsklaroff/yaac && \
  brew install --cask \
  bsklaroff/yaac/yaac-desktop