Nvidia OpenShell lets AI agents roam your files and APIs without ever seeing your credentials
OpenShell is a safe, private runtime for fleets of autonomous AI agents. It enforces policies at the kernel level—confining file access, system calls, and network connections—and uses formal verification to flag risky policy changes before they're applied. Agents never see real credentials; OpenShell injects them only for approved endpoints. The 0.1.x release adds a stable cadence, new isolation primitives, and expanded APIs. SDKs are available for Python, TypeScript, Go, and Rust.
Agents are most useful when they can read files, install packages, call APIs, and use credentials. OpenShell gives them that capability without giving them unrestricted access to your data, secrets, or network.