Open Agent Broker
Open-source runtimes and native apps for coding agents. Instruct them from chat, take over their terminal, lend them a computer, and broker their GitHub access.
Each piece works on its own. Together they make one loop: an agent in a sandbox, your hands in its terminal, its hands on your computer.
The original Open Agent Broker. Mention a bot in Discord or Slack (or Telegram, LINE, Feishu/Lark, Google Chat, WeCom and Teams through gateway adapters) and it drives an ACP coding CLI such as Kiro, Claude Code, Codex, Gemini or Copilot over stdio JSON-RPC.
For instructing coding agents from team chat, one thread per task.
github.com/openabdev/openabA small runtime that hands out a shell inside a locked-down container: uid 1000, no sudo, a read-only root filesystem and no host credentials. It is reached over a WireGuard tailnet with per-session tokens.
For attaching to the same image and workspace your agent works in, and looking at what it left behind.
github.com/openabdev/openab-pty
The native Mac client for OpenAB PTY. Agents from every major vendor, each in its own sandbox on your own infrastructure, with split panes, voice input and sessions that keep running after you quit the app.
For running and watching many coding agents from one Mac.
connect.openab.dev
Your iPhone becomes a private push-to-talk remote for OpenAB Connect. Speech is transcribed on the device, and only terminal-safe text is sent to the selected Mac session.
For talking to your agents from across the room instead of typing.
connect.openab.devA thin daemon on a Mac or Linux box you own that exposes it to an agent elsewhere as MCP servers: shell, screenshots, mouse, keyboard, AppleScript and a browser. Every call needs both a Tailscale identity and a bearer token.
For letting a sandboxed agent build in Xcode, drive the Simulator and check the screen on a machine you own.
github.com/openabdev/openab-computerLets agents use tools on computers that can only dial out. Each computer dials the switchboard over one WebSocket, and the switchboard relays MCP calls to it under a deny-by-default allowlist per caller. It runs no tools and stores nothing.
For lending the browser on a machine in your own network to cloud agents without opening an inbound port.
github.com/openabdev/openab-sbAgents get GitHub's MCP tools, REST and GraphQL reads, and even git push without holding a GitHub credential. octobroker checks each agent's revocable key against a default-deny tool and repo policy, then mints short-lived, repo-scoped GitHub App tokens.
For giving a fleet of agents GitHub access you can scope, audit and revoke.
github.com/openabdev/octobrokerQuestions, bug reports and show-and-tell happen in the OpenAB Discord.
Join the OpenAB Discord