Valet

Valet is an open-source, self-hosted system for running cloud coding agents, published by dropalltables under the MIT license. It runs Claude Code and Codex in per-thread sandboxes and is deployed with a single docker compose setup on a Linux server or Mac.

What It Is

Valet is a self-hosted alternative to hosted cloud agent products, as its README describes it ("self-hosted cursor cloud agents / amp orbs / etc"). Each agent thread runs in its own Docker sandbox, and a web interface served on port 3000 is used to manage it. Accounts are added under settings: a Claude setup-token, a Codex sign-in or API key, and optionally a GitHub token for private repositories and pull requests.

Setup Path

Installation means cloning the repository, copying .env.example to .env, setting a Postgres password, a secret key and a Valet password, then building the sandbox profile and starting compose. It requires Docker engine 24+ and compose v2. For domain deployments, port 3000 is reverse proxied with websockets and a wildcard subdomain, and the README includes steps for deploying through Coolify.

Project Configuration and Services

Repositories can include a .valet/ directory. .valet/setup runs once after clone and .valet/resume runs on every wake. .valet/services.yaml defines processes to keep running, with optional ports, health paths and a browser flag that shows a service in the services tab. Inside the sandbox, the valet service commands (start, list, logs, restart, remove) and valet url <port> manage them.

Security Model

The core component holds the Docker socket and only the web component publishes a port. Agents have sudo inside their containers, so the README advises treating a sandbox as untrusted beyond its repository. On cloud hosts it recommends blocking the metadata endpoint with an iptables rule.